last executing test programs: 13m5.523937063s ago: executing program 32 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 8m29.658840744s ago: executing program 33 (id=4834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lstat(0x0, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) 7m37.537959822s ago: executing program 34 (id=5585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, {0x0, 0x4e22, 0x8}}}}}, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) syz_usb_ep_write(0xffffffffffffffff, 0x39, 0x0, 0x0) 7m3.161682726s ago: executing program 3 (id=5846): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x21}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 7m3.122833127s ago: executing program 1 (id=5847): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 7m3.082613807s ago: executing program 3 (id=5848): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x110000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63be}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="0000020000c70d00000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), 0x0}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x6a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x6402, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) 7m3.008692228s ago: executing program 3 (id=5850): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0xfcecbb7753236c20, 0x6, 0x1, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x19, &(0x7f00000001c0)=""/25, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x3, 0xa384}, 0x10, 0x0, r1, 0x1, &(0x7f0000000640)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000800)=[{0x5, 0x2, 0xa, 0x7}], 0x10, 0x5, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x68a, 0x4}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, 0x0, &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x70000, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu G'], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000440)="746e29eb1c191bc8cf61ffac98e5500c3a2c16972a956a8fbf44fcdb3efcec0f7bb203ab8386cdec3ad98fe7918dc1afc14abf30a39b356b123f90c34bf1f1d25bcce89071af186f43080d38e4d2a0983c1800b5385fccc613c34545948a041c080da13a4c9df063acbab153e6373de766d5aa3440e35558809b4a4e502d841f54b35403c3cbf34e0097bd2d5598ae303f02ab624dc4b75ba6614a0c15742ebf7e2a25a258083e9b", &(0x7f0000000500)=""/190}, 0x20) 7m3.008528688s ago: executing program 1 (id=5851): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/222, 0xde) 7m2.977540389s ago: executing program 1 (id=5853): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 7m2.86017314s ago: executing program 1 (id=5854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), 0x0, 0x3}, 0x20) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f13815da3cbc479df45e1acd7454a155dd43645345f9a4cddab3d6d9d40e13de56bf656d77b7451f09e02bcb6cf96a4c0fce8ff74fe80460b51e50b4d8105ae605917a45734dbd377e5f99ad246b7485"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f782"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x11, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m2.611792143s ago: executing program 3 (id=5858): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 7m2.602823514s ago: executing program 7 (id=5859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 7m2.574144224s ago: executing program 7 (id=5860): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 7m2.524005084s ago: executing program 3 (id=5862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m2.486699375s ago: executing program 7 (id=5864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) close(0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x45) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r0, 0x4000, r5}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 7m2.247298208s ago: executing program 2 (id=5867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x18) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfdef) 7m2.165893739s ago: executing program 2 (id=5870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 7m2.036438551s ago: executing program 7 (id=5871): recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000140)=0xffff, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 7m2.036291761s ago: executing program 2 (id=5872): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 7m2.001728512s ago: executing program 2 (id=5873): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000010100)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESHEX, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeea, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 7m2.001427412s ago: executing program 7 (id=5874): getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4084}, 0x20008000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8041) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 7m1.851941134s ago: executing program 3 (id=5876): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x9, 0x2}, {0x2000000000, 0x4, 0x1, 0x0, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x7}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x40000000, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0xfffff2b9, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7m1.851733854s ago: executing program 2 (id=5877): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x802, 0x0, 0x0) 7m1.851369534s ago: executing program 7 (id=5878): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000001fa, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x600, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r3, 0x0, 0x800000000}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m1.800328125s ago: executing program 2 (id=5879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYBLOB="9711164a3cf1c6ed570058920ac1657a35573a02775f856ee139d210225901db25b576ec3e72835463f3d655c338877c8fc42fe6c80582f6053c11457c28a0fe5ba24c28123b02c4ac4ded25b445c3b2122d172c2b966b4deea05190316a8ab93696419f6bf3ee6d0e934960324b2881e4662a7fdb5d9e3f949d882e2e866a9a36e3f294482fd394954a40ae5ede205e321c90"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00403a00fc000000000000000000000000000000ff09000000000000000000"], 0x0) socket$inet(0x2, 0x2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x4000000, {}, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x40, @private=0xa010101}, 0x3bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @empty}}) 7m1.799960215s ago: executing program 1 (id=5880): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000"], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) 7m1.787243385s ago: executing program 1 (id=5882): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4420}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0}, 0x38) 6m25.983213228s ago: executing program 35 (id=5884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) 6m25.891072049s ago: executing program 36 (id=5882): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4420}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0}, 0x38) 6m25.84824171s ago: executing program 37 (id=5879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYBLOB="9711164a3cf1c6ed570058920ac1657a35573a02775f856ee139d210225901db25b576ec3e72835463f3d655c338877c8fc42fe6c80582f6053c11457c28a0fe5ba24c28123b02c4ac4ded25b445c3b2122d172c2b966b4deea05190316a8ab93696419f6bf3ee6d0e934960324b2881e4662a7fdb5d9e3f949d882e2e866a9a36e3f294482fd394954a40ae5ede205e321c90"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00403a00fc000000000000000000000000000000ff09000000000000000000"], 0x0) socket$inet(0x2, 0x2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x4000000, {}, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x40, @private=0xa010101}, 0x3bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @empty}}) 6m25.770441211s ago: executing program 38 (id=5876): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x9, 0x2}, {0x2000000000, 0x4, 0x1, 0x0, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x7}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x40000000, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0xfffff2b9, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6m25.727706332s ago: executing program 39 (id=5878): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000001fa, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x600, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r3, 0x0, 0x800000000}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.510002667s ago: executing program 9 (id=8871): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x78c, &(0x7f0000002580)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_read_part_table(0x1060, &(0x7f0000001140)="$eJzsz8FtwkAQBdAfbby2lUMuKcC3HJIrjYBogipogTa4QBF0QRN0ALINLSAf3tNKX7s7M9KERTjM8XvOaihN0+aetEnK8399SfI33brplG4syddrwGf6MT6SPqchye6WZPNzber4Xup/kn2ffCd1bqnZHt++KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs0CMAAP//M3sKqQ==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000086c0)={'ip6_vti0\x00', &(0x7f0000008640)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xc, 0x7, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x2, 0xfffffffb}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = syz_pidfd_open(0x0, 0x0) fallocate(r2, 0x40, 0x401, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x4001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x5}, {0xfffffffffffffdd5, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000000013e08658e35951ccafa200000000000007020000f8ffffffb6030000080000a5b70400000000000081c2f728f581e400"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x1051c2, 0x16c) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sendfile(r10, r10, 0x0, 0x800000009) 20.038630483s ago: executing program 9 (id=8881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x18, &(0x7f0000000140)=ANY=[], 0x1, 0x5ab, &(0x7f0000000b40)="$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") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000300)=@v3={0x3000000, [{0x3, 0x400}, {0x9, 0x56}], 0xee01}, 0x18, 0x2) 19.971462054s ago: executing program 9 (id=8883): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) rename(&(0x7f00000003c0)='./file1/file3\x00', 0x0) 19.925845364s ago: executing program 9 (id=8884): openat$tun(0xffffffffffffff9c, 0x0, 0x20b41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noload}, {@sysvgroups}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x444, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x3, 0x44240) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0ada68ccda00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff864c03e47688891c7d8eec2ea372501e93dd604f930900140600fc010000000000000000000000fe800000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000a40867043ef554766babe947d2d38f841ea28152c812939cc5541d9791d319c4a6ef562b59fa072cbba317e464ff55fcb3cb0803422fca271aa7c138397fc61818e3ad971c5599eab478d76f0bd7a2d9fdac84b5c6a72109b71dffa7f303740ca38b2b9ef4ae7a9547901a0dd80c35d45271c9e999d13bc73f7800d5"], 0x30}}, 0x0) 19.029480897s ago: executing program 9 (id=8893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x8, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40044) 18.144212349s ago: executing program 9 (id=8900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1d}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 18.143956169s ago: executing program 40 (id=8900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1d}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 9.929268712s ago: executing program 4 (id=8973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRESDEC], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 8.569741261s ago: executing program 4 (id=8985): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) 8.484382763s ago: executing program 4 (id=8986): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 5.567560322s ago: executing program 5 (id=9015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES32], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@struct={0xc, 0x5, 0x0, 0x4, 0x0, 0x9, [{0x5, 0x3, 0x5}, {0x0, 0x0, 0x6}, {0x4, 0x2}, {0x5, 0x3, 0x5}, {0xc, 0x1, 0x5}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x1}}, @func={0x5, 0x0, 0x0, 0xc, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/9, 0xb3, 0x9, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='mm_lru_insertion\x00'}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.780586293s ago: executing program 0 (id=9018): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$nl_route(r0, 0x0, 0x20000000) 4.698756314s ago: executing program 0 (id=9019): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) 4.682728465s ago: executing program 0 (id=9020): r0 = creat(&(0x7f0000000080)='./bus\x00', 0xcb) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) setuid(0xee01) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x8e96, 0x4, 0x1, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3, 0x300}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setitimer(0x0, 0x0, 0x0) 4.678595625s ago: executing program 5 (id=9021): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20c82, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") 4.632201485s ago: executing program 0 (id=9022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1ff}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x40000006) 4.631638895s ago: executing program 0 (id=9023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x18, &(0x7f0000000140)=ANY=[], 0x1, 0x5ab, &(0x7f0000000b40)="$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") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000300)=@v3={0x3000000, [{0x3, 0x400}, {0x9, 0x56}], 0xee01}, 0x18, 0x2) 4.530687477s ago: executing program 8 (id=9025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) fremovexattr(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r6, @ANYRES16=r4, @ANYBLOB="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"/449], 0xec}}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x580, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4c58, 0x0, 0xffffffff, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x400}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000080000000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='devlink_hwerr\x00', r2, 0x0, 0x200000000000}, 0x18) clock_gettime(0x6, &(0x7f0000000280)) r8 = gettid() fcntl$lock(r1, 0x6, &(0x7f0000000000)={0xf4e144b458aeb5f, 0x3, 0x5, 0xfffffffffffffff1, r8}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000000780)=ANY=[@ANYBLOB='system_u:systemZr:kernel_t:s0 /usr/lib/telepathy/mission-control-5 0'], 0x58) 4.518938917s ago: executing program 0 (id=9026): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x20000040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) getgid() close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") io_setup(0x7f, 0x0) io_submit(0x0, 0x0, 0x0) 4.476676808s ago: executing program 5 (id=9027): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x138, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7758}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}]}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x83}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x581eff5474c924bf}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}]}}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 4.459817878s ago: executing program 5 (id=9028): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x40) 4.432148538s ago: executing program 8 (id=9029): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8afcff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) 4.408607009s ago: executing program 5 (id=9030): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) connect$unix(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000a}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 4.407946109s ago: executing program 8 (id=9031): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES32], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@struct={0xc, 0x5, 0x0, 0x4, 0x0, 0x9, [{0x5, 0x3, 0x5}, {0x0, 0x0, 0x6}, {0x4, 0x2}, {0x5, 0x3, 0x5}, {0xc, 0x1, 0x5}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x1}}, @func={0x5, 0x0, 0x0, 0xc, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/9, 0xb3, 0x9, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='mm_lru_insertion\x00'}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.920978625s ago: executing