last executing test programs: 3m36.510088575s ago: executing program 32 (id=35): symlinkat(0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000001d80)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @private1, @local, {[@routing={0x2b, 0x0, 0x2, 0x2}], {0x4e24, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 3m24.28019734s ago: executing program 33 (id=208): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 2m6.843116381s ago: executing program 5 (id=2014): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m5.817236327s ago: executing program 5 (id=2028): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 2m5.816789557s ago: executing program 5 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x30, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x28}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @exit, @tail_call, @func, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x4c, &(0x7f00000003c0)=""/76, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xd, 0xb621, 0x694}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x4, 0x4, 0x0, 0xc}, {0x3, 0x4, 0x4, 0xa}, {0x1, 0x1, 0x9, 0x7}, {0x0, 0x4, 0xb, 0xb}, {0x2, 0x1, 0x2, 0x7}, {0x3, 0x5, 0x3}, {0x5, 0x5, 0xe, 0xc}, {0x5, 0x2, 0x9, 0xc}], 0x10, 0x99, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c000180080001"], 0x20}}, 0x0) 2m5.816348447s ago: executing program 5 (id=2030): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") acct(&(0x7f0000000200)='./file1\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10001}]}}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x0) 2m5.658056757s ago: executing program 5 (id=2035): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2000000, &(0x7f00000001c0)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@noinit_itable}, {@usrquota}, {@dioread_nolock}, {@noinit_itable}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") creat(0x0, 0x16) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="880000", @ANYRES16=r1, @ANYBLOB="010000000000fdffffff03000000740001801c00028008000300080000e4080004000000000008000300090000000d0001007564703a73797a3100"], 0x88}}, 0x0) 2m4.838467554s ago: executing program 5 (id=2042): mkdir(&(0x7f0000000180)='./file0\x00', 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0xffffffff, 0x1, 0x8, 0xff, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0xb, 0x1, 0x20, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x7800, 0x80000001, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0xe, 0x5, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x2, 0x3, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x1e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xa, 0x29e3, 0xeb}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000880)=[{0x4, 0x2, 0x8, 0xb}, {0x0, 0x2, 0x6, 0x1}, {0x2, 0x5, 0x9, 0xc}, {0x5, 0x5, 0x13}, {0x1, 0x3, 0x5, 0x2}, {0x2, 0x1, 0xc, 0xb}], 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000500)='sched_switch\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 2m4.820748864s ago: executing program 34 (id=2042): mkdir(&(0x7f0000000180)='./file0\x00', 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0xffffffff, 0x1, 0x8, 0xff, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0xb, 0x1, 0x20, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x7800, 0x80000001, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0xe, 0x5, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x2, 0x3, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x1e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xa, 0x29e3, 0xeb}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000880)=[{0x4, 0x2, 0x8, 0xb}, {0x0, 0x2, 0x6, 0x1}, {0x2, 0x5, 0x9, 0xc}, {0x5, 0x5, 0x13}, {0x1, 0x3, 0x5, 0x2}, {0x2, 0x1, 0xc, 0xb}], 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000500)='sched_switch\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 1m49.996523888s ago: executing program 7 (id=2279): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x108) 1m49.911116048s ago: executing program 7 (id=2283): syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x5, 0x6, 0x4, 0x20005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800009ee00000d77811000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)="c5", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000240)=0x8) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080), 0x1, 0x504, &(0x7f0000000200)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x2) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000fc62647a"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x3, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 1m49.004332105s ago: executing program 7 (id=2293): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 1m48.929147665s ago: executing program 7 (id=2298): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x1}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 1m48.542868074s ago: executing program 7 (id=2304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018510000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 1m48.140556911s ago: executing program 7 (id=2309): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f0000001040), 0x0) (fail_nth: 1) 1m45.05486164s ago: executing program 3 (id=2351): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x7) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1m44.98151698s ago: executing program 3 (id=2353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0x2cff5, r1}, 0x38) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 1m44.98076424s ago: executing program 3 (id=2354): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utime(0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200010}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf255d0000006400a6800a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00001000a6800a00060008021100000000004c00a6800a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000800a50000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1m44.9242168s ago: executing program 3 (id=2355): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") acct(&(0x7f0000000200)='./file1\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10001}]}}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x0) 1m44.829708189s ago: executing program 3 (id=2360): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m44.564441728s ago: executing program 3 (id=2367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x86f04a359639778f}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6000, 0x8, 0x9}, {0x1, 0x2, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x54}}, 0x20040054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8907, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:'], 0x13) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000054"], 0x14}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r14, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x20, 0x0, 0x2, 0x6, {{0x2c, 0x4, 0x3, 0x4, 0xb0, 0x64, 0x0, 0x2, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0x5a, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @local, @multicast1, @initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}, @generic={0x44, 0x11, "f60525fa88273fae26815cb6df106d"}, @timestamp_prespec={0x44, 0x14, 0xaf, 0x3, 0x1, [{@multicast2, 0x80000001}, {@local, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xc1, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x82}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x1}]}, @generic={0x83, 0x9, "6768792abb1a5d"}, @cipso={0x86, 0xb, 0x0, [{0x6, 0x5, 'ds^'}]}, @lsrr={0x83, 0xb, 0x29, [@multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0xf64, 0xae72, {{0x26, 0x4, 0x3, 0x8, 0x98, 0x67, 0x0, 0x8c, 0x2f, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x2b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @empty, @private=0xa010101, @empty, @broadcast, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x66, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}, @timestamp={0x44, 0x14, 0x10, 0x0, 0x0, [0x0, 0x1, 0x80000000, 0xe0]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xf, [@loopback, @private=0xa010101, @remote]}, @end, @rr={0x7, 0x13, 0x9c, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @local, @rand_addr=0x64010101]}, @end]}}}}}) socket$packet(0x11, 0x3, 0x300) 1m44.541292048s ago: executing program 35 (id=2367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x86f04a359639778f}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6000, 0x8, 0x9}, {0x1, 0x2, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x54}}, 0x20040054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8907, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:'], 0x13) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000054"], 0x14}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r14, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x20, 0x0, 0x2, 0x6, {{0x2c, 0x4, 0x3, 0x4, 0xb0, 0x64, 0x0, 0x2, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0x5a, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @local, @multicast1, @initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}, @generic={0x44, 0x11, "f60525fa88273fae26815cb6df106d"}, @timestamp_prespec={0x44, 0x14, 0xaf, 0x3, 0x1, [{@multicast2, 0x80000001}, {@local, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xc1, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x82}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x1}]}, @generic={0x83, 0x9, "6768792abb1a5d"}, @cipso={0x86, 0xb, 0x0, [{0x6, 0x5, 'ds^'}]}, @lsrr={0x83, 0xb, 0x29, [@multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0xf64, 0xae72, {{0x26, 0x4, 0x3, 0x8, 0x98, 0x67, 0x0, 0x8c, 0x2f, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x2b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @empty, @private=0xa010101, @empty, @broadcast, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x66, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}, @timestamp={0x44, 0x14, 0x10, 0x0, 0x0, [0x0, 0x1, 0x80000000, 0xe0]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xf, [@loopback, @private=0xa010101, @remote]}, @end, @rr={0x7, 0x13, 0x9c, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @local, @rand_addr=0x64010101]}, @end]}}}}}) socket$packet(0x11, 0x3, 0x300) 1m32.994011616s ago: executing program 36 (id=2309): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f0000001040), 0x0) (fail_nth: 1) 35.862746823s ago: executing program 1 (id=3801): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2, @private=0xa010101}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0x90}}, 0x20000) 35.507504871s ago: executing program 1 (id=3807): unshare(0x6a040600) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0xd, 0x6}, @control={0x9, 0x0, 0xb}}, {0x4, 0x0, 0x0, 0x4, @time={0x9, 0x8}, {0x6, 0x4}, {}, @time=@time={0x7}}], 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xe, 0x145, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7800, 0x61, 0x75, 0x6}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) chown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee01) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x8c, 0x7, 0x100, 0x200000000, 0x3, 0x9, 0x9}) 34.851498489s ago: executing program 1 (id=3819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "f7eaeda1a0f39cf9"}, 0x28) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x42) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x80, 