program 8 (id=9032): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) 3.842106146s ago: executing program 8 (id=9033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1ff}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x40000006) 3.764480277s ago: executing program 8 (id=9034): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) 2.88857767s ago: executing program 4 (id=8995): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x78c, &(0x7f0000002580)="$eJzs3M9rXOUaAOD3nGaaNs29yYXL5d5Nr9BCC6WTpNm0K+NG3BQKBbc1JCch5CRTMpOaxEJTd4JQm42CILp36VYo9Q8QN1JQcKULQbTGhboZmR+ZtulkOm2TThufB07m+875znnfd87kyzmQMwH8bb1U+5FEDEbEhUazLo2Ig/XWoYj1xrjNu1enaksS1erFn5P62M3qUOtYW/seifou8d+IuF2IOPX2w3HLq2vzk3meLTX7I5WFyyPl1bXTcwuTs9lstjg2fm707Pj42dHxXav1+OvnDt/88tWNja8/q9w42nc6iYl63dGsbdcC3afxnhRiYtv6xb0I1kNJF2P6nkEeAAB0VrvOP9C8NivEUBzodJXmAg4AAABeSNX+arf+6HokAAAA8JxJotcZAAAAAHtr6/8Atp7t3avnYHfy0ysRMdwufl/9GeKIQ1GIiIHN5IHHD5LGbvBU1q9HxK2JNp+/bp5o7mz0XvPw7hyR3XarNv9MtJt/0tb8E23mn76t7054SjvPf/fiH9hh/rvQZYzPP/pfYcf418sr7xxtFz9pxU92iP9Gl/FvbLx7c6dt1U8iTrT9+5M8EKvD90OMzMzl7X61Wune/vPknZ3rjxh4KH6S1KMmneu/3GX9b23+Or/eIf7JY53PfyN+/wP71T4T7zXzSCPiZvO11t/YFuPYwjdfPBw5Wd+KP92o/6vvGxsecf5fa9X/cZf1f/dp/0qXQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAujYjBSNJiq52mxWLEkYj4dwykealcOTVTWl6crm2LGI5COjOXZ6MRMdToJ7X+WL19r39mW388Iv717eFG0Lk8K06V8uleFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDLkYgYjCQtRkQaEb8NpWmx2OusAAAAgF033OsEAAAAgD3n/h8AAAD2vye9/092OQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX7tw/nxtqW7evTpV609fWV2eL105PZ2V54sLy1PFqdLS5eJsqTSbZ8Wp0sKjjpdGxNi5WF4ZqWTlykh5de3SQml5sXJpbmFyNruUFZ5JVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyuwfqSpMWISOvtNC0WI/4REcNRSGbm8mw0Iv4ZEXeGCv21/livkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDXlVfX5ifzPFt6sRvV/VVO141IIp6DNNo3/jPQPCudBifrEXn2Q3Nkj1JNm+Gf5jiPl/y1R7wtvW78vwdzEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvVdeXZufzPNsqdzrTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOit9MckImrLiaHjg9u3Hkx+H6q/RsSbH158f2WyUlkaq63/pbW+8kFz/Zn7drz2LGsAAACAfe/lxxm8dZ++dR8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQrfLq2vxknmdLe9iI672uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBJ/BQAA//9uN7Jr") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_read_part_table(0x1060, &(0x7f0000001140)="$eJzsz8FtwkAQBdAfbby2lUMuKcC3HJIrjYBogipogTa4QBF0QRN0ALINLSAf3tNKX7s7M9KERTjM8XvOaihN0+aetEnK8399SfI33brplG4syddrwGf6MT6SPqchye6WZPNzber4Xup/kn2ffCd1bqnZHt++KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs0CMAAP//M3sKqQ==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000086c0)={'ip6_vti0\x00', &(0x7f0000008640)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xc, 0x7, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x2, 0xfffffffb}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = syz_pidfd_open(0x0, 0x0) fallocate(r2, 0x40, 0x401, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x4001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x5}, {0xfffffffffffffdd5, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000000013e08658e35951ccafa200000000000007020000f8ffffffb6030000080000a5b70400000000000081c2f728f581e400"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x1051c2, 0x16c) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sendfile(r10, r10, 0x0, 0x800000009) 1.969818362s ago: executing program 6 (id=9038): syz_clone3(&(0x7f0000000700)={0x220000, &(0x7f0000000380), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x15}, &(0x7f0000000600)=""/60, 0x3c, &(0x7f0000000640)=""/99, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000800)=@urb_type_interrupt={0x1, {0x7}, 0x4, 0x24, &(0x7f0000000a00)="86a5d0472b2faaaa070ec875bf955e0373163d2fbe86af84bf884b662f4c0b9d86ceb292a9e94009a884e1d50bd26deb6aee684c7d4e1dc4d6f5d92692667e1bc697df3328afbc33dc35ec86b590b006cc788c698e1087792e746559f0126cf6991657db90ca364d", 0x68, 0x4, 0x8, 0x0, 0x41, 0x0, &(0x7f0000000d00)="dbf43ddad1c53dac45aa45a9b8c3a9ee410020bb4baa74ff248642f87e000000f1ffffff00000000000000911781af4d47ba3f70ece6038dd189d199290ce15aa117cd5f5c0c05000000000000008dff8aed35f11e6ecd39a2d17a000000000000e47fcae168d2e81f6f4ed0f2d52002c3c733aecf8ca52101f1c30ed0f7826e93c4d717e82123a4d869a4765d5468430823ea898a080059404f7870c537d2c8ecf59c21c0f35db266a20d96bb760432b979a55a9e6339f1dc74b5"}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x20004, &(0x7f0000000340)='kmem_cache_free\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="16000000", @ANYRES16=r5, @ANYBLOB="010300000000009542d4"], 0x28}}, 0x40) 1.840923214s ago: executing program 6 (id=9039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) fremovexattr(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r6, @ANYRES16=r4, @ANYBLOB="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"/449], 0xec}}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x580, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4c58, 0x0, 0xffffffff, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x400}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000080000000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='devlink_hwerr\x00', r2, 0x0, 0x200000000000}, 0x18) clock_gettime(0x6, &(0x7f0000000280)) r8 = gettid() fcntl$lock(r1, 0x6, &(0x7f0000000000)={0xf4e144b458aeb5f, 0x3, 0x5, 0xfffffffffffffff1, r8}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000000780)=ANY=[@ANYBLOB='system_u:systemZr:kernel_t:s0 /usr/lib/telepathy/mission-control-5 0'], 0x58) 1.600334457s ago: executing program 6 (id=9040): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x40) 1.528168928s ago: executing program 6 (id=9041): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000640)="91f9ba24fca0977def860bc857be9b3c47f3e97bb91c07f4e71ea836189ab1ece34ff5945a781682e7a9cb37825f45d1197e862ce8301630795b0bc4957af217c5e02f0b41490f927b1f6e275aae7d451b0190ea0c79465a", 0x58}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="4e4882ccbe3fd7b6fa89e24ee49a044a52f3c320b7e0d509f24802dc7c76482961514f766fa239c8f6e6fb7cd79b10846c9d5be45bfac2814b1d810673074122ae7f8fa9a1d53fb6090c4edf105dfa64c6a83b04148923765915f6c8ae33d7e6f8c31443117a3797da4e1b8a57126382e0572d87941ac6def05fa61e6af9bcaebc268b3cb2faf6851027f785cd45c0859961afda774f7cd27e43f8fd9a4543ba8b1f97587aa982f3d1084ad1f5feb5113157a2554b76234dad48edf6d2b62718abc477240aaa6207415a73354a4177ff4618a4d45f7da5c0a522", 0xda}, {&(0x7f00000008c0)="bd234c45f2c1c0be8148eb887e2b3680dc4cb085b258fa3d58c60fe3b1c48a82fcc456a55ccbbc63ac8744140217cfaaf2e92ee6169f4067fb87cb9f7642ff56d88122f3890b5ed2a4c324fe87a27bf3ff5df2f598d4afbc41bcb74e23cf2c", 0x5f}, {&(0x7f0000000940)="6c8f3132d6d672c0a3b0575eca1506826191d6da3d", 0x15}, {&(0x7f0000000a00)="4046f318c8266af42360392c56245d5411ed7291ddb3c075b81599ba0de0a167a15a781166f85004e14402fe493b3b501bcd2c3236a855f415da5578b992f9d42b7f579fc259b2afba6a7a002e443e441d21b5c76ba4de769a9da1b011e4da78e2802817b3867a6f1dc8590ffdd7bad1b74a3280a8d0580a75240ec305cd7dda75d3ae7898163ce6542a687218c1db3ea5b4d6caa447eb339c94ea04233d39e538efb1c3d31b5588ebff54eaee4f5eafcb3bc88a3ace18adf7bdb598d1aa8466a60914ee936b9a2bdda8fe3288544abb1ebd3161b4cc91c77c991f902a0fdc482b039e5fc4ddec7e9abdfa40f0c08736", 0xf0}, {&(0x7f0000000b40)="b17c32ee3034c92dcf86cb20cb9ebedf69d3c3bee0d0a914a2987dfe9debca2942fc622ab54717235ae436fa674659ef4e0e53fce9d60a650f29b0196a5d8755f5e80108d4717e9fe65943fdbd9c384e33a63de978a39469ff198fd2b0dd37ce37af1f54177562a67e14b868b49d33177d769e7bc46f5db2e5c28c1c7253319bb26ec5e9fc5074f6e0a3179e98c116f151eaa28c07c79baf4a75ffc402eb9cca3345ded6c27fb6da43e9683eadbce8acd365ea8aa6bebc2b427fccc02db7403982b9d2d167ba42a1aa356473ac5d1428bf5cf1f63158bc35d9a27b0d8ba8017c4938d4e29972f54dd39205fa0a60404555c072f0de0d", 0xf6}, {&(0x7f0000000c40)="4eab58c7d0aa2fd5e0a1299c034c15f57e4986961aa4e0803479f744d59194e932335264e0a0d6af14c6acedc7e749540a9304ca3c620d2898d4e34da9d122812c88f91f65cefc6b420db0eedf6fdf14cb6b6dd1b981568288ef167564a2b176bccc04a06df3971849acc04a0a796ea726ff8013f7d150965d1a147877ae8ffca3720c79a110c4f530361434d90817bfc564f3bdcccc4201aabfcaca4052733f1cdf68b965ed4927f94096a1e11c1369dd6ed3ef82433c8c8df88d912cfab6088827ad5bcf71af187743612543606d3c275a45a2addf57ec093342ee301352", 0xdf}, {&(0x7f0000000d40)="362bf78f94d18fb5fb6b55667f3aa61f56825e567a145f74bb37c4db6766946d449fbe370be99daca68d73f7737e1d889190b6816d03f13529149b58360444ddf951d1e22e1b4f4d26ee028a296594b799f96ef48f691aaef18a96c51ad1a9544f22876ec4c2f52a9c60e6c8614d9108d02523042dc0482e8b4babd9afd0d453a260edaf33d2b4761f4b3e92723841dc97a25f4d5d6bdc078d91f41e1b0724249c6cdd20134cf988d05c8f9b0974329ed953d3915fd2482d20ea3e3f174170dfce514422c12b03b3933b49e039cd831a9c04f2b420ef65e2b839364b1c2cf8af1fb126507aebace20f02f4d379cac0", 0xef}], 0x9}}], 0x1, 0x20040800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000100)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001440)=[{&(0x7f0000000f00)=""/200}, {&(0x7f0000001000)=""/158}, {&(0x7f0000001500)=""/84}, {&(0x7f0000001140)=""/135}, {&(0x7f00000010c0)=""/54}, {&(0x7f0000001200)=""/180}, {&(0x7f00000012c0)=""/66}, {&(0x7f0000001340)=""/141}, {&(0x7f0000001400)=""/54}], 0x10000000000000b9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001580)="9df4249b0f04e1c13c09a6d66f9a988d2bd21a6e02a57bf7f44920b2bf0daef149682a6d2292750b9f577f9bcd9eae10d5644e57377901c0cde2efdd98303ed05de9d6c1765f5b1e93816409fee87f7fbb2d3d979c745991acef4a0f7135d92ebba457d35e6e9418b3d9f77e5008fb0247c910a4d7e94564ff7d2efcbe6652eaa839c4106ce8cd0ea2a2762b312c0ee4aaef2c7e8dff9c1791b127da", 0x9c}], 0x1, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x1420}, 0x0, 0x7afec406968e73a3, 0x1, {0x0, r4}}) socket$unix(0x1, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_pidfd_open(0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) 1.510643228s ago: executing program 4 (id=9042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) unshare(0x40020200) 1.429979509s ago: executing program 6 (id=9043): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001500010000000000000000000288"], 0x48}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000300)="1c0000001200050f0c01c00055647624aa731398b3a79e84d92001f005a021eb8877e476df8f84ab25bc71803db16b289c2256b511a24c439b58c5138d6282316e7392db6db2050a78ff7eb9c7de67c59ce1905425d7149b5774eeb8b74dfdacb6ac7074150e0c8d00f0d66557e25e7438d26b299d3cc38413e0000000", 0x7d, 0x0, 0x0, 0x0) 429.676413ms ago: executing program 6 (id=9044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x8, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40044) 121.899058ms ago: executing program 5 (id=9045): mount(0x0, 0x0, 0x0, 0x1000, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000c40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x7ffffffffffffffe, 0x38db0861, 0x2, 0x0, 0xd, 0x9d}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) dup(r0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2000}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) mremap(&(0x7f0000ed4000/0x4000)=nil, 0x200000, 0x4000, 0x0, &(0x7f0000c58000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) 0s ago: executing program 4 (id=9046): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x179c, 0x0) kernel console output (not intermixed with test programs): ve=1 [ 744.727680][ T29] audit: type=1400 audit(1746920661.768:35686): avc: denied { rename } for pid=27605 comm="syz.4.7981" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 744.750300][ T29] audit: type=1400 audit(1746920661.768:35687): avc: denied { unlink } for pid=27605 comm="syz.4.7981" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 744.977126][T27620] sit0: left promiscuous mode [ 745.007605][T27620] sit0: entered promiscuous mode [ 745.343600][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.452454][T27629] loop6: detected capacity change from 0 to 128 [ 745.483527][T27629] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 745.497650][T27629] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.794234][ T29] audit: type=1400 audit(1746920662.798:35688): avc: denied { read } for pid=27628 comm="syz.6.7989" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 745.817195][ T29] audit: type=1400 audit(1746920662.798:35689): avc: denied { open } for pid=27628 comm="syz.6.7989" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 745.840597][ T29] audit: type=1400 audit(1746920662.798:35690): avc: denied { map } for pid=27628 comm="syz.6.7989" path="socket:[86482]" dev="sockfs" ino=86482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 745.864055][ T29] audit: type=1400 audit(1746920662.798:35691): avc: denied { read write } for pid=27628 comm="syz.6.7989" path="socket:[86482]" dev="sockfs" ino=86482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 746.211028][T27645] vlan2: entered promiscuous mode [ 746.216294][T27645] vlan2: entered allmulticast mode [ 746.221443][T27645] bond0: entered allmulticast mode [ 746.428639][T27649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7993'. [ 746.648502][T21151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 747.524912][T27679] netlink: 'syz.8.8002': attribute type 16 has an invalid length. [ 747.532769][T27679] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.8002'. [ 747.549579][T27680] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 748.289213][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 748.289226][ T29] audit: type=1400 audit(1746920665.358:35694): avc: denied { mount } for pid=27686 comm="syz.9.8008" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 748.318236][ T29] audit: type=1400 audit(1746920665.358:35695): avc: denied { search } for pid=27686 comm="syz.9.8008" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.340671][ T29] audit: type=1400 audit(1746920665.358:35696): avc: denied { read } for pid=27686 comm="syz.9.8008" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.362864][ T29] audit: type=1400 audit(1746920665.358:35697): avc: denied { open } for pid=27686 comm="syz.9.8008" path="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 749.069868][T21146] block device autoloading is deprecated and will be removed. [ 749.144541][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8010'. [ 749.154712][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8010'. [ 749.486380][ T29] audit: type=1400 audit(1746920666.248:35698): avc: denied { remount } for pid=27698 comm="syz.9.8010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 749.506518][ T29] audit: type=1400 audit(1746920666.518:35699): avc: denied { create } for pid=27706 comm="syz.4.8011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 749.526342][ T29] audit: type=1400 audit(1746920666.518:35700): avc: denied { ioctl } for pid=27706 comm="syz.4.8011" path="socket:[87551]" dev="sockfs" ino=87551 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 749.656423][T27714] vlan2: entered promiscuous mode [ 749.661642][T27714] vlan2: entered allmulticast mode [ 749.666900][T27714] bond0: entered allmulticast mode [ 749.672034][T27714] ±ÿ: entered allmulticast mode [ 749.676917][T27714] bond_slave_1: entered allmulticast mode [ 749.946602][T27726] sit0: entered allmulticast mode [ 749.960634][T27726] sit0: entered promiscuous mode [ 750.263494][ T29] audit: type=1400 audit(1746920667.328:35701): avc: denied { read } for pid=27743 comm="syz.6.8022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 750.305295][T27747] loop6: detected capacity change from 0 to 256 [ 750.320771][T27747] FAT-fs (loop6): codepage cp869 not found [ 750.370568][T27753] loop6: detected capacity change from 0 to 2048 [ 750.389371][T27753] xt_hashlimit: size too large, truncated to 1048576 [ 751.126619][ T29] audit: type=1400 audit(1746920668.198:35702): avc: denied { read } for pid=27820 comm="syz.9.8027" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 751.150031][ T29] audit: type=1400 audit(1746920668.198:35703): avc: denied { open } for pid=27820 comm="syz.9.8027" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 751.550720][T27830] 8021q: VLANs not supported on vcan0 [ 751.572538][T27832] loop6: detected capacity change from 0 to 128 [ 751.581334][T27832] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 751.595003][T27832] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.454534][T21151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.652358][T27861] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8040'. [ 754.323961][T27877] loop4: detected capacity change from 0 to 128 [ 754.341840][T27877] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 754.355783][T27877] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.838876][T27887] 8021q: VLANs not supported on vcan0 [ 754.890988][T27875] sit0: left promiscuous mode [ 754.895772][T27875] sit0: left allmulticast mode [ 755.016255][T27875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.033528][T27875] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.046049][T27875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 755.058209][T27893] netlink: 'syz.0.8052': attribute type 16 has an invalid length. [ 755.069431][T27893] netlink: 'syz.0.8052': attribute type 1 has an invalid length. [ 755.077225][T27893] netlink: 'syz.0.8052': attribute type 1 has an invalid length. [ 755.085010][T27893] netlink: 'syz.0.8052': attribute type 2 has an invalid length. [ 755.092730][T27893] netlink: 64006 bytes leftover after parsing attributes in process `syz.0.8052'. [ 755.328201][T21146] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 756.369032][T27908] loop4: detected capacity change from 0 to 2048 [ 756.396543][T27908] EXT4-fs: Ignoring removed bh option [ 756.402004][T27908] EXT4-fs: dax option not supported [ 756.606392][T21151] block device autoloading is deprecated and will be removed. [ 756.708691][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 756.708708][ T29] audit: type=1400 audit(1746920673.778:35706): avc: denied { setopt } for pid=27898 comm="syz.9.8054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 757.044175][T27922] wg2: left promiscuous mode [ 757.048821][T27922] wg2: left allmulticast mode [ 757.117302][T27923] netlink: 'syz.4.8055': attribute type 13 has an invalid length. [ 757.204374][T27925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.214099][T27925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.677594][T27940] loop4: detected capacity change from 0 to 128 [ 757.696494][T27940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.721049][T27940] ext4 filesystem being mounted at /421/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 758.022403][ T29] audit: type=1400 audit(1746920674.848:35707): avc: denied { map } for pid=27939 comm="syz.4.8069" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 758.046884][ T29] audit: type=1400 audit(1746920674.848:35708): avc: denied { read write } for pid=27939 comm="syz.4.8069" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 759.680826][T21146] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 759.784650][T27964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8072'. [ 759.838245][ T29] audit: type=1400 audit(1746920676.788:35709): avc: denied { name_bind } for pid=27930 comm="syz.6.8065" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 759.859648][ T29] audit: type=1400 audit(1746920676.788:35710): avc: denied { write } for pid=27930 comm="syz.6.8065" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 759.883039][ T29] audit: type=1400 audit(1746920676.858:35711): avc: denied { firmware_load } for pid=27955 comm="syz.9.8072" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 760.231231][ T29] audit: type=1400 audit(1746920677.298:35712): avc: denied { validate_trans } for pid=27977 comm="syz.4.8079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 760.932809][T28003] sit0: entered allmulticast mode [ 760.942187][T28003] sit0: entered promiscuous mode [ 761.533175][T28015] xt_hashlimit: size too large, truncated to 1048576 [ 761.637315][T28023] loop4: detected capacity change from 0 to 256 [ 761.643989][T28023] vfat: Unknown parameter 'nnonumtail' [ 761.903596][T28029] IPv6: sit1: Disabled Multicast RS [ 761.946531][T28029] sit1: entered allmulticast mode [ 764.212103][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8108'. [ 764.580070][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.591216][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.600723][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.610422][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.620086][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.629406][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.638940][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 764.648372][T28073] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8109'. [ 767.149079][T28107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.164881][T28107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.418848][T21146] block device autoloading is deprecated and will be removed. [ 767.789649][T28123] loop6: detected capacity change from 0 to 1024 [ 767.796465][T28123] EXT4-fs: Ignoring removed nobh option [ 767.802070][T28123] EXT4-fs: Ignoring removed bh option [ 767.816924][T28123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.858635][T21151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.167910][T28145] sit0: left promiscuous mode [ 769.172719][T28145] sit0: left allmulticast mode [ 769.219420][T28145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.258669][T28152] loop6: detected capacity change from 0 to 256 [ 769.272627][T28152] vfat: Unknown parameter 'nnonumtail' [ 769.498775][T28158] IPv6: sit2: Disabled Multicast RS [ 769.508231][T28158] sit2: entered allmulticast mode [ 769.521490][T28161] loop4: detected capacity change from 0 to 1024 [ 769.567255][T28161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.611080][ T29] audit: type=1400 audit(1746920686.678:35713): avc: denied { ioctl } for pid=28160 comm="syz.4.8137" path="socket:[88049]" dev="sockfs" ino=88049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 769.715929][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.500849][T28212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.611112][T28232] vlan2: entered promiscuous mode [ 774.616188][T28232] bond0: entered promiscuous mode [ 774.621211][T28232] bond_slave_0: entered promiscuous mode [ 774.627013][T28232] bond_slave_1: entered promiscuous mode [ 774.632911][T28232] vlan2: entered allmulticast mode [ 774.638040][T28232] bond0: entered allmulticast mode [ 774.643160][T28232] bond_slave_0: entered allmulticast mode [ 774.648892][T28232] bond_slave_1: entered allmulticast mode [ 774.941718][ T29] audit: type=1400 audit(1746920692.008:35714): avc: denied { read } for pid=28244 comm="syz.4.8164" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 774.965243][ T29] audit: type=1400 audit(1746920692.008:35715): avc: denied { open } for pid=28244 comm="syz.4.8164" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 775.148695][ T29] audit: type=1400 audit(1746920692.068:35716): avc: denied { ioctl } for pid=28244 comm="syz.4.8164" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 775.352626][T28250] sit0: left promiscuous mode [ 775.357506][T28250] sit0: left allmulticast mode [ 775.384447][T28250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.437662][T28250] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.444394][T28247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.444670][T28247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.486070][T28250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.766443][ T29] audit: type=1400 audit(1746920692.838:35717): avc: denied { create } for pid=28264 comm="syz.4.8171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 775.847096][ T29] audit: type=1400 audit(1746920692.858:35718): avc: denied { read } for pid=28264 comm="syz.4.8171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 776.046194][T28274] IPv6: sit1: Disabled Multicast RS [ 776.091852][T28274] sit1: entered allmulticast mode [ 776.569879][T28287] loop6: detected capacity change from 0 to 128 [ 776.677602][T28287] syz.6.8178: attempt to access beyond end of device [ 776.677602][T28287] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 776.853858][ T51] kworker/u8:3: attempt to access beyond end of device [ 776.853858][ T51] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 777.174753][ T29] audit: type=1400 audit(1746920694.238:35719): avc: denied { bind } for pid=28293 comm="syz.4.8181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.194340][ T29] audit: type=1400 audit(1746920694.238:35720): avc: denied { listen } for pid=28293 comm="syz.4.8181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.214067][ T29] audit: type=1400 audit(1746920694.238:35721): avc: denied { accept } for pid=28293 comm="syz.4.8181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.238726][T28298] __nla_validate_parse: 62 callbacks suppressed [ 777.238742][T28298] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8181'. [ 777.423941][T28307] 8021q: VLANs not supported on vcan0 [ 778.458971][T28327] tipc: Started in network mode [ 778.463876][T28327] tipc: Node identity fffffffb, cluster identity 4711 [ 778.470673][T28327] tipc: Node number set to 4294967291 [ 778.944415][T28339] sit0: entered allmulticast mode [ 778.955570][T28339] sit0: entered promiscuous mode [ 779.120791][ T29] audit: type=1400 audit(1746920696.158:35722): avc: denied { create } for pid=28342 comm="syz.6.8199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 779.207081][ T29] audit: type=1400 audit(1746920696.278:35723): avc: denied { cpu } for pid=28344 comm="syz.9.8200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 780.134057][T28369] netlink: 'syz.0.8209': attribute type 10 has an invalid length. [ 780.146980][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 780.147048][ T29] audit: type=1400 audit(1746920697.218:35726): avc: denied { write } for pid=28368 comm="syz.0.8209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 781.186049][T28396] bridge0: entered allmulticast mode [ 781.203345][T28396] bridge0: entered promiscuous mode [ 781.217427][T28398] loop4: detected capacity change from 0 to 128 [ 782.099828][T28402] loop6: detected capacity change from 0 to 128 [ 782.204690][ T29] audit: type=1400 audit(1746920699.268:35727): avc: denied { connect } for pid=28403 comm="syz.9.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.224489][ T29] audit: type=1400 audit(1746920699.268:35728): avc: denied { name_connect } for pid=28403 comm="syz.9.8223" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 782.444386][T28398] syz.4.8219: attempt to access beyond end of device [ 782.444386][T28398] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 782.528250][ T29] audit: type=1400 audit(1746920699.318:35729): avc: denied { create } for pid=28403 comm="syz.9.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 782.548175][ T29] audit: type=1400 audit(1746920699.318:35730): avc: denied { write } for pid=28403 comm="syz.9.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 782.567933][ T29] audit: type=1400 audit(1746920699.578:35731): avc: denied { write } for pid=28406 comm="syz.9.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 782.707514][T28402] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 782.719933][T28402] ext4 filesystem being mounted at /463/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 782.841233][ T51] kworker/u8:3: attempt to access beyond end of device [ 782.841233][ T51] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 783.344007][ T29] audit: type=1400 audit(1746920700.408:35732): avc: denied { ioctl } for pid=28423 comm="syz.9.8230" path="socket:[88782]" dev="sockfs" ino=88782 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 785.046133][T21151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.061692][ T29] audit: type=1400 audit(1746920702.128:35733): avc: denied { ioctl } for pid=28442 comm="syz.0.8237" path="socket:[88820]" dev="sockfs" ino=88820 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 785.086687][ T29] audit: type=1400 audit(1746920702.128:35734): avc: denied { setopt } for pid=28442 comm="syz.0.8237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 785.296255][T28448] loop4: detected capacity change from 0 to 512 [ 785.303225][T28448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 785.335648][T28450] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8238'. [ 785.346599][T28448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 785.354611][T28448] System zones: 1-12 [ 785.375907][T28448] EXT4-fs (loop4): 1 truncate cleaned up [ 785.382029][T28448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.400148][ T29] audit: type=1400 audit(1746920702.418:35735): avc: denied { bind } for pid=28452 comm="syz.6.8240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 785.419745][ T29] audit: type=1400 audit(1746920702.418:35736): avc: denied { name_bind } for pid=28452 comm="syz.6.8240" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 785.441202][ T29] audit: type=1400 audit(1746920702.418:35737): avc: denied { node_bind } for pid=28452 comm="syz.6.8240" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 785.462027][ T29] audit: type=1400 audit(1746920702.438:35738): avc: denied { name_bind } for pid=28452 comm="syz.6.8240" src=16400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 786.206724][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.392288][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8245'. [ 786.475329][ T29] audit: type=1400 audit(1746920703.548:35739): avc: denied { write } for pid=28474 comm="syz.8.8248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 787.319818][ T29] audit: type=1400 audit(1746920704.388:35740): avc: denied { tracepoint } for pid=28504 comm="syz.6.8258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 787.435033][T28505] netlink: 'syz.6.8258': attribute type 10 has an invalid length. [ 787.452846][T28505] macvlan1: entered promiscuous mode [ 787.624203][T28505] team0: Port device macvlan1 added [ 787.650286][T28513] netlink: 14 bytes leftover after parsing attributes in process `syz.9.8260'. [ 787.665515][T28513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.674242][T28513] bond_slave_0: left promiscuous mode [ 787.679822][T28513] bond_slave_0: left allmulticast mode [ 787.687156][T28513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.696573][T28513] bond_slave_1: left promiscuous mode [ 787.702114][T28513] bond_slave_1: left allmulticast mode [ 787.711890][T28513] bond0 (unregistering): Released all slaves [ 788.115982][ T29] audit: type=1400 audit(1746920705.178:35741): avc: denied { create } for pid=28527 comm="syz.6.8265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 788.205886][ T29] audit: type=1400 audit(1746920705.208:35742): avc: denied { write } for pid=28527 comm="syz.6.8265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 788.225467][ T29] audit: type=1400 audit(1746920705.208:35743): avc: denied { ioctl } for pid=28527 comm="syz.6.8265" path="socket:[88999]" dev="sockfs" ino=88999 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 788.407494][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8267'. [ 788.860786][T28553] vlan2: entered promiscuous mode [ 788.865903][T28553] bond0: entered promiscuous mode [ 788.870928][T28553] bond_slave_0: entered promiscuous mode [ 788.876752][T28553] bond_slave_1: entered promiscuous mode [ 788.882692][T28553] vlan2: entered allmulticast mode [ 788.887855][T28553] bond0: entered allmulticast mode [ 788.892961][T28553] bond_slave_0: entered allmulticast mode [ 788.898813][T28553] bond_slave_1: entered allmulticast mode [ 788.949442][T28560] sit0: left promiscuous mode [ 788.959400][T28560] sit0: entered promiscuous mode [ 789.118149][T28563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8279'. [ 789.351350][T28579] xt_hashlimit: size too large, truncated to 1048576 [ 789.503414][ T29] audit: type=1400 audit(1746920706.568:35744): avc: denied { connect } for pid=28574 comm="syz.9.8284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 789.609335][T28591] sit0: entered allmulticast mode [ 789.619388][T28591] sit0: entered promiscuous mode [ 790.416806][T28620] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8300'. [ 790.728849][T28629] netlink: 'syz.4.8304': attribute type 2 has an invalid length. [ 790.754082][T28629] netlink: 'syz.4.8304': attribute type 2 has an invalid length. [ 790.818792][T28626] sit0: left promiscuous mode [ 790.823641][T28626] sit0: left allmulticast mode [ 790.830639][T28626] bridge0: left promiscuous mode [ 790.835670][T28626] bridge0: left allmulticast mode [ 790.843911][T28626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.869290][T21146] block device autoloading is deprecated and will be removed. [ 790.891204][T28632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28632 comm=syz.4.8305 [ 791.097637][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8307'. [ 791.570823][T28650] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8311'. [ 791.941291][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8312'. [ 792.092880][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 792.092895][ T29] audit: type=1400 audit(1746920709.158:35747): avc: denied { read } for pid=28671 comm="syz.4.8321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 793.612739][T28721] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8338'. [ 794.328386][T28735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.397779][ T29] audit: type=1400 audit(1746920711.468:35748): avc: denied { name_connect } for pid=28752 comm="syz.0.8355" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 794.494305][T28759] netlink: 'syz.0.8357': attribute type 10 has an invalid length. [ 794.536266][T28766] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8360'. [ 794.929104][T28769] loop4: detected capacity change from 0 to 4096 [ 794.966778][T28769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.608200][T28785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.656391][T28789] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8367'. [ 795.750894][T28793] netlink: 'syz.0.8369': attribute type 10 has an invalid length. [ 795.760834][T28793] netlink: 'syz.0.8369': attribute type 10 has an invalid length. [ 795.791106][T28794] delete_channel: no stack [ 795.795794][ T29] audit: type=1400 audit(1746920712.858:35749): avc: denied { create } for pid=28794 comm="syz.0.8370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 795.815555][ T29] audit: type=1400 audit(1746920712.858:35750): avc: denied { ioctl } for pid=28794 comm="syz.0.8370" path="socket:[91255]" dev="sockfs" ino=91255 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 796.261483][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.307036][T28809] netlink: 'syz.4.8375': attribute type 1 has an invalid length. [ 796.366848][T28810] netlink: 'syz.4.8375': attribute type 10 has an invalid length. [ 796.374841][T28810] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8375'. [ 796.532868][T28819] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.8379'. [ 796.564261][T28821] syzkaller0: entered allmulticast mode [ 796.662176][ T29] audit: type=1400 audit(1746920713.728:35751): avc: denied { create } for pid=28826 comm="syz.8.8383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 796.686724][ T29] audit: type=1400 audit(1746920713.758:35752): avc: denied { write } for pid=28826 comm="syz.8.8383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 796.906874][T28841] loop6: detected capacity change from 0 to 512 [ 796.913914][T28841] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 796.926229][T28841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 796.934234][T28841] System zones: 1-12 [ 796.938870][T28841] EXT4-fs (loop6): 1 truncate cleaned up [ 796.945158][T28841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.963781][T28844] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8388'. [ 797.573568][T28854] netlink: 'syz.4.8392': attribute type 17 has an invalid length. [ 797.581474][T28854] netlink: 'syz.4.8392': attribute type 41 has an invalid length. [ 797.589395][T28854] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8392'. [ 797.788482][T21151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.264376][T28902] loop6: detected capacity change from 0 to 512 [ 799.271326][T28902] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 799.293057][T28902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 799.302874][T28902] System zones: 1-12 [ 799.308631][T28902] EXT4-fs (loop6): 1 truncate cleaned up [ 799.315634][T28902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.275109][T21151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.857811][T28942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.983597][T28948] netlink: 'syz.9.8425': attribute type 21 has an invalid length. [ 800.991534][T28948] IPv6: NLM_F_CREATE should be specified when creating new route [ 800.999437][T28948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.006695][T28948] IPv6: NLM_F_CREATE should be set when creating new route [ 801.013918][T28948] IPv6: NLM_F_CREATE should be set when creating new route [ 801.021183][T28948] IPv6: NLM_F_CREATE should be set when creating new route [ 801.526686][T28974] netlink: 'syz.9.8437': attribute type 21 has an invalid length. [ 801.534576][T28974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.942406][T29009] netlink: 'syz.4.8451': attribute type 21 has an invalid length. [ 801.950299][T29009] IPv6: NLM_F_CREATE should be specified when creating new route [ 801.959531][T29009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.966814][T29009] IPv6: NLM_F_CREATE should be set when creating new route [ 801.974015][T29009] IPv6: NLM_F_CREATE should be set when creating new route [ 801.981295][T29009] IPv6: NLM_F_CREATE should be set when creating new route [ 802.214149][T29023] IPv6: sit1: Disabled Multicast RS [ 802.245419][T29023] sit1: entered allmulticast mode [ 803.588293][T29053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 803.952113][T29072] netlink: 'syz.9.8474': attribute type 10 has an invalid length. [ 803.962310][T29072] netlink: 'syz.9.8474': attribute type 10 has an invalid length. [ 803.975144][T29072] bridge0: port 3(team0) entered blocking state [ 803.981466][T29072] bridge0: port 3(team0) entered disabled state [ 804.016323][T29072] team0: entered allmulticast mode [ 804.021481][T29072] team_slave_0: entered allmulticast mode [ 804.027782][T29072] team_slave_1: entered allmulticast mode [ 804.038731][T29072] team0: entered promiscuous mode [ 804.043777][T29072] team_slave_0: entered promiscuous mode [ 804.049499][T29072] team_slave_1: entered promiscuous mode [ 804.752804][T29098] loop6: detected capacity change from 0 to 128 [ 804.801255][T29098] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 804.834963][T29098] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.986642][T21146] block device autoloading is deprecated and will be removed. [ 805.660116][T21151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 806.929481][T29150] sit0: left promiscuous mode [ 806.940182][T29150] sit0: entered promiscuous mode [ 807.517498][T29174] loop4: detected capacity change from 0 to 256 [ 807.524053][T29174] vfat: Unknown parameter 'nnonumtail' [ 808.047249][T29181] IPv6: sit1: Disabled Multicast RS [ 808.060762][T29181] sit1: entered allmulticast mode [ 808.106541][T29185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8516'. [ 808.434777][ T29] audit: type=1400 audit(1746920725.498:35753): avc: denied { name_connect } for pid=29209 comm="syz.0.8528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 809.077325][T29237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8536'. [ 810.093500][T29261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.111201][T29265] loop6: detected capacity change from 0 to 128 [ 810.135280][T29265] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 810.176316][T29265] ext4 filesystem being mounted at /533/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 810.203631][T29271] sit0: entered allmulticast mode [ 810.213879][T29271] sit0: entered promiscuous mode [ 810.956318][T21151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 811.144053][T29295] xt_hashlimit: size too large, truncated to 1048576 [ 811.333393][T29298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8560'. [ 811.693219][T29308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.752981][T29314] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.8567'. [ 812.317542][T29331] xt_hashlimit: size too large, truncated to 1048576 [ 812.552773][T29332] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8573'. [ 812.864970][ T29] audit: type=1400 audit(1746920729.818:35754): avc: denied { setopt } for pid=29334 comm="syz.0.8574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 813.569590][ T29] audit: type=1400 audit(1746920730.628:35755): avc: denied { write } for pid=29347 comm="syz.6.8579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 813.970862][T29367] xt_hashlimit: size too large, truncated to 1048576 [ 814.170686][T29371] loop4: detected capacity change from 0 to 512 [ 814.199221][T29371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 814.244199][T29371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 814.268855][T29370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8587'. [ 814.281834][T29371] System zones: 1-12 [ 814.297618][T29371] EXT4-fs (loop4): 1 truncate cleaned up [ 814.308442][T29371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.955087][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.625924][T29417] loop4: detected capacity change from 0 to 128 [ 816.650986][T29417] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 817.037372][T29417] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.161460][T29429] xt_hashlimit: size too large, truncated to 1048576 [ 817.494959][T29433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8605'. [ 817.672191][T21146] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 818.040838][T29438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.318788][T29462] sit0: entered allmulticast mode [ 818.338029][T29462] sit0: entered promiscuous mode [ 818.811422][T29486] netlink: 'syz.9.8625': attribute type 21 has an invalid length. [ 818.820364][T29486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 818.987235][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8623'. [ 819.302103][T29501] sit0: left promiscuous mode [ 819.333030][T29501] sit0: entered promiscuous mode [ 819.590802][T29513] netlink: 'syz.9.8633': attribute type 13 has an invalid length. [ 819.599031][T29513] netlink: 160 bytes leftover after parsing attributes in process `syz.9.8633'. [ 819.621910][T29513] erspan0: refused to change device tx_queue_len [ 819.628815][T29513] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 819.778661][T29523] xt_hashlimit: size too large, truncated to 1048576 [ 819.804174][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8636'. [ 819.828989][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8637'. [ 819.935864][ T29] audit: type=1326 audit(1746920737.008:35756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 819.959616][ T29] audit: type=1326 audit(1746920737.008:35757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd943dcd2d0 code=0x7ffc0000 [ 820.008912][ T29] audit: type=1326 audit(1746920737.078:35758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.032554][ T29] audit: type=1326 audit(1746920737.078:35759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.061571][T29528] netlink: 2 bytes leftover after parsing attributes in process `syz.9.8638'. [ 820.091714][ T29] audit: type=1326 audit(1746920737.128:35760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.115391][ T29] audit: type=1326 audit(1746920737.128:35761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.139054][ T29] audit: type=1326 audit(1746920737.128:35762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.162531][ T29] audit: type=1400 audit(1746920737.128:35763): avc: denied { map } for pid=29527 comm="syz.9.8638" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 820.186926][ T29] audit: type=1326 audit(1746920737.128:35764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.210626][ T29] audit: type=1326 audit(1746920737.128:35765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.9.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd943dce969 code=0x7ffc0000 [ 820.912563][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8645'. [ 821.386707][T29550] sit0: left promiscuous mode [ 821.391428][T29550] sit0: left allmulticast mode [ 821.411563][T29550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.553990][T29565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8647'. [ 821.584128][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8648'. [ 822.638166][T29593] vlan3: entered promiscuous mode [ 822.643301][T29593] vlan3: entered allmulticast mode [ 822.648592][T29593] hsr_slave_1: entered allmulticast mode [ 822.674600][T29594] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8654'. [ 822.726410][T29593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8657'. [ 823.147725][T29622] netlink: 'syz.0.8668': attribute type 21 has an invalid length. [ 823.155611][T29622] IPv6: NLM_F_CREATE should be specified when creating new route [ 823.184192][T29622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 823.191440][T29622] IPv6: NLM_F_CREATE should be set when creating new route [ 823.198735][T29622] IPv6: NLM_F_CREATE should be set when creating new route [ 823.205989][T29622] IPv6: NLM_F_CREATE should be set when creating new route [ 823.351673][T29620] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8667'. [ 823.946197][T29645] vlan3: entered promiscuous mode [ 823.951394][T29645] vlan3: entered allmulticast mode [ 823.956563][T29645] hsr_slave_1: entered allmulticast mode [ 824.210789][T21127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.374768][T29653] loop8: detected capacity change from 512 to 64 [ 824.436383][T29676] xt_hashlimit: size too large, truncated to 1048576 [ 824.649228][T29661] chnl_net:caif_netlink_parms(): no params data found [ 824.881241][T29661] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.888490][T29661] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.898717][T29690] __nla_validate_parse: 2 callbacks suppressed [ 824.898731][T29690] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8688'. [ 824.914436][T29661] bridge_slave_0: entered allmulticast mode [ 824.921615][T29661] bridge_slave_0: entered promiscuous mode [ 824.934109][T29661] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.941235][T29661] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.948807][T29661] bridge_slave_1: entered allmulticast mode [ 824.956375][T29661] bridge_slave_1: entered promiscuous mode [ 824.984899][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 824.984913][ T29] audit: type=1326 audit(1746920742.048:35853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.014631][ T29] audit: type=1326 audit(1746920742.048:35854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.041249][ T29] audit: type=1326 audit(1746920742.108:35855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.064936][ T29] audit: type=1326 audit(1746920742.108:35856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.088733][ T29] audit: type=1326 audit(1746920742.108:35857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.112393][ T29] audit: type=1326 audit(1746920742.108:35858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.136247][ T29] audit: type=1326 audit(1746920742.108:35859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.159968][ T29] audit: type=1326 audit(1746920742.108:35860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.183835][ T29] audit: type=1326 audit(1746920742.108:35861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.207510][ T29] audit: type=1326 audit(1746920742.108:35862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29696 comm="syz.8.