0x18, 0x15, 0x3dc3, 0x0, 0xfffffffc, 0x0}) 34.749944919s ago: executing program 1 (id=3822): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa845, 0x83) fallocate(r0, 0x10, 0x3, 0x7c27) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='sys_enter\x00', r3}, 0x18) r4 = syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 34.292309207s ago: executing program 1 (id=3826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="415d5e424cc794755935ee33ca1e2408000a0001c62401a17dbfa4a23ca3c153427dc38e30c7d6fc5b01174649ebd6bdd4a09fbd14338bc88961e4ee798a766a75361e30263503d27c7e043e264273be6b1af01bd8db6fe6812eef5225522dde6c2cf58e7fbb24d2e17ae67d8a359e5aed3420494c1f6b91a1f0ea608e37cfef0f36bd8940d2994dcd3dc418b73488cb0b877e904a8d05181dcfd24faba18e86d3ab05a7d16aa5bfaaf22080750f7fbe9befd94defcd46c3830e225684a0be75350f26fbd50ac3b29398d51fe91e832578be2bbd75e0b991a7ee4c148bc050e66abc496bc1acb5ca2dcb971bb326af70e1", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="415d5e424cc794755935ee33ca1e2408000a0001c62401a17dbfa4a23ca3c153427dc38e30c7d6fc5b01174649ebd6bdd4a09fbd14338bc88961e4ee798a766a75361e30263503d27c7e043e264273be6b1af01bd8db6fe6812eef5225522dde6c2cf58e7fbb24d2e17ae67d8a359e5aed3420494c1f6b91a1f0ea608e37cfef0f36bd8940d2994dcd3dc418b73488cb0b877e904a8d05181dcfd24faba18e86d3ab05a7d16aa5bfaaf22080750f7fbe9befd94defcd46c3830e225684a0be75350f26fbd50ac3b29398d51fe91e832578be2bbd75e0b991a7ee4c148bc050e66abc496bc1acb5ca2dcb971bb326af70e1", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) (async) 33.635235774s ago: executing program 1 (id=3838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 33.606230034s ago: executing program 37 (id=3838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 22.908206195s ago: executing program 9 (id=4000): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@abort}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001180), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r1, 0x11b, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x4044000) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000d6f40000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0xa8}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 22.827194874s ago: executing program 9 (id=4005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000002300)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa112011"], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r5) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)="3080", 0x2, r6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x2}, {0x10, 0xffff}, {0xf}}}, 0x24}}, 0x1000000) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a01000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 22.697725524s ago: executing program 9 (id=4008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) mbind(&(0x7f00003e6000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x5, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0x9c, 0x0, 0x100, 0x8, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="877eef484e1d1460bb9d9c44ef6ecd47f1366f2205d349d67ab0a6c3a391a9186ebd06412ae3005c9b6206823826915a2ce639a052303d9a0c27991ea44ea3da6ce6785d7aa3fc55ff7929b3f0bfb91fd1ee7cde780843e7f7a47369e4e63fcf36253b332b09f6908a4fde54b42f2eeadb23", 0x72, 0x4000, &(0x7f0000000440)={0xa, 0x4e24, 0x8001, @loopback, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='vm_unmapped_area\x00', r1, 0x0, 0x7}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r7, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) connect$unix(r8, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 22.674230894s ago: executing program 9 (id=4010): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000000865c90000000000000000070015080900010073797a300000000006000240000500000c00048008000140000000040500030001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r2}, 0x8, 0x5, 0xedd1}) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f00000000c0)='./file0/file0\x00', 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}], 0x1}, 0x70040000}], 0x2, 0x94) 22.647205984s ago: executing program 9 (id=4011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 22.470330223s ago: executing program 9 (id=4017): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x28}}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe3e, 0x50}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x2, 0x1, 0x492, 0xb1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000400}, 0x4008010) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x45}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3c3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = io_uring_setup(0x2104, &(0x7f0000000540)={0x0, 0x80000001, 0x2, 0x3, 0x2}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x19, 0x20000000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), 0x0}, 0x20) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_open_pts(r8, 0x80) move_mount(r9, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x351300, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 22.449640923s ago: executing program 38 (id=4017): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x28}}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe3e, 0x50}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x2, 0x1, 0x492, 0xb1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000400}, 0x4008010) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x45}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3c3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = io_uring_setup(0x2104, &(0x7f0000000540)={0x0, 0x80000001, 0x2, 0x3, 0x2}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x19, 0x20000000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), 0x0}, 0x20) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_open_pts(r8, 0x80) move_mount(r9, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x351300, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 4.101278095s ago: executing program 0 (id=4421): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES16], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x8, 0x4, 0x9, 0x8, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x80000001, r4, 0x4}, 0x38) gettid() r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0xc0000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 3.953316854s ago: executing program 0 (id=4426): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0xb4}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80840) write$P9_RLERRORu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000701000f006367726f75702e74687265616473000a96e814"], 0x1c) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000e40)=ANY=[@ANYBLOB="7c00000063fd1187ee83caa0a569b2d7d2e5856645f21d3b1c1927ea01973def89690aba114455c65609b77dd1d55ae40149e193ccd407ba1a8c9c8de16080ec460a4f0c20871314743093839d59909359c9423462cecb0c57abd66d384fbfe6a4a9891a6a0080000091f2d748cc4c0f7f8e683ed1bd8450ad9552734f37de7ac6393629e079a398e2de435b69b1b58407eef4421335810d69440d9b9f97ce5655918dc215b0e7cc1c97df4a8d42597e939d6fcb04049a68a9c612e0508a35165207f04bd276e2f4ea2a23c161331e", @ANYRES16=r8, @ANYBLOB="20002abd7000fddbdf251b00000008009a000000000007002100626200000800010001000000060021006200000008009a0000000000380022803400008008000200ccca00000800020002000000080007007b2a00000800060000020000080007000100000008000200000000000800010055000000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="5621516a25f3a9b87f6e7855971200f4e38b5ad3ebfe3c86f8647cf7464c9fecee8063b7d2b93c1573ce42ce217412d3cc2034f62d22e282a4a5722ffc671f05fe08dc18141b457c3fc1fb9a692a955c46c754dc96f9d1d992e82613a72c17947dcb5a8407a085b7f8d6cbb6f7b45ac8c6a89dbf57812012a64f1ae088807dce995d6802ee02fbfefb0c6fd689bdc30367daedc3af8a58ca8e24eba2776e42b610dbc426"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10) fadvise64(0xffffffffffffffff, 0x9c6, 0x6850af42, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r10, @ANYBLOB="359ad10ff592afea7007b73fc2208bea88f6c6c528cdc3be3a74b29a83136f784574481817000deb419d845fcfded16c685eae730f63f2c9bfd40fd80ce1974391b2fed20efe2ca1997f612b8136748c3b125ab1bad8607bf76e06eee9f3c5926febfe680d06ec364f", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioperm(0x0, 0x8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.816695553s ago: executing program 0 (id=4430): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup2(r2, r0) r3 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20) 3.786637683s ago: executing program 0 (id=4433): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r3, @ANYBLOB="0000000014000000000000002b"], 0x40}}], 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x7003}, &(0x7f0000000140)=0x54) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0xe225c000) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) unshare(0x28000600) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\t\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffd}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000000)=ANY=[], 0x0) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 3.275842781s ago: executing program 2 (id=4441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x3a9040) r4 = dup3(r3, r2, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0020000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2518000000f0000280e6000500388d1ee303adc87479044f4805d990fcd7dc6e6021239aa69a7f0f7c27af80a1c0f9a7e76cbcede9ea3b5367ed1b13e1fcdc7429f6e424f0bec571e1f0622ee11c2a582548f6823a14b80f01e7970ff0e74c4ba8d4bd9fbd4b5a42bfa7f09a43b2e2585b4c52ca16ffff5e94622f659e296b6837c3eae28018adff490475703a4c6f01b9885a4126f33712b0071847d7202012f020cf6dba4bf8b34dd81c52d9563ae8a7d1c0e8364b975b1806bd33b1ff40e02d9b42138a07932cd026e0039ee7f639ceb6267949071aa76d4b0086ab58d073876e2f055ac8e7c95b61e64d2b93263e78c075a71bed65ac5377620000040001009c01028020000500b9e83b0c239608c870f827062055af59b6136e05a4390a3bd6bd39d30800020096000000d3000500900a31a6011b489218cc62489104ae39cb7f7981052646717726c4cf7ed6fed18d7f0de25329c1744f2185b0fdc941cfad3528a7f6c7a36d6c289eb6465ce6f4139593477589d0d0715ffa07e35fcd718d976f526eaeae4c7ec0b9365d41823829c6b2b393ec9dc649bafdccf054bb15bfbdb33ef6de2b9e6ed8e50b34f5a70ba02f0d9718b60bf103551bc8544ecb20809f4ce2536b324822f985624cd2f2338d085628ba05347ca6e142069a669cea7f1c592397bd6887516ddf7b053b8124d41ae1d7c860468606488117a2a09300840003802800018004000300080001000100000008000100ff7f0000080002002c28270005000200000000001c0001800c0002002b072a88292f5c000800010006000000040003003c0001800b0002002e2c272f1c7d00001100020073636865645f73776974636800000000090002002e5b2e2c0000000004000300060002002d00000004000100080002007100000008000200050000000400010008000700"], 0x2b0}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r6, 0x267a4e37}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r8, r9) fcntl$setown(r8, 0x8, r7) tkill(r7, 0x13) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000900)={0x43, 0x40000001, 0x1}, 0x10) 2.081782797s ago: executing program 0 (id=4452): r0 = socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x3, 0x0, 0x10000) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x11, 0x0, 0xfffd) 2.081264587s ago: executing program 2 (id=4453): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$eJzs3c9vHFcdAPDvjH+sm6ZxAj1ABSRAIaAou/Gmjape2lxAqKqEqDggDqmxN5bJbjZk16U2kXD/hiKBxAn+BA5IHJB64sCNIxIHhFQOSAEsUIwE0qKZHf+ovcaLd73bej8faTLz5s3M973Ys+/t2/W8ACbWlYjYjIjZiHgzIuaL/UmxxKvdJTvuydajpe2tR0tJdDpv/C3J87N9+QmlvWs+XVxzLiK+8dWI7ySH47bWN+4t1uu1h0W60m48qLTWN66vNhZXaiu1+9XqrYVbN166+WJ1aHW93PjF46+svvbNX//q0+//bvPLP8iKdb7I263HkHWrPrMbJzMdEa+dRrAxmCrWs2MuByeTRsTHIuJz+f0/H1P5bycAcJZ1OvPRmd+fBgDOujQfA0vSckSkadEJKHfH8J6Nc2m92Wpfu9tcu7/cHSu7GDPp3dV67cal0h++lx88k2TphTwvz8/T1QPpmxFxKSJ+VHoqT5eXmvXl8XR5AGDiPb2//Y+If5bStFzu69Qen+oBAB8Zc+MuAAAwctp/AJg82n8AmDx9tP/Fh/2bp14WAGA0/r/3/xdOrRwAwOgY/weAyaP9B4CJ8vXXX8+Wznbx/Ovlt9bX7jXfur5ca90rN9aWykvNhw/KK83mSv7MnsZx16s3mw8WXoi1tyvtWqtdaa1v3Gk01+637+TP9b5TmxlJrQCA/+XS5fd+n0TE5stP5Uvsm8tBWw1nWzruAgBjMzXIyToI8JFmti+YXH014Xkn4benXhZgPHo+zHuu5+YH/aS7erefIL5nBB8qVz/Z//i/OZ7hbDH+D5PrZOP/rwy9HMDoGf+HydXpJAfn/J/dzQIAzqQBvsLX+eGwOiHAWB03mfdxn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJDofEd+NJC3nc4Gn2b9puRzxTERcjJnk7mq9diMiLsTliJgpZemFcRcaABhQ+pekmP/r6vzz5w/mzib/KuXriPj+T9/48duL7fbDhWz/33f3l3amD6vunTfAvIIAwJDl7Xe1WO97I/9k69HSzjLK8jy+Hf8ppiJe2t56lC/dnOnIdkbM5X2Jc/9IYro4Zy4inouIqSHE33wnIj7Rq/5JPjZysZj5dH/8KGI/M9L46Qfip3led511vj4+hLLApHnvdkS82uv+S+NKvu59/8/lr1CDe3y7e7Gd177tffGni0hTPeJn9/yVfmO88JuvHdrZme/mvRPx3HSv+Mlu/OSI+M/3Gf+Pn/rMu68ckdf5WcTV6B1/f6xKu/Gg0lrfuL7aWFyprdTuV6u3Fm7deOnmi9VKPkZd2RmpPuyvL1+7cFTZsvqfOyL+XM/6z+6e+4U+6//zf7/57c/uJUsH43/p871//s/2jN+VtYlf7DP+4rlfHjl9dxZ/+Yj6H/fzv9Zn/Pf/vLHc56EAwAi01jfuLdbrtYcDbWTvQodxnUMbWRH7O3inuzhY0D/FadTihBszp/W/euob07t9xeFe+VvZFXtkpX3+kpxkIx16LQbaeDKqWON7TQJGY++mH3dJAAAAAAAAAAAAAACAo4ziT5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrv8GAAD//xxkzKw=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4018, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x0, 0x150, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00'}}, @common=@unspec=@rateest={{0x68}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r7, 0x1}, 0x14}}, 0x48000) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd0, r7, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24040800}, 0x804) 1.998099067s ago: executing program 2 (id=4455): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 1.977148167s ago: executing program 2 (id=4457): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x100000}, {0x5, 0xfffffffffffffffe, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_context(r10, &(0x7f00000002c0)='system_u:object_r:kvm_device_t:s0\x00', 0x22) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x2, 0x2, {0xa, 0x4e20, 0xe442, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0xfffffffe}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='ext4_load_inode\x00', r1, 0x0, 0x80000001}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRES64], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRESHEX=r11, @ANYRES64=r11, @ANYRES16=r11, @ANYRES32, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000e104000000000000fd0807020000f8ffffffb703000008000000b70400000000000085400000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f0000000e80)=""/31, 0x35, 0x1f, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f80)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0x20, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f0000000bc0)='GPL\x00', 0x3, 0xcb, &(0x7f0000000c00)=""/203, 0x41100, 0xa, '\x00', r13, @fallback=0x35, r14, 0x8, &(0x7f0000000f00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0xc, 0x59, 0x8}, 0x10, r15, r1, 0x9, 0x0, &(0x7f0000000fc0)=[{0x3, 0x3, 0x8, 0x7}, {0x0, 0x1, 0x5, 0xb}, {0x0, 0x3, 0x3, 0xd}, {0x1, 0x9, 0xd, 0x1}, {0x2, 0x1, 0x10, 0x6}, {0x3, 0x2, 0x2, 0x4}, {0x3, 0x4, 0xc, 0x6}, {0x0, 0x3, 0x8, 0x5}, {0x4, 0x2, 0x5, 0x9}], 0x10, 0xc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x626, &(0x7f0000000100)="$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") 1.735042936s ago: executing program 2 (id=4461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x200440, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in=@private, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@private}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x20}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000000c0)=0xfff) syz_emit_ethernet(0x76, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @remote, {0x13, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x1b, 0x5b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @ra={0x94, 0x4}, @generic={0x0, 0xa, "83dc61b1ce570743"}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "82ee46f3c3"}]}]}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) iopl(0xa) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) 1.660461245s ago: executing program 8 (id=4463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x3a9040) r4 = dup3(r3, r2, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b0}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r6, 0x267a4e37}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r8, r9) fcntl$setown(r8, 0x8, r7) tkill(r7, 0x13) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000900)={0x43, 0x40000001, 0x1}, 0x10) 1.341283255s ago: executing program 6 (id=4466): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000010010000ff7f0000cc"], 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2008, 0x800}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.279888834s ago: executing program 0 (id=4468): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40080) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x10041, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ddf0f0ceabc6dd05ce82c81eb95cbea0e809750c3ce2786383ac778f322dd1f1deea335a59f26c3454c68ad8000000de39f082e53f6b5d576370c067a3c4e98668393621199a2e1f0597664785e76f3eca7d259e62ea867d235c94f0c460f7018318a3b810efefd482648a55e968", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800009bb1d690979efa140a6968f7d042c05e00000000000000000000000000181100007de7d9f0ff25cdf42556eaac30d9d2645f37b0ae029ef17434", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) (async) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x7) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (rerun: 64) syz_clone3(&(0x7f0000000800)={0x224004080, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 1.244636414s ago: executing program 39 (id=4468): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40080) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x10041, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ddf0f0ceabc6dd05ce82c81eb95cbea0e809750c3ce2786383ac778f322dd1f1deea335a59f26c3454c68ad8000000de39f082e53f6b5d576370c067a3c4e98668393621199a2e1f0597664785e76f3eca7d259e62ea867d235c94f0c460f7018318a3b810efefd482648a55e968", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800009bb1d690979efa140a6968f7d042c05e00000000000000000000000000181100007de7d9f0ff25cdf42556eaac30d9d2645f37b0ae029ef17434", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) (async) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x7) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (rerun: 64) syz_clone3(&(0x7f0000000800)={0x224004080, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 932.455343ms ago: executing program 6 (id=4472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000100000009000000ae"], 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) 858.672743ms ago: executing program 4 (id=4473): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x141601) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES16], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x8, 0x4, 0x9, 0x8, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x80000001, r4, 0x4}, 0x38) gettid() r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0xc0000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 790.892392ms ago: executing program 4 (id=4474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xf1, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}, 0x1, 0x0, 0x1000000}, 0x0) 732.439382ms ago: executing program 6 (id=4475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) 731.940402ms ago: executing program 4 (id=4476): mkdir(&(0x7f0000000580)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000005c0)={{r0}, "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"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x83, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000800000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0xc, [@volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x6, 0x7}], "b6"}, @fwd={0x7}, @restrict={0xf}]}, {0x0, [0x0, 0x9, 0x2e, 0x2e, 0x61, 0x30, 0x5f, 0x0, 0x2e, 0x30]}}, &(0x7f00000015c0)=""/214, 0x70, 0xd6, 0x0, 0x81, 0x10000, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[r1, r4, r5, r6], &(0x7f0000001700)=[{0x3, 0x4, 0x7}, {0x1, 0x4, 0x10, 0x4}, {0x5, 0x1, 0x8, 0x4}, {0x1, 0x5, 0x2, 0xf}, {0x1, 0x1, 0xc, 0x1}, {0x4, 0x5, 0x9, 0x7}], 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r9, 0x0, 0x400000000000000, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 710.779302ms ago: executing program 8 (id=4477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0xa, 0x0, 0x1000) recvfrom$inet(r5, &(0x7f00000002c0)=""/224, 0xe0, 0x102, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 696.060422ms ago: executing program 6 (id=4478): r0 = epoll_create(0x10000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x121000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000380)={0x3}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf7, 0x1, "73d60f7ced211ebcad2b07603d534502ac667d18b0ffc2e5c908ed4a583170e9466681364069f6f758f694705f21dd914cdf56adda55f6afac57cf2efb1c16c9b908dba0af62d906dd5e6e5dddb098bf3f9744e1b7baacdfd1d03287a80f1d40652e80128c4122d42c383d961a36d61fa78f7cdbce1555574a208f7afecbbab5e1d1acb3ecc4f27ffca50a13aec9ad550f9754d1e30accc09052215c6f2fee0de91fee85443e846b231da7f1cecfb9ccb69e5dd61abcc305ef43799517c214d1053f1d40c84ef6436e3952066db082f07949ef42d052a3988e518a4336dd2cf4b5b7158410ea7e92fcd17baf36e4689835cc0d"}}]}]}, 0x11c}}, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x40001}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) sendto$packet(r4, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088a81100", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060004000364bc24eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x8010) 575.785881ms ago: executing program 8 (id=4479): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r1, 0x529}}, 0x48) 575.534752ms ago: executing program 6 (id=4480): unshare(0x2a020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) 574.810741ms ago: executing program 4 (id=4481): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xffffffbfffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r1) r4 = epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001040)) write$UHID_INPUT(r3, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 541.299282ms ago: executing program 8 (id=4482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 480.451651ms ago: executing program 6 (id=4483): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/74, 0x4a, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 445.695901ms ago: executing program 2 (id=4484): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0xa28000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6, 0x1038, r0}, 0x10) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xc6d}], 0x2, 0x160, 0x0) 398.424231ms ago: executing program 4 (id=4485): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x1ff, 0x7}]}) (fail_nth: 2) 116.96706ms ago: executing program 4 (id=4486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x3a9040) r4 = dup3(r3, r2, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b0}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r6, 0x267a4e37}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r8, r9) fcntl$setown(r8, 0x8, r7) tkill(r7, 0x13) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000900)={0x43, 0x40000001, 0x1}, 0x10) 116.57711ms ago: executing program 8 (id=4487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) 0s ago: executing program 8 (id=4488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): scall_trace_enter+0xd1/0x1f0 [ 220.581811][T14447] ? fpregs_assert_state_consistent+0x83/0xa0 [ 220.581861][T14447] do_syscall_64+0xaa/0x1c0 [ 220.581889][T14447] ? clear_bhb_loop+0x55/0xb0 [ 220.582013][T14447] ? clear_bhb_loop+0x55/0xb0 [ 220.582046][T14447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.582148][T14447] RIP: 0033:0x7f570481cda9 [ 220.582167][T14447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.582186][T14447] RSP: 002b:00007f5702e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000111 [ 220.582235][T14447] RAX: ffffffffffffffda RBX: 00007f5704a35fa0 RCX: 00007f570481cda9 [ 220.582315][T14447] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000020000180 [ 220.582334][T14447] RBP: 00007f5702e87090 R08: 0000000000000000 R09: 0000000000000000 [ 220.582346][T14447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.582360][T14447] R13: 0000000000000000 R14: 00007f5704a35fa0 R15: 00007fff3f1d4998 [ 220.582462][T14447] [ 220.823990][T14422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.824793][T14445] loop9: detected capacity change from 0 to 256 [ 220.864617][T14451] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3835'. [ 220.876666][T14451] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3835'. [ 220.920609][T14445] vfat: Unknown parameter '017777777777777777777770000000000000000000001000000000000000000000010000000000000000000000050xffffffffffffffff00000000000000000007' [ 221.076112][T14470] FAULT_INJECTION: forcing a failure. [ 221.076112][T14470] name failslab, interval 1, probability 0, space 0, times 0 [ 221.088839][T14470] CPU: 0 UID: 0 PID: 14470 Comm: syz.9.3844 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 221.088943][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 221.088958][T14470] Call Trace: [ 221.088966][T14470] [ 221.088973][T14470] dump_stack_lvl+0xf2/0x150 [ 221.089101][T14470] dump_stack+0x15/0x1a [ 221.089124][T14470] should_fail_ex+0x24a/0x260 [ 221.089166][T14470] should_failslab+0x8f/0xb0 [ 221.089195][T14470] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 221.089242][T14470] ? sidtab_sid2str_get+0xb8/0x140 [ 221.089271][T14470] kmemdup_noprof+0x2a/0x60 [ 221.089295][T14470] sidtab_sid2str_get+0xb8/0x140 [ 221.089331][T14470] security_sid_to_context_core+0x1eb/0x2f0 [ 221.089376][T14470] security_sid_to_context+0x27/0x30 [ 221.089417][T14470] selinux_lsmprop_to_secctx+0x68/0xf0 [ 221.089496][T14470] security_lsmprop_to_secctx+0x40/0x80 [ 221.089602][T14470] audit_log_task_context+0x76/0x180 [ 221.089710][T14470] audit_log_task+0xf9/0x1c0 [ 221.089746][T14470] audit_seccomp+0x68/0x130 [ 221.089781][T14470] __seccomp_filter+0x6fa/0x1180 [ 221.089811][T14470] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.089852][T14470] ? vfs_write+0x644/0x920 [ 221.089885][T14470] __secure_computing+0x9f/0x1c0 [ 221.089912][T14470] syscall_trace_enter+0xd1/0x1f0 [ 221.089965][T14470] ? fpregs_assert_state_consistent+0x83/0xa0 [ 221.090006][T14470] do_syscall_64+0xaa/0x1c0 [ 221.090105][T14470] ? clear_bhb_loop+0x55/0xb0 [ 221.090140][T14470] ? clear_bhb_loop+0x55/0xb0 [ 221.090174][T14470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.090209][T14470] RIP: 0033:0x7fcae433cda9 [ 221.090227][T14470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.090356][T14470] RSP: 002b:00007fcae29a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 221.090380][T14470] RAX: ffffffffffffffda RBX: 00007fcae4555fa0 RCX: 00007fcae433cda9 [ 221.090395][T14470] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 221.090411][T14470] RBP: 00007fcae29a7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.090425][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.090440][T14470] R13: 0000000000000000 R14: 00007fcae4555fa0 R15: 00007ffd1b747fa8 [ 221.090532][T14470] [ 221.139824][T14464] ip6gretap0 speed is unknown, defaulting to 1000 [ 221.359402][T14486] FAULT_INJECTION: forcing a failure. [ 221.359402][T14486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.372594][T14486] CPU: 1 UID: 0 PID: 14486 Comm: syz.8.3847 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 221.372627][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 221.372640][T14486] Call Trace: [ 221.372648][T14486] [ 221.372657][T14486] dump_stack_lvl+0xf2/0x150 [ 221.372691][T14486] dump_stack+0x15/0x1a [ 221.372782][T14486] should_fail_ex+0x24a/0x260 [ 221.372823][T14486] should_fail+0xb/0x10 [ 221.372859][T14486] should_fail_usercopy+0x1a/0x20 [ 221.372963][T14486] _copy_from_user+0x1c/0xa0 [ 221.372991][T14486] copy_bpf_fprog_from_user+0xda/0x240 [ 221.373022][T14486] sk_setsockopt+0xb4d/0x1f20 [ 221.373059][T14486] sock_setsockopt+0x3c/0x50 [ 221.373084][T14486] __sys_setsockopt+0x13d/0x200 [ 221.373126][T14486] __x64_sys_setsockopt+0x66/0x80 [ 221.373160][T14486] x64_sys_call+0x282e/0x2dc0 [ 221.373193][T14486] do_syscall_64+0xc9/0x1c0 [ 221.373224][T14486] ? clear_bhb_loop+0x55/0xb0 [ 221.373297][T14486] ? clear_bhb_loop+0x55/0xb0 [ 221.373331][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.373362][T14486] RIP: 0033:0x7f570481cda9 [ 221.373436][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.373455][T14486] RSP: 002b:00007f5702e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.373475][T14486] RAX: ffffffffffffffda RBX: 00007f5704a35fa0 RCX: 00007f570481cda9 [ 221.373491][T14486] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 221.373506][T14486] RBP: 00007f5702e87090 R08: 0000000000000010 R09: 0000000000000000 [ 221.373521][T14486] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 221.373560][T14486] R13: 0000000000000000 R14: 00007f5704a35fa0 R15: 00007fff3f1d4998 [ 221.373582][T14486] [ 221.562245][T14467] ip6gretap0 speed is unknown, defaulting to 1000 [ 221.587548][T14464] lo speed is unknown, defaulting to 1000 [ 221.625083][T14494] FAULT_INJECTION: forcing a failure. [ 221.625083][T14494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.638337][T14494] CPU: 0 UID: 0 PID: 14494 Comm: syz.9.3850 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 221.638368][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 221.638439][T14494] Call Trace: [ 221.638445][T14494] [ 221.638451][T14494] dump_stack_lvl+0xf2/0x150 [ 221.638492][T14494] dump_stack+0x15/0x1a [ 221.638515][T14494] should_fail_ex+0x24a/0x260 [ 221.638649][T14494] should_fail+0xb/0x10 [ 221.638709][T14494] should_fail_usercopy+0x1a/0x20 [ 221.638727][T14494] _copy_from_user+0x1c/0xa0 [ 221.638750][T14494] memdup_user+0x64/0xc0 [ 221.638855][T14494] strndup_user+0x68/0xa0 [ 221.638880][T14494] __se_sys_mount+0x91/0x2d0 [ 221.638935][T14494] ? fput+0x1c4/0x200 [ 221.639007][T14494] ? ksys_write+0x176/0x1b0 [ 221.639034][T14494] __x64_sys_mount+0x67/0x80 [ 221.639133][T14494] x64_sys_call+0x2c84/0x2dc0 [ 221.639160][T14494] do_syscall_64+0xc9/0x1c0 [ 221.639190][T14494] ? clear_bhb_loop+0x55/0xb0 [ 221.639286][T14494] ? clear_bhb_loop+0x55/0xb0 [ 221.639320][T14494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.639351][T14494] RIP: 0033:0x7fcae433cda9 [ 221.639367][T14494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.639423][T14494] RSP: 002b:00007fcae29a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.639447][T14494] RAX: ffffffffffffffda RBX: 00007fcae4555fa0 RCX: 00007fcae433cda9 [ 221.639462][T14494] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000020000000 [ 221.639477][T14494] RBP: 00007fcae29a7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.639490][T14494] R10: 0000000000075809 R11: 0000000000000246 R12: 0000000000000001 [ 221.639502][T14494] R13: 0000000000000000 R14: 00007fcae4555fa0 R15: 00007ffd1b747fa8 [ 221.639523][T14494] [ 221.842441][T14490] bridge_slave_0: left allmulticast mode [ 221.848131][T14490] bridge_slave_0: left promiscuous mode [ 221.853871][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.885347][T14490] bridge_slave_1: left allmulticast mode [ 221.891024][T14490] bridge_slave_1: left promiscuous mode [ 221.896782][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.943835][T14490] bond0: (slave bond_slave_0): Releasing backup interface [ 221.964341][T14490] bond0: (slave bond_slave_1): Releasing backup interface [ 221.977781][T14490] team0: Port device team_slave_0 removed [ 221.987227][T14490] team0: Port device team_slave_1 removed [ 222.043361][ T3377] ip6gretap0 speed is unknown, defaulting to 1000 [ 222.083426][T14499] team0: Mode changed to "loadbalance" [ 222.327387][T14467] lo speed is unknown, defaulting to 1000 [ 222.594180][T14464] chnl_net:caif_netlink_parms(): no params data found [ 222.613243][ T2962] kernel write not supported for file /563/attr/exec (pid: 2962 comm: kworker/1:2) [ 222.688031][T14522] loop6: detected capacity change from 0 to 512 [ 222.745929][T14522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.814267][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 222.814284][ T29] audit: type=1400 audit(2000000657.840:224275): avc: denied { create } for pid=14518 comm="syz.2.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 222.842577][T14522] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.884367][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.884543][ T29] audit: type=1400 audit(2000000657.877:224276): avc: denied { write open } for pid=14521 comm="syz.6.3860" path="/156/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.946238][T14464] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.953557][T14464] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.970182][T14532] loop9: detected capacity change from 0 to 256 [ 222.977228][T14464] bridge_slave_0: entered allmulticast mode [ 222.984596][T14464] bridge_slave_0: entered promiscuous mode [ 222.993713][T14464] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.000905][T14464] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.002683][ T29] audit: type=1400 audit(2000000658.008:224277): avc: denied { mount } for pid=14531 comm="syz.9.3862" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 223.030489][T14464] bridge_slave_1: entered allmulticast mode [ 223.040184][T14534] loop8: detected capacity change from 0 to 2048 [ 223.046845][T14534] EXT4-fs: inline encryption not supported [ 223.062637][ T29] audit: type=1400 audit(2000000658.055:224278): avc: denied { open } for pid=14535 comm="syz.6.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 223.063450][T14464] bridge_slave_1: entered promiscuous mode [ 223.082478][ T29] audit: type=1400 audit(2000000658.055:224279): avc: denied { kernel } for pid=14535 comm="syz.6.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 223.108345][ T29] audit: type=1400 audit(2000000658.074:224280): avc: denied { create } for pid=14531 comm="syz.9.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.136861][ T29] audit: type=1400 audit(2000000658.074:224281): avc: denied { connect } for pid=14531 comm="syz.9.