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 825.255546][T29661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.273191][T23794] team0: left allmulticast mode [ 825.278108][T23794] team_slave_0: left allmulticast mode [ 825.283687][T23794] team_slave_1: left allmulticast mode [ 825.289454][T23794] team0: left promiscuous mode [ 825.294225][T23794] team_slave_0: left promiscuous mode [ 825.299709][T23794] team_slave_1: left promiscuous mode [ 825.305427][T23794] bridge0: port 3(team0) entered disabled state [ 825.317368][T23794] bridge_slave_1: left allmulticast mode [ 825.323033][T23794] bridge_slave_1: left promiscuous mode [ 825.328764][T23794] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.339269][T23794] bridge_slave_0: left promiscuous mode [ 825.344938][T23794] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.393237][T29728] loop6: detected capacity change from 0 to 1024 [ 825.393789][T29721] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8701'. [ 825.404044][T29728] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 825.440782][T23794] ip6_vti0 (unregistering): left allmulticast mode [ 825.717892][T23794] tipc: Left network mode [ 825.726789][T23794] hsr_slave_0: left promiscuous mode [ 825.732608][T23794] hsr_slave_1: left promiscuous mode [ 825.739442][T23794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.747595][T23794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.806517][T23794] team0 (unregistering): Port device team_slave_1 removed [ 825.819612][T23794] team0 (unregistering): Port device team_slave_0 removed [ 826.329758][T29750] loop4: detected capacity change from 0 to 2048 [ 826.341293][T29661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.356551][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8704'. [ 826.387557][T29750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.400560][T29750] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.419843][T29661] team0: Port device team_slave_0 added [ 826.436153][T29759] loop6: detected capacity change from 0 to 512 [ 826.444276][T29661] team0: Port device team_slave_1 added [ 826.483545][T29661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.490547][T29661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.496465][T29759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.516655][T29661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.543140][T29759] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.585758][T29661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.593210][T29661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.619373][T29661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.659803][T29661] hsr_slave_0: entered promiscuous mode [ 826.673189][T29661] hsr_slave_1: entered promiscuous mode [ 826.714742][T29759] loop6: detected capacity change from 512 to 64 [ 826.730541][T29759] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.8717: Failed to acquire dquot type 1 [ 826.832788][T29750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8714'. [ 826.937301][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.002707][T29661] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 827.012052][T29661] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 827.020168][T29785] netlink: 2 bytes leftover after parsing attributes in process `syz.8.8725'. [ 827.034802][T29661] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 827.062294][T29661] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 827.081667][T29788] loop4: detected capacity change from 0 to 512 [ 827.119527][T29661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.162399][T29788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.257174][T29788] ext4 filesystem being mounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 827.290120][T29661] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.305333][T21151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.323242][T23794] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.330428][T23794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.354344][T23792] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.361499][T23792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.459794][T29800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8726'. [ 827.530351][T29661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.861572][T29661] veth0_vlan: entered promiscuous mode [ 827.877349][T29661] veth1_vlan: entered promiscuous mode [ 827.908168][T29661] veth0_macvtap: entered promiscuous mode [ 827.936075][T29661] veth1_macvtap: entered promiscuous mode [ 827.958684][T29661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.975352][T29661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.984678][T29661] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.993617][T29661] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.002369][T29661] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.011320][T29661] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.166793][T29819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8734'. [ 828.250905][T29831] netlink: 2 bytes leftover after parsing attributes in process `syz.9.8735'. [ 828.296888][T29839] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8736'. [ 828.672117][T29855] netlink: 'syz.6.8743': attribute type 21 has an invalid length. [ 828.680074][T29855] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.764023][T29855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 828.771299][T29855] IPv6: NLM_F_CREATE should be set when creating new route [ 828.778550][T29855] IPv6: NLM_F_CREATE should be set when creating new route [ 828.785766][T29855] IPv6: NLM_F_CREATE should be set when creating new route [ 829.395933][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8745'. [ 829.946320][T29858] sit0: left promiscuous mode [ 829.951032][T29858] sit0: left allmulticast mode [ 829.986021][T29858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.141968][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 830.141980][ T29] audit: type=1326 audit(1746920747.208:36022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.327942][ T29] audit: type=1326 audit(1746920747.258:36023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.351569][ T29] audit: type=1326 audit(1746920747.258:36024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.375360][ T29] audit: type=1326 audit(1746920747.258:36025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.398997][ T29] audit: type=1326 audit(1746920747.258:36026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.422721][ T29] audit: type=1326 audit(1746920747.258:36027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.446427][ T29] audit: type=1326 audit(1746920747.258:36028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.470141][ T29] audit: type=1326 audit(1746920747.258:36029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.493776][ T29] audit: type=1326 audit(1746920747.258:36030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.517401][ T29] audit: type=1326 audit(1746920747.258:36031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29877 comm="syz.6.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f9562e969 code=0x7ffc0000 [ 830.559606][T29886] xt_hashlimit: size too large, truncated to 1048576 [ 830.727972][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8759'. [ 830.776104][T29886] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8755'. [ 831.237563][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.176588][T29929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.428447][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8772'. [ 833.804489][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8777'. [ 834.022604][T29949] chnl_net:caif_netlink_parms(): no params data found [ 834.139850][T29949] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.147013][T29949] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.160767][T29949] bridge_slave_0: entered allmulticast mode [ 834.167789][T29949] bridge_slave_0: entered promiscuous mode [ 834.177745][T29949] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.184961][T29949] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.193500][T29949] bridge_slave_1: entered allmulticast mode [ 834.200089][T29949] bridge_slave_1: entered promiscuous mode [ 834.335316][T29949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.383494][T29949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.412169][T23794] erspan0: left allmulticast mode [ 834.417352][T23794] erspan0: left promiscuous mode [ 834.422377][T23794] GPL: port 1(erspan0) entered disabled state [ 834.784251][T23794] ip6_vti0 (unregistering): left allmulticast mode [ 835.002451][T30003] xt_hashlimit: size too large, truncated to 1048576 [ 835.439720][T23794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.450739][T23794] bond_slave_0: left promiscuous mode [ 835.456264][T23794] bond_slave_0: left allmulticast mode [ 835.466555][T23794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.530640][T23794] bond_slave_1: left promiscuous mode [ 835.536195][T23794] bond_slave_1: left allmulticast mode [ 835.542064][T23794] bond0 (unregistering): Released all slaves [ 835.763282][T29949] team0: Port device team_slave_0 added [ 835.784643][T29949] team0: Port device team_slave_1 added [ 835.825455][T29949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.832453][T29949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.858386][T29949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.967671][T23794] tipc: Left network mode [ 835.979247][T23794] hsr_slave_0: left promiscuous mode [ 835.999012][T23794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.027996][T23794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.080451][T23794] team0 (unregistering): Port device team_slave_1 removed [ 836.111520][T23794] team0 (unregistering): Port device team_slave_0 removed [ 836.190741][T29949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.197775][T29949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.223887][T29949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.313511][T29949] hsr_slave_0: entered promiscuous mode [ 836.320103][T29949] hsr_slave_1: entered promiscuous mode [ 836.330292][T29949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.346826][T29949] Cannot create hsr debugfs directory [ 836.619631][T30028] IPv6: sit2: Disabled Multicast RS [ 836.891349][T30028] sit2: entered allmulticast mode [ 836.910945][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 836.910961][ T29] audit: type=1326 audit(1746920753.978:36091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.083528][ T29] audit: type=1326 audit(1746920754.008:36092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.107237][ T29] audit: type=1326 audit(1746920754.008:36093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f112183d2d0 code=0x7ffc0000 [ 837.130933][ T29] audit: type=1326 audit(1746920754.048:36094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.154620][ T29] audit: type=1326 audit(1746920754.048:36095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.178291][ T29] audit: type=1326 audit(1746920754.048:36096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.201929][ T29] audit: type=1326 audit(1746920754.048:36097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.225485][ T29] audit: type=1326 audit(1746920754.048:36098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.249203][ T29] audit: type=1326 audit(1746920754.048:36099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.272845][ T29] audit: type=1326 audit(1746920754.048:36100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.8.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112183e969 code=0x7ffc0000 [ 837.435374][T30042] xt_hashlimit: size too large, truncated to 1048576 [ 837.693407][T30051] vlan0: entered promiscuous mode [ 837.698550][T30051] vlan0: entered allmulticast mode [ 837.703752][T30051] hsr_slave_1: entered allmulticast mode [ 837.749175][T29949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 837.766083][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8804'. [ 837.775187][T29949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 837.806918][T29949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 837.816016][T29949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 837.854176][T29949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.879591][T29949] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.891842][T20815] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.899017][T20815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.918528][T20815] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.925674][T20815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.940864][T29949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.996335][T29949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.061144][T29949] veth0_vlan: entered promiscuous mode [ 838.069039][T29949] veth1_vlan: entered promiscuous mode [ 838.083777][T29949] veth0_macvtap: entered promiscuous mode [ 838.090884][T29949] veth1_macvtap: entered promiscuous mode [ 838.100594][T29949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.111115][T29949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.121582][T29949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.131687][T29949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.142187][T29949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.154091][T29949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.164639][T29949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.173455][T29949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.182182][T29949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.190976][T29949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.231170][T29949] block device autoloading is deprecated and will be removed. [ 838.839578][T30085] loop4: detected capacity change from 0 to 1024 [ 838.855235][T30085] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 839.087281][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8810'. [ 839.758722][T30097] xt_hashlimit: size too large, truncated to 1048576 [ 839.861830][T30103] loop6: detected capacity change from 0 to 2048 [ 839.877540][T30103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.884116][T30110] loop4: detected capacity change from 0 to 128 [ 839.906353][T30103] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.928030][T30110] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 839.940353][T30103] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8816'. [ 839.984343][T30110] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 840.251865][T30103] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8816'. [ 840.334949][T21151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.760150][T21146] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.214392][T30155] loop9: detected capacity change from 0 to 512 [ 841.973202][T30155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 841.987554][T30155] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.8829: invalid block [ 842.004232][T30155] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.8829: invalid indirect mapped block 4294967295 (level 1) [ 842.081121][T30155] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.8829: invalid indirect mapped block 4294967295 (level 1) [ 842.114432][T30155] EXT4-fs (loop9): 2 truncates cleaned up [ 842.130089][T30155] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.181835][T30175] loop4: detected capacity change from 0 to 128 [ 842.190196][T30155] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.9.8829: path /22/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 842.229318][T30155] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.9.8829: path /22/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 842.251955][T30175] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 842.266129][T30175] ext4 filesystem being mounted at /584/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 842.289135][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 842.289157][ T29] audit: type=1400 audit(1746920759.358:36139): avc: denied { write } for pid=30154 comm="syz.9.8829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 842.506365][T29661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.412345][T21146] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 843.499445][T30199] sit0: entered allmulticast mode [ 843.541592][T30199] sit0: entered promiscuous mode [ 843.661243][ T29] audit: type=1326 audit(1746920760.728:36140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.762390][T30205] loop9: detected capacity change from 0 to 1024 [ 843.773806][ T29] audit: type=1326 audit(1746920760.758:36141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.797549][ T29] audit: type=1326 audit(1746920760.758:36142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.821196][ T29] audit: type=1326 audit(1746920760.758:36143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.844780][ T29] audit: type=1326 audit(1746920760.758:36144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.868503][ T29] audit: type=1326 audit(1746920760.758:36145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.892158][ T29] audit: type=1326 audit(1746920760.758:36146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.915741][ T29] audit: type=1326 audit(1746920760.758:36147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 843.932014][T29949] block device autoloading is deprecated and will be removed. [ 843.939434][ T29] audit: type=1326 audit(1746920760.758:36148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30203 comm="syz.9.