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.148367][T14534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.203625][ T29] audit: type=1400 audit(2000000658.186:224282): avc: denied { append } for pid=14533 comm="syz.8.3863" path="/340/file2/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.255450][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.293165][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.302717][ T29] audit: type=1400 audit(2000000658.242:224283): avc: denied { ioctl } for pid=14533 comm="syz.8.3863" path="/340/file2/memory.events" dev="loop8" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.328179][ T29] audit: type=1400 audit(2000000658.261:224284): avc: denied { unmount } for pid=13340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 223.383475][T14543] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.415650][T14464] team0: Port device team_slave_0 added [ 223.421831][T14543] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 223.434343][T14543] EXT4-fs (loop8): This should not happen!! Data will be lost [ 223.434343][T14543] [ 223.443299][T14553] loop6: detected capacity change from 0 to 2048 [ 223.444071][T14543] EXT4-fs (loop8): Total free blocks count 0 [ 223.444090][T14543] EXT4-fs (loop8): Free/Dirty block details [ 223.444103][T14543] EXT4-fs (loop8): free_blocks=2415919104 [ 223.444118][T14543] EXT4-fs (loop8): dirty_blocks=8192 [ 223.455520][T14464] team0: Port device team_slave_1 added [ 223.456461][T14543] EXT4-fs (loop8): Block reservation details [ 223.484920][T14543] EXT4-fs (loop8): i_reserved_data_blocks=512 [ 223.526237][T14464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.533294][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.559506][T14464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.599142][T14464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.606292][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.632235][T14464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.650900][T14553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.684369][T10180] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 223.711958][T14464] hsr_slave_0: entered promiscuous mode [ 223.730195][T14464] hsr_slave_1: entered promiscuous mode [ 223.736437][T14464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.744066][T14464] Cannot create hsr debugfs directory [ 223.766687][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.775394][T14560] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 223.816348][T14563] program syz.2.3871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.827464][T14563] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3871'. [ 223.837354][T14563] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3871'. [ 223.900584][T14567] loop6: detected capacity change from 0 to 512 [ 223.943700][T14567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.985127][T14567] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.999031][T14573] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 224.069508][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.219146][T14589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.234254][T14589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.253880][T14589] loop6: detected capacity change from 0 to 256 [ 224.264935][T14595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3882'. [ 224.273984][T14595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3882'. [ 224.315852][T14593] loop8: detected capacity change from 0 to 1024 [ 224.326045][T14593] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 224.347673][T14593] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 224.362198][T14593] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.3880: iget: special inode unallocated [ 224.387807][T14604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3887'. [ 224.403186][T14593] EXT4-fs (loop8): no journal found [ 224.404588][T14464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.408499][T14593] EXT4-fs (loop8): can't get journal size [ 224.410459][T14593] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.3880: iget: special inode unallocated [ 224.435441][T14593] EXT4-fs (loop8): failed to initialize system zone (-117) [ 224.447947][T14464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.455051][T14593] EXT4-fs (loop8): mount failed [ 224.468053][T14464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.486526][T14609] ip6gretap0 speed is unknown, defaulting to 1000 [ 224.492711][T14464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.506167][T14604] ip6gretap0 speed is unknown, defaulting to 1000 [ 224.564510][T14609] lo speed is unknown, defaulting to 1000 [ 224.586016][T14464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.719478][T14604] lo speed is unknown, defaulting to 1000 [ 224.721272][T14464] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.735444][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.742542][T10180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.807422][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.814556][T10180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.937749][T14631] loop6: detected capacity change from 0 to 7 [ 224.955099][T14631] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.975084][T14631] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.983082][T14631] loop6: unable to read partition table [ 225.004647][T14631] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 225.004647][T14631] ) failed (rc=-5) [ 225.070537][T14640] loop9: detected capacity change from 0 to 1024 [ 225.078010][T14640] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 225.105466][T14641] ip6gretap0 speed is unknown, defaulting to 1000 [ 225.121104][T14464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.128082][T14640] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 225.148526][T14640] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #32: comm syz.9.3898: iget: special inode unallocated [ 225.168701][T14640] EXT4-fs (loop9): no journal found [ 225.173958][T14640] EXT4-fs (loop9): can't get journal size [ 225.222264][T14640] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.3898: iget: special inode unallocated [ 225.258867][T14659] loop8: detected capacity change from 0 to 1024 [ 225.265805][T14659] EXT4-fs: Ignoring removed bh option [ 225.279252][T14641] lo speed is unknown, defaulting to 1000 [ 225.284240][T14659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 225.310873][T14640] EXT4-fs (loop9): failed to initialize system zone (-117) [ 225.328213][T14640] EXT4-fs (loop9): mount failed [ 225.355700][T10347] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 225.382194][T14667] FAULT_INJECTION: forcing a failure. [ 225.382194][T14667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.395384][T14667] CPU: 1 UID: 0 PID: 14667 Comm: syz.9.3904 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 225.395410][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.395421][T14667] Call Trace: [ 225.395428][T14667] [ 225.395436][T14667] dump_stack_lvl+0xf2/0x150 [ 225.395468][T14667] dump_stack+0x15/0x1a [ 225.395530][T14667] should_fail_ex+0x24a/0x260 [ 225.395636][T14667] should_fail+0xb/0x10 [ 225.395673][T14667] should_fail_usercopy+0x1a/0x20 [ 225.395696][T14667] _copy_to_user+0x20/0xa0 [ 225.395767][T14667] simple_read_from_buffer+0xa0/0x110 [ 225.395790][T14667] proc_fail_nth_read+0xf9/0x140 [ 225.395821][T14667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.395880][T14667] vfs_read+0x19b/0x6f0 [ 225.395905][T14667] ? __rcu_read_unlock+0x4e/0x70 [ 225.395936][T14667] ? __fget_files+0x17c/0x1c0 [ 225.396010][T14667] ksys_read+0xe8/0x1b0 [ 225.396104][T14667] __x64_sys_read+0x42/0x50 [ 225.396130][T14667] x64_sys_call+0x2874/0x2dc0 [ 225.396162][T14667] do_syscall_64+0xc9/0x1c0 [ 225.396193][T14667] ? clear_bhb_loop+0x55/0xb0 [ 225.396227][T14667] ? clear_bhb_loop+0x55/0xb0 [ 225.396264][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.396297][T14667] RIP: 0033:0x7fcae433b7bc [ 225.396314][T14667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.396369][T14667] RSP: 002b:00007fcae29a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.396394][T14667] RAX: ffffffffffffffda RBX: 00007fcae4555fa0 RCX: 00007fcae433b7bc [ 225.396409][T14667] RDX: 000000000000000f RSI: 00007fcae29a70a0 RDI: 0000000000000004 [ 225.396424][T14667] RBP: 00007fcae29a7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.396437][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.396449][T14667] R13: 0000000000000000 R14: 00007fcae4555fa0 R15: 00007ffd1b747fa8 [ 225.396467][T14667] [ 225.659480][T14672] loop8: detected capacity change from 0 to 512 [ 225.702559][T14672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.719598][T14464] veth0_vlan: entered promiscuous mode [ 225.749444][T14672] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.751068][T14677] ip6gretap0 speed is unknown, defaulting to 1000 [ 225.770084][T14464] veth1_vlan: entered promiscuous mode [ 225.793144][T10347] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.797431][T14464] veth0_macvtap: entered promiscuous mode [ 225.833401][T14464] veth1_macvtap: entered promiscuous mode [ 225.854838][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.865430][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.875404][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.885936][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.895935][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.906419][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.916267][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.926714][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.936593][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.947103][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.957030][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.967536][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.985881][T14464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.994655][T14677] lo speed is unknown, defaulting to 1000 [ 225.995064][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.010959][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.020799][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.031284][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.041118][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.051580][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.061418][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.071874][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.081721][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.092197][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.102105][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.112556][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.220569][T14464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.267361][T14464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.276201][T14464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.285049][T14464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.293868][T14464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.058546][T14708] loop8: detected capacity change from 0 to 1024 [ 227.080714][T14708] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 227.097697][T14708] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 227.111676][T14708] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.3913: iget: special inode unallocated [ 