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed1d6e969 code=0x7ffc0000 [ 844.047584][T30205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.072759][T30204] pimreg: entered allmulticast mode [ 844.090702][T29661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.292280][T30222] loop9: detected capacity change from 0 to 4096 [ 844.383950][T30222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.392868][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8854'. [ 845.626177][T30243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8855'. [ 845.819335][T30251] loop4: detected capacity change from 0 to 1024 [ 845.837372][T30251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.860386][T30251] pimreg: entered allmulticast mode [ 845.986738][T29661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.999239][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.032301][T30257] sit0: left promiscuous mode [ 846.043040][T30257] sit0: entered promiscuous mode [ 846.060292][T30263] loop0: detected capacity change from 0 to 128 [ 846.071850][T30263] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 846.080075][T30259] vlan2: entered promiscuous mode [ 846.089596][T30259] vlan2: entered allmulticast mode [ 846.094921][T30259] hsr_slave_1: entered allmulticast mode [ 846.102197][T30263] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.119636][T30259] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8860'. [ 846.203901][T29949] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 846.222075][T30269] loop4: detected capacity change from 0 to 128 [ 846.254872][T30269] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 846.288257][T30278] loop9: detected capacity change from 0 to 1024 [ 846.298406][T30269] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 846.325609][T30278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.357528][T29661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.379930][T30283] loop9: detected capacity change from 0 to 164 [ 846.388344][T30283] ISOFS: unable to read i-node block [ 846.393643][T30283] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 846.402909][T30283] isofs_fill_super: get root inode failed [ 846.427303][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8865'. [ 846.546164][T30287] loop9: detected capacity change from 0 to 2048 [ 846.594940][T30287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.615751][T30287] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.659466][T30287] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8871'. [ 846.739812][T30294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8873'. [ 846.752606][T30296] wg2: entered promiscuous mode [ 846.757596][T30296] wg2: entered allmulticast mode [ 846.892273][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8877'. [ 846.925599][T30287] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8871'. [ 846.989673][T29661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.011122][T30315] loop9: detected capacity change from 0 to 164 [ 847.018264][T30315] ISOFS: unable to read i-node block [ 847.023730][T30315] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 847.033355][T30315] isofs_fill_super: get root inode failed [ 847.109505][T30322] loop9: detected capacity change from 0 to 512 [ 847.112604][T29949] block device autoloading is deprecated and will be removed. [ 847.131731][T30322] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 847.136078][T21146] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 847.148158][T30322] EXT4-fs (loop9): 1 orphan inode deleted [ 847.156254][T30322] EXT4-fs (loop9): 1 truncate cleaned up [ 847.163153][T30322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.220774][T30327] loop6: detected capacity change from 0 to 164 [ 847.248964][T30330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8886'. [ 847.259834][T30327] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 847.340475][T30332] bridge_slave_0: left allmulticast mode [ 847.346264][T30332] bridge_slave_0: left promiscuous mode [ 847.352066][T30332] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.364482][T30332] bridge_slave_1: left allmulticast mode [ 847.370263][T30332] bridge_slave_1: left promiscuous mode [ 847.376024][T30332] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.389687][T30332] bond0: (slave bond_slave_0): Releasing backup interface [ 847.401336][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 847.401350][ T29] audit: type=1326 audit(1746920764.468:36503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.431595][T30332] bond0: (slave bond_slave_1): Releasing backup interface [ 847.432670][ T29] audit: type=1326 audit(1746920764.468:36504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.462472][ T29] audit: type=1326 audit(1746920764.468:36505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.486097][ T29] audit: type=1326 audit(1746920764.468:36506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.509774][ T29] audit: type=1326 audit(1746920764.478:36507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.533354][ T29] audit: type=1326 audit(1746920764.478:36508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.557060][ T29] audit: type=1326 audit(1746920764.478:36509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.580868][ T29] audit: type=1326 audit(1746920764.478:36510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.604545][ T29] audit: type=1326 audit(1746920764.478:36511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faf5e48e969 code=0x7ffc0000 [ 847.628112][ T29] audit: type=1326 audit(1746920764.478:36512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf5e48e9a3 code=0x7ffc0000 [ 847.661531][T30332] team0: Port device team_slave_0 removed [ 847.675297][T30332] team0: Port device team_slave_1 removed [ 847.683783][T30332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.691687][T30332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.705089][T30332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.712634][T30332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.882632][T30342] loop0: detected capacity change from 0 to 512 [ 847.893163][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8889'. [ 847.968250][T30342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.996509][T29661] EXT4-fs error (device loop9): __ext4_iget:5025: inode #11: block 524051: comm syz-executor: invalid block [ 848.015918][T29661] EXT4-fs (loop9): Remounting filesystem read-only [ 848.026073][T30342] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.068942][T30354] loop4: detected capacity change from 0 to 512 [ 848.248014][T29949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.257583][T30354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.278142][T30354] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.448313][T30349] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.629668][ T39] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.715069][ T39] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.826384][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.875508][ T39] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.078347][ T39] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.164992][T30372] chnl_net:caif_netlink_parms(): no params data found [ 849.340128][T29949] block device autoloading is deprecated and will be removed. [ 849.416362][ T39] bond0 (unregistering): Released all slaves [ 849.430003][T30395] sit0: left promiscuous mode [ 849.434767][T30395] sit0: left allmulticast mode [ 849.442969][T30395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 849.464388][T30372] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.471547][T30372] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.482124][T30372] bridge_slave_0: entered allmulticast mode [ 849.489575][T30372] bridge_slave_0: entered promiscuous mode [ 849.497607][T30372] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.504677][T30372] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.511829][T30372] bridge_slave_1: entered allmulticast mode [ 849.519514][T30372] bridge_slave_1: entered promiscuous mode [ 849.548895][T30372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.561062][T30372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.697966][ T39] hsr_slave_0: left promiscuous mode [ 849.710251][ T39] veth1_macvtap: left promiscuous mode [ 849.715934][ T39] veth0_macvtap: left promiscuous mode [ 849.751834][T30411] loop4: detected capacity change from 0 to 2048 [ 849.760260][ T39] veth1_vlan: left promiscuous mode [ 849.765739][ T39] veth0_vlan: left promiscuous mode [ 849.798212][T30411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.813197][T30411] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.857789][ T39] pimreg (unregistering): left allmulticast mode [ 850.215753][T30417] netlink: 'syz.6.8913': attribute type 21 has an invalid length. [ 850.243126][T30417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.251763][T30372] team0: Port device team_slave_0 added [ 850.270447][T30372] team0: Port device team_slave_1 added [ 850.315414][T30372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.322384][T30372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.348537][T30372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.364086][T30372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.371128][T30372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.397090][T30372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.466613][T30372] hsr_slave_0: entered promiscuous mode [ 850.486162][T30372] hsr_slave_1: entered promiscuous mode [ 850.492297][T30411] __nla_validate_parse: 5 callbacks suppressed [ 850.492321][T30411] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8912'. [ 850.635465][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.809620][T30451] loop4: detected capacity change from 0 to 164 [ 850.816800][T30451] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 850.871694][T30372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 850.885869][T30372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 850.905436][T30372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 850.923409][T30372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 850.986698][T30461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8930'. [ 850.994146][T30372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.009565][T30372] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.021600][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.028749][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.049178][T30372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 851.059658][T30372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.074612][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.081708][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.130254][T30467] loop0: detected capacity change from 0 to 128 [ 851.148644][T30467] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 851.174035][T30372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.186111][T30467] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.333061][T30463] sit0: left promiscuous mode [ 851.337821][T30463] sit0: left allmulticast mode [ 851.351361][T30463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.485287][T30489] loop6: detected capacity change from 0 to 164 [ 851.513507][T30489] ISOFS: unable to read i-node block [ 851.518864][T30489] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 851.561918][T30372] veth0_vlan: entered promiscuous mode [ 851.573017][T30489] isofs_fill_super: get root inode failed [ 851.596245][T30372] veth1_vlan: entered promiscuous mode [ 851.658025][T30372] veth0_macvtap: entered promiscuous mode [ 851.686967][T30495] loop6: detected capacity change from 0 to 512 [ 851.696638][T30372] veth1_macvtap: entered promiscuous mode [ 851.717078][T30495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 851.724190][T30372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.736091][T30372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.768288][T30372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.778969][T30495] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.8937: invalid block [ 851.792092][T30372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.802550][T30372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.804169][T30495] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8937: invalid indirect mapped block 4294967295 (level 1) [ 851.813349][T30372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.836938][T30495] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8937: invalid indirect mapped block 4294967295 (level 1) [ 851.851423][T30495] EXT4-fs (loop6): 2 truncates cleaned up [ 851.858763][T30495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.875738][T30372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.884488][T30372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.893248][T30372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.902116][T30372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.930955][T30495] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.8937: path /606/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 852.018032][T30495] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.8937: path /606/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 852.165735][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8939'. [ 852.542184][T21151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.833525][T29949] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 852.861757][T30510] chnl_net:caif_netlink_parms(): no params data found [ 852.900009][T30527] netlink: 'syz.8.8943': attribute type 21 has an invalid length. [ 852.907914][T30527] IPv6: NLM_F_CREATE should be specified when creating new route [ 852.915677][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 852.915687][ T29] audit: type=1326 audit(1746920769.988:36770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 852.915826][ T29] audit: type=1326 audit(1746920769.988:36771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 852.946668][T30527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 852.970787][ T29] audit: type=1326 audit(1746920770.048:36772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 852.976190][T30527] IPv6: NLM_F_CREATE should be set when creating new route [ 852.976208][T30527] IPv6: NLM_F_CREATE should be set when creating new route [ 852.976218][T30527] IPv6: NLM_F_CREATE should be set when creating new route [ 853.021782][ T29] audit: type=1326 audit(1746920770.048:36773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 853.046106][ T29] audit: type=1326 audit(1746920770.048:36774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 853.069931][ T29] audit: type=1326 audit(1746920770.048:36775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 853.093549][ T29] audit: type=1326 audit(1746920770.048:36776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 853.117206][ T29] audit: type=1326 audit(1746920770.048:36777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 853.140847][ T29] audit: type=1326 audit(1746920770.048:36778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb05a19e969 code=0x7ffc0000 [ 853.164452][ T29] audit: type=1326 audit(1746920770.078:36779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.8945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb05a19e9a3 code=0x7ffc0000 [ 853.210986][T30510] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.218301][T30510] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.226316][T30510] bridge_slave_0: entered allmulticast mode [ 853.233045][T30510] bridge_slave_0: entered promiscuous mode [ 853.240115][T30510] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.247201][T30510] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.254499][T30510] bridge_slave_1: entered allmulticast mode [ 853.260879][T30510] bridge_slave_1: entered promiscuous mode [ 853.280841][T30510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.291412][T30510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.318225][T30510] team0: Port device team_slave_0 added [ 853.322804][T30549] loop0: detected capacity change from 0 to 128 [ 853.325186][T30510] team0: Port device team_slave_1 added [ 853.344487][T30549] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 853.358561][T30549] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.365713][T30510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.375916][T30510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.402071][T30510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.447675][T30510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.454640][T30510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.480648][T30510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.523775][T30510] hsr_slave_0: entered promiscuous mode [ 853.530019][T30510] hsr_slave_1: entered promiscuous mode [ 853.539311][T30510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.547037][T30510] Cannot create hsr debugfs directory [ 853.710571][T30559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8952'. [ 853.928482][T23794] bridge_slave_1: left allmulticast mode [ 853.934197][T23794] bridge_slave_1: left promiscuous mode [ 853.939958][T23794] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.068276][T30561] loop4: detected capacity change from 0 to 1024 [ 854.086884][T23794] bridge_slave_0: left allmulticast mode [ 854.092620][T23794] bridge_slave_0: left promiscuous mode [ 854.098433][T23794] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.137361][T30561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.175995][T23794] ip6_vti0 (unregistering): left allmulticast mode [ 854.498074][T23794] bond0 (unregistering): (slave 37±ÿ): Releasing backup interface [ 854.509782][T23794] ±ÿ: left promiscuous mode [ 854.514363][T23794] ±ÿ: left allmulticast mode [ 854.530374][T23794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.555011][T23794] bond_slave_1: left promiscuous mode [ 854.560512][T23794] bond_slave_1: left allmulticast mode [ 854.577071][T23794] bond0 (unregistering): Released all slaves [ 854.610075][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.638684][T23794] tipc: Disabling bearer [ 854.643943][T23794] tipc: Left network mode [ 854.651321][T30510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 854.666979][T30510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 854.765556][T23794] hsr_slave_0: left promiscuous mode [ 854.771240][T23794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.781084][T23794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.801592][T23794] macvlan1 (unregistering): left promiscuous mode [ 854.808509][T23794] team0 (unregistering): Port device macvlan1 removed [ 855.182591][T29949] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.192769][T23794] team_slave_1 (unregistering): left promiscuous mode [ 855.200062][T23794] team0 (unregistering): Port device team_slave_1 removed [ 855.209278][T23794] team_slave_0 (unregistering): left promiscuous mode [ 855.217634][T23794] team0 (unregistering): Port device team_slave_0 removed [ 855.248794][T30510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 855.269069][T30510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 855.457449][T30589] sit0: entered allmulticast mode [ 855.471416][T30510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.506578][T30589] sit0: entered promiscuous mode [ 855.835973][T30510] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.860965][T30510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.871393][T30510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.090733][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.097815][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.183525][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.190696][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.615715][T30623] loop4: detected capacity change from 0 to 512 [ 856.836618][T30623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.853346][T30623] ext4 filesystem being mounted at /607/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.870738][T30510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.098045][T21146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.233228][T29949] block device autoloading is deprecated and will be removed. [ 857.411014][T30510] veth0_vlan: entered promiscuous mode [ 857.418829][T30510] veth1_vlan: entered promiscuous mode [ 857.433954][T30510] veth0_macvtap: entered promiscuous mode [ 857.441568][T30510] veth1_macvtap: entered promiscuous mode [ 857.451901][T30510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.462517][T30510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.472493][T30510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.483587][T30510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.498593][T30510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.510397][T30510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.520972][T30510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.530842][T30510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.541512][T30510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.554208][T30510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.933014][T30665] loop0: detected capacity change from 0 to 512 [ 857.979389][T30665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 857.988852][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 857.988866][ T29] audit: type=1326 audit(1746920775.058:37060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.012791][T30510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.027592][T30510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.036401][T30510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.036432][T30510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.049643][ T29] audit: type=1326 audit(1746920775.098:37061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2782b2d2d0 code=0x7ffc0000 [ 858.082643][ T29] audit: type=1326 audit(1746920775.098:37062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.106270][ T29] audit: type=1326 audit(1746920775.098:37063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.109117][T30665] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.8981: invalid block [ 858.129822][ T29] audit: type=1326 audit(1746920775.098:37064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.166360][ T29] audit: type=1326 audit(1746920775.128:37065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.171782][T30665] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8981: invalid indirect mapped block 4294967295 (level 1) [ 858.190014][ T29] audit: type=1326 audit(1746920775.128:37066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.190045][ T29] audit: type=1326 audit(1746920775.128:37067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.205214][T30665] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8981: invalid indirect mapped block 4294967295 (level 1) [ 858.227500][ T29] audit: type=1326 audit(1746920775.128:37068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782b2e969 code=0x7ffc0000 [ 858.258136][T30665] EXT4-fs (loop0): 2 truncates cleaned up [ 858.265021][ T29] audit: type=1326 audit(1746920775.128:37069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30666 comm="syz.5.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2782b30887 code=0x7ffc0000 [ 858.297031][T30665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.409351][T30665] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.8981: path /42/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 858.432653][T30665] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.8981: path /42/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 858.658373][T30689] loop5: detected capacity change from 0 to 164 [ 858.679732][T30690] sit0: entered allmulticast mode [ 858.688934][T30689] ISOFS: unable to read i-node block [ 858.694235][T30689] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 858.729227][T29949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.741589][T30690] sit0: entered promiscuous mode [ 858.753742][T30689] isofs_fill_super: get root inode failed [ 859.059214][T30696] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.8990'. [ 859.729402][T30709] loop0: detected capacity change from 0 to 512 [ 859.757027][T30709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.791506][T30709] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.823288][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8999'. [ 859.903870][T27059] bridge_slave_1: left allmulticast mode [ 859.909625][T27059] bridge_slave_1: left promiscuous mode [ 859.915315][T27059] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.925932][T27059] bridge_slave_0: left allmulticast mode [ 859.931585][T27059] bridge_slave_0: left promiscuous mode [ 859.937438][T27059] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.982279][T29949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.000028][T27059] ip6_vti0 (unregistering): left allmulticast mode [ 860.090960][T30733] loop6: detected capacity change from 0 to 512 [ 860.115367][T30733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 860.127124][T30738] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.9004'. [ 860.137700][T30733] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.9002: invalid block [ 860.150895][T30733] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9002: invalid indirect mapped block 4294967295 (level 1) [ 860.169420][T27059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.178204][T30733] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9002: invalid indirect mapped block 4294967295 (level 1) [ 860.195114][T30733] EXT4-fs (loop6): 2 truncates cleaned up [ 860.201465][T30733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.215790][T27059] bond_slave_0: left allmulticast mode [ 860.221878][T27059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.231947][T27059] bond_slave_1: left allmulticast mode [ 860.239063][T30733] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.9002: path /4/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 860.261848][T27059] bond0 (unregistering): Released all slaves [ 860.280085][T30733] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.9002: path /4/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 860.319137][T27059] hsr_slave_0: left promiscuous mode [ 860.324938][T27059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.332390][T27059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.343976][T27059] pimreg (unregistering): left allmulticast mode [ 860.381510][T27059] team0 (unregistering): Port device team_slave_1 removed [ 860.392713][T27059] team0 (unregistering): Port device team_slave_0 removed [ 860.579702][T30712] chnl_net:caif_netlink_parms(): no params data found [ 860.760587][T30510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.933424][T30712] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.940602][T30712] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.976368][T30712] bridge_slave_0: entered allmulticast mode [ 860.989843][T30712] bridge_slave_0: entered promiscuous mode [ 861.004373][T30759] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.9009'. [ 861.013630][T30759] netlink: 6332 bytes leftover after parsing attributes in process `syz.8.9009'. [ 861.039062][T30712] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.046251][T30712] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.072529][T30712] bridge_slave_1: entered allmulticast mode [ 861.094512][T30712] bridge_slave_1: entered promiscuous mode [ 861.166286][T30712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.203179][T30712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.303469][T30712] team0: Port device team_slave_0 added [ 861.361093][T30769] loop6: detected capacity change from 0 to 512 [ 861.371367][T30769] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 861.380323][T30712] team0: Port device team_slave_1 added [ 861.409539][T30712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.416636][T30712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.442652][T30712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.466911][T30769] EXT4-fs (loop6): 1 orphan inode deleted [ 861.471052][T30775] sit0: entered allmulticast mode [ 861.472716][T30769] EXT4-fs (loop6): 1 truncate cleaned up [ 861.473225][T30769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.483975][T30775] sit0: entered promiscuous mode [ 861.617729][T29949] block device autoloading is deprecated and will be removed. [ 861.724005][T30769] bridge_slave_0: left allmulticast mode [ 861.729959][T30769] bridge_slave_0: left promiscuous mode [ 861.735625][T30769] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.744591][T30769] bridge_slave_1: left allmulticast mode [ 861.750318][T30769] bridge_slave_1: left promiscuous mode [ 861.756114][T30769] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.104854][T30769] bond0: (slave bond_slave_0): Releasing backup interface [ 862.114818][T30769] bond0: (slave bond_slave_1): Releasing backup interface [ 862.126975][T30769] team0: Port device team_slave_0 removed [ 862.135908][T30769] team0: Port device team_slave_1 removed [ 862.142591][T30769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.150164][T30769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.158912][T30769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.166320][T30769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.187200][T30712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.194263][T30712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.220232][T30712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.232086][T30510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.276651][T30712] hsr_slave_0: entered promiscuous mode [ 862.282504][T30786] loop6: detected capacity change from 0 to 1024 [ 862.282828][T30712] hsr_slave_1: entered promiscuous mode [ 862.295129][T30712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.302681][T30712] Cannot create hsr debugfs directory [ 862.309359][T30788] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.9019'. [ 862.318659][T30788] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.9019'. [ 862.330088][T30786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.380502][T30786] pimreg: entered allmulticast mode [ 862.408753][T30799] loop0: detected capacity change from 0 to 164 [ 862.416824][T30510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.427076][T30799] ISOFS: unable to read i-node block [ 862.432376][T30799] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 862.457776][T30795] loop5: detected capacity change from 0 to 512 [ 862.466571][T30795] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 862.474839][T30799] isofs_fill_super: get root inode failed [ 862.482199][T30795] EXT4-fs (loop5): invalid journal inode [ 862.489017][T30795] EXT4-fs (loop5): can't get journal size [ 862.516292][T30795] EXT4-fs (loop5): 1 truncate cleaned up [ 862.523048][T30795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.628274][T30818] sit0: entered allmulticast mode [ 862.672585][T30818] sit0: entered promiscuous mode [ 862.737159][T30820] loop0: detected capacity change from 0 to 512 [ 862.841945][T30820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.916853][T30820] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 863.118249][T30827] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.9032'. [ 863.127700][T30827] netlink: 6332 bytes leftover after parsing attributes in process `syz.8.9032'. [ 863.171699][T30712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 863.194588][T30712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 863.210196][T30712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 863.223616][T30712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 