227.124758][T14708] EXT4-fs (loop8): no journal found [ 227.129976][T14708] EXT4-fs (loop8): can't get journal size [ 227.176224][T14708] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.3913: iget: special inode unallocated [ 227.182437][T14715] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.278284][T14708] EXT4-fs (loop8): failed to initialize system zone (-117) [ 227.287459][T14715] lo speed is unknown, defaulting to 1000 [ 227.304048][T14708] EXT4-fs (loop8): mount failed [ 227.332324][T14723] loop6: detected capacity change from 0 to 512 [ 227.381822][T14725] loop9: detected capacity change from 0 to 512 [ 227.402278][T14725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.442186][T14723] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.486908][T14723] lo speed is unknown, defaulting to 1000 [ 227.489682][T14725] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.544713][T14735] FAULT_INJECTION: forcing a failure. [ 227.544713][T14735] name failslab, interval 1, probability 0, space 0, times 0 [ 227.557514][T14735] CPU: 1 UID: 0 PID: 14735 Comm: syz.4.3922 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 227.557544][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.557558][T14735] Call Trace: [ 227.557565][T14735] [ 227.557573][T14735] dump_stack_lvl+0xf2/0x150 [ 227.557675][T14735] dump_stack+0x15/0x1a [ 227.557700][T14735] should_fail_ex+0x24a/0x260 [ 227.557794][T14735] should_failslab+0x8f/0xb0 [ 227.557820][T14735] kmem_cache_alloc_node_noprof+0x59/0x320 [ 227.557863][T14735] ? __alloc_skb+0x10b/0x310 [ 227.557923][T14735] __alloc_skb+0x10b/0x310 [ 227.557948][T14735] netlink_alloc_large_skb+0xad/0xe0 [ 227.557978][T14735] netlink_sendmsg+0x3b4/0x6e0 [ 227.558014][T14735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.558061][T14735] __sock_sendmsg+0x140/0x180 [ 227.558085][T14735] ____sys_sendmsg+0x312/0x410 [ 227.558151][T14735] __sys_sendmsg+0x19d/0x230 [ 227.558203][T14735] __x64_sys_sendmsg+0x46/0x50 [ 227.558231][T14735] x64_sys_call+0x2734/0x2dc0 [ 227.558305][T14735] do_syscall_64+0xc9/0x1c0 [ 227.558333][T14735] ? clear_bhb_loop+0x55/0xb0 [ 227.558367][T14735] ? clear_bhb_loop+0x55/0xb0 [ 227.558460][T14735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.558488][T14735] RIP: 0033:0x7f445419cda9 [ 227.558560][T14735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.558584][T14735] RSP: 002b:00007f4452807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.558606][T14735] RAX: ffffffffffffffda RBX: 00007f44543b5fa0 RCX: 00007f445419cda9 [ 227.558619][T14735] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 227.558633][T14735] RBP: 00007f4452807090 R08: 0000000000000000 R09: 0000000000000000 [ 227.558648][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.558660][T14735] R13: 0000000000000000 R14: 00007f44543b5fa0 R15: 00007fffaa332838 [ 227.558726][T14735] [ 227.775628][T14737] SELinux: failed to load policy [ 227.850367][T13340] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.907430][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3925'. [ 227.930970][T14748] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3923'. [ 227.945497][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3928'. [ 227.960182][T14747] loop9: detected capacity change from 0 to 1024 [ 227.982333][T14747] EXT4-fs: Ignoring removed orlov option [ 227.988146][T14747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.035915][T14760] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 228.061538][T14747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.108871][T14769] loop6: detected capacity change from 0 to 512 [ 228.187932][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 228.187950][ T29] audit: type=1326 audit(2000000662.863:224747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e96ccda9 code=0x7ffc0000 [ 228.231335][ T29] audit: type=1326 audit(2000000662.863:224748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 228.245112][T14776] ip6gretap0 speed is unknown, defaulting to 1000 [ 228.255159][ T29] audit: type=1326 audit(2000000662.863:224749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 228.285250][ T29] audit: type=1326 audit(2000000662.863:224750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 228.309122][ T29] audit: type=1326 audit(2000000662.863:224751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 228.332848][ T29] audit: type=1326 audit(2000000662.891:224752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8e96ccda9 code=0x7ffc0000 [ 228.356547][ T29] audit: type=1326 audit(2000000662.891:224753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e96ccda9 code=0x7ffc0000 [ 228.380329][ T29] audit: type=1326 audit(2000000662.891:224754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e96ccda9 code=0x7ffc0000 [ 228.404158][ T29] audit: type=1326 audit(2000000662.891:224755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8e96ccda9 code=0x7ffc0000 [ 228.429644][ T29] audit: type=1326 audit(2000000662.938:224756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 228.520224][T14787] loop6: detected capacity change from 0 to 512 [ 228.610093][T14789] 9pnet_fd: Insufficient options for proto=fd [ 228.645900][T14776] lo speed is unknown, defaulting to 1000 [ 228.666820][T13340] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.109599][T14811] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 229.137131][T14814] loop6: detected capacity change from 0 to 7 [ 229.148369][T14814] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.156761][T14814] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.164639][T14814] loop6: unable to read partition table [ 229.170919][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3949'. [ 229.183226][T14814] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 229.183226][T14814] ) failed (rc=-5) [ 229.206716][T14816] loop9: detected capacity change from 0 to 512 [ 229.230044][T14811] loop6: detected capacity change from 0 to 256 [ 229.240170][T14811] FAT-fs (loop6): bogus logical sector size 128 [ 229.246468][T14811] FAT-fs (loop6): Can't find a valid FAT filesystem [ 229.312773][T14832] ALSA: seq fatal error: cannot create timer (-19) [ 229.340757][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3956'. [ 229.355446][T14837] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3955'. [ 229.409361][T14840] ip6gretap0 speed is unknown, defaulting to 1000 [ 229.448705][T14840] lo speed is unknown, defaulting to 1000 [ 229.830604][T14861] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.950910][T14866] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 229.970429][T14861] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.042670][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3971'. [ 230.056924][T14861] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.095834][T14873] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 230.138622][T14861] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.177313][T14879] FAULT_INJECTION: forcing a failure. [ 230.177313][T14879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.190572][T14879] CPU: 0 UID: 0 PID: 14879 Comm: syz.2.3976 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 230.190616][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 230.190629][T14879] Call Trace: [ 230.190637][T14879] [ 230.190646][T14879] dump_stack_lvl+0xf2/0x150 [ 230.190680][T14879] dump_stack+0x15/0x1a [ 230.190707][T14879] should_fail_ex+0x24a/0x260 [ 230.190771][T14879] should_fail+0xb/0x10 [ 230.190807][T14879] should_fail_usercopy+0x1a/0x20 [ 230.190831][T14879] _copy_from_user+0x1c/0xa0 [ 230.190856][T14879] memdup_user+0x64/0xc0 [ 230.190889][T14879] bpf_prog_test_run_syscall+0x1c1/0x310 [ 230.191024][T14879] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 230.191068][T14879] bpf_prog_test_run+0x20f/0x3a0 [ 230.191104][T14879] __sys_bpf+0x400/0x7a0 [ 230.191144][T14879] __x64_sys_bpf+0x43/0x50 [ 230.191247][T14879] x64_sys_call+0x2914/0x2dc0 [ 230.191277][T14879] do_syscall_64+0xc9/0x1c0 [ 230.191301][T14879] ? clear_bhb_loop+0x55/0xb0 [ 230.191328][T14879] ? clear_bhb_loop+0x55/0xb0 [ 230.191358][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.191434][T14879] RIP: 0033:0x7ff7f79acda9 [ 230.191448][T14879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.191490][T14879] RSP: 002b:00007ff7f6017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.191511][T14879] RAX: ffffffffffffffda RBX: 00007ff7f7bc5fa0 RCX: 00007ff7f79acda9 [ 230.191569][T14879] RDX: 0000000000000032 RSI: 0000000020000900 RDI: 000000000000000a [ 230.191584][T14879] RBP: 00007ff7f6017090 R08: 0000000000000000 R09: 0000000000000000 [ 230.191599][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.191612][T14879] R13: 0000000000000000 R14: 00007ff7f7bc5fa0 R15: 00007ffeb713e918 [ 230.191635][T14879] [ 230.416338][T14861] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.457385][T14886] loop6: detected capacity change from 0 to 512 [ 230.465958][T14861] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.495545][T14861] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.511633][T14861] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.570299][T14898] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 230.628161][T14901] 9pnet_fd: Insufficient options for proto=fd [ 230.696826][T14903] loop6: detected capacity change from 0 to 7 [ 230.728138][T14903] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.763129][T14903] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.771115][T14903] loop6: unable to read partition table [ 230.817506][T14903] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 230.817506][T14903] ) failed (rc=-5) [ 231.077470][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.083495][T14922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14922 comm=syz.8.3991 [ 231.084887][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.104792][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.112285][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.119727][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.127201][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.134635][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.142083][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.149520][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.152930][T14926] loop6: detected capacity change from 0 to 512 [ 231.156918][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.156943][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.177961][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.185456][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.192864][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.200307][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.208160][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.215767][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.223177][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.224624][T14926] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.230577][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.230604][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.230626][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.230648][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.269372][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.276835][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.284421][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.291870][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.299434][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.306877][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.314305][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.321705][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.329220][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.336706][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.344161][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.351604][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.359032][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.366540][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.373924][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.373953][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.388820][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.396223][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.403667][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.411141][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.418567][ T2962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 231.431615][ T2962] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 231.432021][T14926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.529106][T14945] 9pnet_fd: Insufficient options for proto=fd [ 231.568911][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.607907][T14951] loop9: detected capacity change from 0 to 512 [ 231.612597][T14953] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 231.641488][T14951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.656302][T14951] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.696038][T13340] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.716728][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4005'. [ 231.787048][T14965] 9pnet_fd: Insufficient options for proto=fd [ 231.845770][T14920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.854821][T14920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.915132][T14976] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 232.155524][T14993] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 232.193332][T14999] netlink: 'syz.6.4021': attribute type 1 has an invalid length. [ 232.211973][T14999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.260740][T14989] ip6gretap0 speed is unknown, defaulting to 1000 [ 232.268766][T15007] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 232.322966][T15010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15010 comm=syz.6.4024 [ 232.347807][T15012] 9pnet_fd: Insufficient options for proto=fd [ 232.362770][T14989] lo speed is unknown, defaulting to 1000 [ 232.390680][T15016] FAULT_INJECTION: forcing a failure. [ 232.390680][T15016] name failslab, interval 1, probability 0, space 0, times 0 [ 232.403830][T15016] CPU: 0 UID: 0 PID: 15016 Comm: syz.4.4027 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 232.403861][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 232.403876][T15016] Call Trace: [ 232.403881][T15016] [ 232.403888][T15016] dump_stack_lvl+0xf2/0x150 [ 232.403917][T15016] dump_stack+0x15/0x1a [ 232.403943][T15016] should_fail_ex+0x24a/0x260 [ 232.403983][T15016] should_failslab+0x8f/0xb0 [ 232.404007][T15016] kmem_cache_alloc_noprof+0x52/0x320 [ 232.404046][T15016] ? vm_area_dup+0x98/0x130 [ 232.404075][T15016] vm_area_dup+0x98/0x130 [ 232.404097][T15016] __split_vma+0xf7/0x6a0 [ 232.404139][T15016] vma_modify+0xd3/0x1e0 [ 232.404169][T15016] vma_modify_flags+0xf1/0x120 [ 232.404201][T15016] mlock_fixup+0x113/0x450 [ 232.404225][T15016] apply_vma_lock_flags+0x194/0x240 [ 232.404253][T15016] do_mlock+0x3f4/0x570 [ 232.404279][T15016] ? ksys_write+0x176/0x1b0 [ 232.404308][T15016] __x64_sys_mlock+0x36/0x40 [ 232.404331][T15016] x64_sys_call+0x26b2/0x2dc0 [ 232.404357][T15016] do_syscall_64+0xc9/0x1c0 [ 232.404387][T15016] ? clear_bhb_loop+0x55/0xb0 [ 232.404417][T15016] ? clear_bhb_loop+0x55/0xb0 [ 232.404448][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.404479][T15016] RIP: 0033:0x7f445419cda9 [ 232.404497][T15016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.404517][T15016] RSP: 002b:00007f4452807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 232.404539][T15016] RAX: ffffffffffffffda RBX: 00007f44543b5fa0 RCX: 00007f445419cda9 [ 232.404554][T15016] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 232.404568][T15016] RBP: 00007f4452807090 R08: 0000000000000000 R09: 0000000000000000 [ 232.404580][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.404591][T15016] R13: 0000000000000000 R14: 00007f44543b5fa0 R15: 00007fffaa332838 [ 232.404620][T15016] [ 232.660369][T14989] chnl_net:caif_netlink_parms(): no params data found [ 232.725364][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.732515][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.739829][T14989] bridge_slave_0: entered allmulticast mode [ 232.742898][T15033] loop8: detected capacity change from 0 to 2048 [ 232.746666][T14989] bridge_slave_0: entered promiscuous mode [ 232.767387][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.774521][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.782177][T14989] bridge_slave_1: entered allmulticast mode [ 232.788856][T14989] bridge_slave_1: entered promiscuous mode [ 232.809197][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.819766][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.851920][T14989] team0: Port device team_slave_0 added [ 232.858898][T14989] team0: Port device team_slave_1 added [ 232.859837][T15042] loop6: detected capacity change from 0 to 7 [ 232.870972][T15042] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.879077][T15042] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.887010][T15042] loop6: unable to read partition table [ 232.892693][T15042] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 232.892693][T15042] ) failed (rc=-5) [ 232.908201][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.915198][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.941321][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.946362][T15044] loop6: detected capacity change from 0 to 7 [ 232.958183][T15044] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.960141][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.966172][T15044] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.973026][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.980844][T15044] loop6: unable to read partition table [ 233.006760][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.012538][T15044] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 233.012538][T15044] ) failed (rc=-5) [ 233.052830][T14989] hsr_slave_0: entered promiscuous mode [ 233.059311][T14989] hsr_slave_1: entered promiscuous mode [ 233.065672][T14989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.073850][T14989] Cannot create hsr debugfs directory [ 233.155800][T15049] FAULT_INJECTION: forcing a failure. [ 233.155800][T15049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.168995][T15049] CPU: 1 UID: 0 PID: 15049 Comm: syz.4.4038 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 233.169026][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.169041][T15049] Call Trace: [ 233.169049][T15049] [ 233.169057][T15049] dump_stack_lvl+0xf2/0x150 [ 233.169085][T15049] dump_stack+0x15/0x1a [ 233.169110][T15049] should_fail_ex+0x24a/0x260 [ 233.169157][T15049] should_fail+0xb/0x10 [ 233.169191][T15049] should_fail_usercopy+0x1a/0x20 [ 233.169210][T15049] _copy_from_user+0x1c/0xa0 [ 233.169278][T15049] move_addr_to_kernel+0x82/0x120 [ 233.169321][T15049] copy_msghdr_from_user+0x271/0x2a0 [ 233.169351][T15049] __sys_sendmsg+0x13e/0x230 [ 233.169405][T15049] __x64_sys_sendmsg+0x46/0x50 [ 233.169448][T15049] x64_sys_call+0x2734/0x2dc0 [ 233.169510][T15049] do_syscall_64+0xc9/0x1c0 [ 233.169536][T15049] ? clear_bhb_loop+0x55/0xb0 [ 233.169705][T15049] ? clear_bhb_loop+0x55/0xb0 [ 233.169765][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.169835][T15049] RIP: 0033:0x7f445419cda9 [ 233.169853][T15049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.169875][T15049] RSP: 002b:00007f4452807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.169894][T15049] RAX: ffffffffffffffda RBX: 00007f44543b5fa0 RCX: 00007f445419cda9 [ 233.169906][T15049] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000c [ 233.169921][T15049] RBP: 00007f4452807090 R08: 0000000000000000 R09: 0000000000000000 [ 233.169935][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.169950][T15049] R13: 0000000000000000 R14: 00007f44543b5fa0 R15: 00007fffaa332838 [ 233.169973][T15049] [ 233.426810][T15062] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4042'. [ 233.542492][T14989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.575039][T14989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.596064][T14989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.608394][T14989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.665554][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.672772][T14989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.680131][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.687225][T14989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.759069][T15069] loop8: detected capacity change from 0 to 1024 [ 233.767545][T15069] EXT4-fs: Ignoring removed orlov option [ 233.773266][T15069] EXT4-fs: Ignoring removed orlov option [ 233.792092][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.800833][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.834993][T14989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.873408][T15069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.896437][T14989] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.906990][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.914091][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.918800][T15074] loop6: detected capacity change from 0 to 7 [ 233.927624][T15074] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.935622][T15074] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.943623][T15074] loop6: unable to read partition table [ 233.949535][T15074] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 233.949535][T15074] ) failed (rc=-5) [ 233.983063][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.990252][T10153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.014798][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 234.014815][ T29] audit: type=1400 audit(2000000668.317:225009): avc: denied { connect } for pid=15075 comm="syz.2.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.027139][T14989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.051579][T14989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.092411][T10347] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.099330][T15080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15080 comm=syz.6.4048 [ 234.120651][ T29] audit: type=1400 audit(2000000668.373:225010): avc: denied { setopt } for pid=15075 comm="syz.2.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.139885][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.140725][ T29] audit: type=1400 audit(2000000668.373:225011): avc: denied { connect } for pid=15075 comm="syz.2.