863.310413][T30712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.377523][T30712] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.397146][T20815] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.404206][T20815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.428541][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.435685][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.615949][T30712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.779915][T30712] veth0_vlan: entered promiscuous mode [ 863.798293][T30712] veth1_vlan: entered promiscuous mode [ 863.827487][T30712] veth0_macvtap: entered promiscuous mode [ 863.846325][T30712] veth1_macvtap: entered promiscuous mode [ 863.867834][T30712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.878434][T30712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.888279][T30712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.898763][T30712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.955703][T30712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.974681][T30712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.985146][T30712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.994976][T30712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.005401][T30712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.018202][T30712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.029609][T30510] block device autoloading is deprecated and will be removed. [ 864.041707][T30712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.050639][T30712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.059546][T30712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.064102][T30850] loop6: detected capacity change from 0 to 512 [ 864.068236][T30712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.095167][T30850] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 864.142760][T30712] block device autoloading is deprecated and will be removed. [ 864.150593][T30850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 864.164924][T30850] System zones: 1-12 [ 864.174488][T30854] loop4: detected capacity change from 0 to 2048 [ 864.200690][T30850] EXT4-fs (loop6): 1 truncate cleaned up [ 864.220810][T30850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.236084][T30854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.274812][T30854] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.296598][T24732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.405378][T24732] Trying to write to read-only block-device loop8 [ 864.837384][T30856] chnl_net:caif_netlink_parms(): no params data found [ 864.927396][T30510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.976158][T30856] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.983285][T30856] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.000793][T30856] bridge_slave_0: entered allmulticast mode [ 865.011405][T30856] bridge_slave_0: entered promiscuous mode [ 865.017517][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 865.017532][ T29] audit: type=1326 audit(1746920782.088:37334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.032978][T30871] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8995'. [ 865.056624][ T29] audit: type=1326 audit(1746920782.088:37335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.056667][ T29] audit: type=1326 audit(1746920782.088:37336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31d00ed2d0 code=0x7ffc0000 [ 865.109497][ T29] audit: type=1326 audit(1746920782.178:37337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.133246][ T29] audit: type=1326 audit(1746920782.178:37338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.157686][T27059] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.204815][ T29] audit: type=1326 audit(1746920782.188:37339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.228558][ T29] audit: type=1326 audit(1746920782.188:37340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.253590][ T29] audit: type=1326 audit(1746920782.188:37341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.277288][ T29] audit: type=1326 audit(1746920782.188:37342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.300707][ T29] audit: type=1326 audit(1746920782.218:37343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.6.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d00ee969 code=0x7ffc0000 [ 865.324914][T30856] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.331965][T30856] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.339191][T30856] bridge_slave_1: entered allmulticast mode [ 865.345737][T30856] bridge_slave_1: entered promiscuous mode [ 865.364157][T27059] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.406156][T30856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.429186][T27059] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.467305][T30856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.487432][T27059] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.531980][T30712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.545302][T30856] team0: Port device team_slave_0 added [ 865.551906][T30856] team0: Port device team_slave_1 added [ 865.598240][T30856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.605239][T30856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.631236][T30856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.709345][T30893] loop4: detected capacity change from 0 to 4096 [ 865.805268][T30893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.336851][T30856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.343843][T30856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.369794][T30856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.437196][T30896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9043'. [ 866.548519][T30856] hsr_slave_0: entered promiscuous mode [ 866.554542][T30856] hsr_slave_1: entered promiscuous mode [ 866.560603][T30856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.601052][T30856] Cannot create hsr debugfs directory [ 866.609151][T30898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9044'. [ 866.708655][T27059] ip6_vti0 (unregistering): left allmulticast mode [ 867.017936][T27059] bond0 (unregistering): Released all slaves [ 867.025419][T30712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.071676][T30904] loop4: detected capacity change from 0 to 512 [ 867.081398][T27059] hsr_slave_0: left promiscuous mode [ 867.081506][T30904] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 867.096772][T27059] hsr_slave_1: left promiscuous mode [ 867.100305][T30904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 867.110386][T30904] System zones: 1-12 [ 867.110466][T27059] veth1_macvtap: left promiscuous mode [ 867.119948][T27059] ================================================================== [ 867.121794][T30904] EXT4-fs (loop4): 1 truncate cleaned up [ 867.128027][T27059] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 867.128051][T27059] [ 867.128056][T27059] write to 0xffffffff86a1d388 of 8 bytes by task 30904 on cpu 1: [ 867.134293][T30904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.141367][T27059] console_flush_all+0x35a/0x730 [ 867.141393][T27059] console_unlock+0xa1/0x330 [ 867.173314][T27059] vprintk_emit+0x388/0x650 [ 867.177812][T27059] vprintk_default+0x26/0x30 [ 867.182414][T27059] vprintk+0x1d/0x30 [ 867.186308][T27059] _printk+0x79/0xa0 [ 867.190204][T27059] __ext4_msg+0x18f/0x1a0 [ 867.194534][T27059] ext4_process_orphan+0xd7/0x1c0 [ 867.199561][T27059] ext4_orphan_cleanup+0x6a8/0xa00 [ 867.204675][T27059] ext4_fill_super+0x3171/0x34e0 [ 867.209619][T27059] get_tree_bdev_flags+0x28e/0x300 [ 867.214737][T27059] get_tree_bdev+0x1f/0x30 [ 867.219173][T27059] ext4_get_tree+0x1c/0x30 [ 867.223590][T27059] vfs_get_tree+0x54/0x1d0 [ 867.228042][T27059] do_new_mount+0x207/0x680 [ 867.232540][T27059] path_mount+0x4a4/0xb20 [ 867.236883][T27059] __se_sys_mount+0x28f/0x2e0 [ 867.241557][T27059] __x64_sys_mount+0x67/0x80 [ 867.246153][T27059] x64_sys_call+0xd36/0x2fb0 [ 867.250745][T27059] do_syscall_64+0xd0/0x1a0 [ 867.255243][T27059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.261135][T27059] [ 867.263447][T27059] read to 0xffffffff86a1d388 of 8 bytes by task 27059 on cpu 0: [ 867.271064][T27059] console_flush_all+0x563/0x730 [ 867.275995][T27059] console_unlock+0xa1/0x330 [ 867.280581][T27059] vprintk_emit+0x388/0x650 [ 867.285069][T27059] vprintk_default+0x26/0x30 [ 867.289644][T27059] vprintk+0x1d/0x30 [ 867.293534][T27059] _printk+0x79/0xa0 [ 867.297435][T27059] __netdev_printk+0x321/0x3e0 [ 867.302187][T27059] netdev_info+0x9b/0xd0 [ 867.306434][T27059] __dev_set_promiscuity+0x173/0x360 [ 867.311714][T27059] __dev_set_rx_mode+0x113/0x160 [ 867.316652][T27059] dev_uc_del+0x85/0xa0 [ 867.320803][T27059] macsec_dev_stop+0x31e/0x360 [ 867.325573][T27059] __dev_close_many+0x1e1/0x420 [ 867.330439][T27059] dev_close_many+0xff/0x240 [ 867.335024][T27059] unregister_netdevice_many_notify+0x441/0x16a0 [ 867.341346][T27059] default_device_exit_batch+0x50c/0x560 [ 867.346972][T27059] cleanup_net+0x4df/0x880 [ 867.351416][T27059] process_scheduled_works+0x4cb/0x9d0 [ 867.356873][T27059] worker_thread+0x582/0x770 [ 867.361496][T27059] kthread+0x486/0x510 [ 867.365556][T27059] ret_from_fork+0x4b/0x60 [ 867.369968][T27059] ret_from_fork_asm+0x1a/0x30 [ 867.374731][T27059] [ 867.377052][T27059] value changed: 0x00000000000040d5 -> 0x00000000000040d6 [ 867.384150][T27059] [ 867.386466][T27059] Reported by Kernel Concurrency Sanitizer on: [ 867.392612][T27059] CPU: 0 UID: 0 PID: 27059 Comm: kworker/u8:21 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 867.405357][T27059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 867.415401][T27059] Workqueue: netns cleanup_net [ 867.420168][T27059] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 867.636273][T27059] veth0_macvtap: left promiscuous mode [ 867.737057][T30899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.922420][T30804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.188607][T27059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.237309][T27059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.297416][T27059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.368359][T27059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.439123][T27059] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.517792][T27059] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.637294][T27059] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.687631][T27059] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.785485][T30906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.796243][T27059] bridge_slave_1: left allmulticast mode [ 868.802017][T27059] bridge_slave_1: left promiscuous mode [ 868.807803][T27059] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.815632][T27059] bridge_slave_0: left allmulticast mode [ 868.821269][T27059] bridge_slave_0: left promiscuous mode [ 868.826950][T27059] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.835212][T27059] bridge_slave_1: left allmulticast mode [ 868.840837][T27059] bridge_slave_1: left promiscuous mode [ 868.846521][T27059] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.854183][T27059] bridge_slave_0: left allmulticast mode [ 868.859932][T27059] bridge_slave_0: left promiscuous mode [ 868.865621][T27059] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.116730][T27059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.126393][T27059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.136735][T27059] bond0 (unregistering): Released all slaves [ 869.145186][T27059] bond0 (unregistering): Released all slaves [ 869.153712][T27059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.163451][T27059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.172698][T27059] bond0 (unregistering): Released all slaves [ 869.240642][T27059] hsr_slave_0: left promiscuous mode [ 869.246288][T27059] hsr_slave_1: left promiscuous mode [ 869.251783][T27059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.259246][T27059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.266712][T27059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.274136][T27059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.283015][T27059] hsr_slave_0: left promiscuous mode [ 869.288582][T27059] hsr_slave_1: left promiscuous mode [ 869.294303][T27059] hsr_slave_0: left promiscuous mode [ 869.299897][T27059] hsr_slave_1: left promiscuous mode [ 869.305524][T27059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.312927][T27059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.325071][T27059] veth1_macvtap: left promiscuous mode [ 869.330552][T27059] veth0_macvtap: left promiscuous mode [ 869.336155][T27059] veth1_vlan: left promiscuous mode [ 869.341349][T27059] veth0_vlan: left promiscuous mode [ 869.346938][T27059] veth1_macvtap: left promiscuous mode [ 869.352424][T27059] veth0_macvtap: left promiscuous mode [ 869.358007][T27059] veth1_vlan: left promiscuous mode [ 869.363303][T27059] veth0_vlan: left promiscuous mode [ 869.447980][T27059] team0 (unregistering): Port device team_slave_1 removed [ 869.458028][T27059] team0 (unregistering): Port device team_slave_0 removed [ 869.486663][T27059] pimreg (unregistering): left allmulticast mode [ 869.556233][T27059] team0 (unregistering): Port device team_slave_1 removed [ 869.566663][T27059] team0 (unregistering): Port device team_slave_0 removed [ 870.168652][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.237072][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.286736][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.347115][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.439758][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.497272][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.547314][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.627209][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.707785][ T51] bridge_slave_1: left allmulticast mode [ 870.713468][ T51] bridge_slave_1: left promiscuous mode [ 870.719129][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.726830][ T51] bridge_slave_0: left allmulticast mode [ 870.732523][ T51] bridge_slave_0: left promiscuous mode [ 870.738148][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.746129][ T51] bridge_slave_1: left allmulticast mode [ 870.751750][ T51] bridge_slave_1: left promiscuous mode [ 870.757377][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.765432][ T51] bridge_slave_0: left allmulticast mode [ 870.771067][ T51] bridge_slave_0: left promiscuous mode [ 870.776701][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.956615][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.966236][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.975565][ T51] bond0 (unregistering): Released all slaves [ 870.984337][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.993985][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.003436][ T51] bond0 (unregistering): Released all slaves [ 871.068785][ T51] hsr_slave_0: left promiscuous mode [ 871.074387][ T51] hsr_slave_1: left promiscuous mode [ 871.079917][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.087410][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.094906][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.102282][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.111166][ T51] hsr_slave_0: left promiscuous mode [ 871.116781][ T51] hsr_slave_1: left promiscuous mode [ 871.122307][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.129749][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.137335][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.144802][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.156437][ T51] veth1_macvtap: left promiscuous mode [ 871.161893][ T51] veth0_macvtap: left promiscuous mode [ 871.167433][ T51] veth1_vlan: left promiscuous mode [ 871.172720][ T51] veth0_vlan: left promiscuous mode [ 871.178401][ T51] veth1_macvtap: left promiscuous mode [ 871.183965][ T51] veth0_macvtap: left promiscuous mode [ 871.189441][ T51] veth1_vlan: left promiscuous mode [ 871.194711][ T51] veth0_vlan: left promiscuous mode [ 871.281901][ T51] team0 (unregistering): Port device team_slave_1 removed [ 871.291625][ T51] team0 (unregistering): Port device team_slave_0 removed [ 871.342332][ T51] team0 (unregistering): Port device team_slave_1 removed [ 871.351799][ T51] team0 (unregistering): Port device team_slave_0 removed