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.227836][T14989] veth0_vlan: entered promiscuous mode [ 234.237306][T14989] veth1_vlan: entered promiscuous mode [ 234.258710][T14989] veth0_macvtap: entered promiscuous mode [ 234.267594][T14989] veth1_macvtap: entered promiscuous mode [ 234.281233][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.291970][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.302191][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.312928][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.323049][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.333726][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.343714][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.354325][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.364346][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.374947][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.385009][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.395606][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.405582][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.416282][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.428336][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.439662][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.450544][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.460628][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.471284][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.481340][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.491927][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.501947][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.512523][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.522511][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.533212][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.543568][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.554223][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.564214][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.574854][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.586571][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.595674][T14989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.604590][T14989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.613653][T14989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.622645][T14989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.677977][ T29] audit: type=1400 audit(2000000668.934:225012): avc: denied { module_load } for pid=15093 comm="syz.0.4018" path="/sys/kernel/notes" dev="sysfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 234.678036][T15094] Invalid ELF header magic: != ELF [ 234.729574][T15094] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4018'. [ 234.777582][ T29] audit: type=1400 audit(2000000669.027:225013): avc: denied { write } for pid=15099 comm="syz.8.4051" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 234.801187][T15100] random: crng reseeded on system resumption [ 234.864195][T15103] block device autoloading is deprecated and will be removed. [ 234.872912][T15103] bio_check_eod: 4699 callbacks suppressed [ 234.872926][T15103] syz.8.4051: attempt to access beyond end of device [ 234.872926][T15103] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 234.924420][ T29] audit: type=1326 audit(2000000669.158:225014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.2.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 234.949427][ T29] audit: type=1326 audit(2000000669.196:225015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.2.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 234.973490][ T29] audit: type=1326 audit(2000000669.196:225016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.2.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 234.997168][ T29] audit: type=1326 audit(2000000669.196:225017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.2.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 235.020916][ T29] audit: type=1326 audit(2000000669.196:225018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.2.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f79acda9 code=0x7ffc0000 [ 235.140954][T15114] loop8: detected capacity change from 0 to 1024 [ 235.148153][T15114] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 235.157870][T15114] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 235.168451][T15114] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.4056: iget: special inode unallocated [ 235.181338][T15114] EXT4-fs (loop8): no journal found [ 235.186657][T15114] EXT4-fs (loop8): can't get journal size [ 235.201572][T15114] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.4056: iget: special inode unallocated [ 235.222563][T15114] EXT4-fs (loop8): failed to initialize system zone (-117) [ 235.230620][T15114] EXT4-fs (loop8): mount failed [ 235.268075][T15118] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 235.747987][T15123] loop0: detected capacity change from 0 to 512 [ 235.787272][T15125] loop0: detected capacity change from 0 to 256 [ 235.794248][T15125] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 235.811954][T15125] FAT-fs (loop0): Directory bread(block 64) failed [ 235.823218][T15125] FAT-fs (loop0): Directory bread(block 65) failed [ 235.832141][T15125] FAT-fs (loop0): Directory bread(block 66) failed [ 235.839280][T15125] FAT-fs (loop0): Directory bread(block 67) failed [ 235.846869][T15125] FAT-fs (loop0): Directory bread(block 68) failed [ 235.853474][T15125] FAT-fs (loop0): Directory bread(block 69) failed [ 235.860063][T15125] FAT-fs (loop0): Directory bread(block 70) failed [ 235.869464][T15125] FAT-fs (loop0): Directory bread(block 71) failed [ 235.876064][T15125] FAT-fs (loop0): Directory bread(block 72) failed [ 235.882760][T15125] FAT-fs (loop0): Directory bread(block 73) failed [ 235.890427][T15127] FAULT_INJECTION: forcing a failure. [ 235.890427][T15127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.903572][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.2.4061 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 235.903603][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.903620][T15127] Call Trace: [ 235.903628][T15127] [ 235.903698][T15127] dump_stack_lvl+0xf2/0x150 [ 235.903726][T15127] dump_stack+0x15/0x1a [ 235.903751][T15127] should_fail_ex+0x24a/0x260 [ 235.903803][T15127] should_fail+0xb/0x10 [ 235.903834][T15127] should_fail_usercopy+0x1a/0x20 [ 235.903861][T15127] copy_fpstate_to_sigframe+0x640/0x7e0 [ 235.903889][T15127] ? copy_fpstate_to_sigframe+0xea/0x7e0 [ 235.903918][T15127] ? dequeue_signal+0x364/0x370 [ 235.903975][T15127] ? fpu__alloc_mathframe+0x95/0xd0 [ 235.904003][T15127] get_sigframe+0x2f3/0x430 [ 235.904034][T15127] x64_setup_rt_frame+0xad/0x590 [ 235.904066][T15127] arch_do_signal_or_restart+0x287/0x4b0 [ 235.904101][T15127] syscall_exit_to_user_mode+0x62/0x120 [ 235.904192][T15127] do_syscall_64+0xd6/0x1c0 [ 235.904287][T15127] ? clear_bhb_loop+0x55/0xb0 [ 235.904386][T15127] ? clear_bhb_loop+0x55/0xb0 [ 235.904419][T15127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.904449][T15127] RIP: 0033:0x7ff7f79acda7 [ 235.904496][T15127] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 235.904595][T15127] RSP: 002b:00007ff7f6017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 235.904616][T15127] RAX: 0000000000000013 RBX: 00007ff7f7bc5fa0 RCX: 00007ff7f79acda9 [ 235.904630][T15127] RDX: 0000000000000001 RSI: 0000000020001340 RDI: 0000000000000004 [ 235.904642][T15127] RBP: 00007ff7f6017090 R08: 0000000000000000 R09: 0000000000000000 [ 235.904653][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.904665][T15127] R13: 0000000000000000 R14: 00007ff7f7bc5fa0 R15: 00007ffeb713e918 [ 235.904712][T15127] [ 236.152260][T15134] loop6: detected capacity change from 0 to 7 [ 236.167318][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.175331][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.183437][T15134] loop6: unable to read partition table [ 236.189634][T15134] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 236.189634][T15134] ) failed (rc=-5) [ 236.292618][T15141] loop6: detected capacity change from 0 to 512 [ 236.301258][T15141] EXT4-fs: Ignoring removed orlov option [ 236.312369][T15141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.334162][T15141] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.342596][T15143] loop8: detected capacity change from 0 to 1024 [ 236.351036][T15143] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 236.361433][T15141] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 236.387935][T15141] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 236.393412][T15146] loop0: detected capacity change from 0 to 512 [ 236.411591][T15143] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 236.434190][T15143] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.4068: iget: special inode unallocated [ 236.434861][T15141] EXT4-fs (loop6): 1 truncate cleaned up [ 236.460304][T15143] EXT4-fs (loop8): no journal found [ 236.465612][T15143] EXT4-fs (loop8): can't get journal size [ 236.475993][T15146] EXT4-fs (loop0): too many log groups per flexible block group [ 236.479806][T15141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.483806][T15146] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 236.511308][T15146] EXT4-fs (loop0): mount failed [ 236.513866][T15143] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.4068: iget: special inode unallocated [ 236.537239][T15143] EXT4-fs (loop8): failed to initialize system zone (-117) [ 236.544620][T15143] EXT4-fs (loop8): mount failed [ 236.564856][T15146] loop0: detected capacity change from 0 to 512 [ 236.567705][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.596554][T15146] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4069: corrupted in-inode xattr: invalid ea_ino [ 236.611792][T15146] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4069: couldn't read orphan inode 15 (err -117) [ 236.624534][T15146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.647280][T15146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4069'. [ 236.679028][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.706154][T15165] loop8: detected capacity change from 0 to 164 [ 236.741624][T15167] ip6gretap0 speed is unknown, defaulting to 1000 [ 236.742186][T15165] tipc: Started in network mode [ 236.753249][T15165] tipc: Node identity ac14140f, cluster identity 4711 [ 236.762108][T15169] loop6: detected capacity change from 0 to 7 [ 236.762980][T15171] loop0: detected capacity change from 0 to 512 [ 236.768322][T15169] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.768354][T15169] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.784371][T15171] EXT4-fs: Ignoring removed i_version option [ 236.790317][T15169] loop6: unable to read partition table [ 236.790717][T15165] tipc: New replicast peer: 255.255.255.255 [ 236.796457][T15171] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.802197][T15165] tipc: Enabled bearer , priority 10 [ 236.818769][T15171] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.820741][T15169] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 236.820741][T15169] ) failed (rc=-5) [ 236.846967][T15173] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4072'. [ 236.857157][T15155] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4072'. [ 236.884516][T15167] lo speed is unknown, defaulting to 1000 [ 236.887464][T15171] EXT4-fs (loop0): 1 truncate cleaned up [ 236.948213][T15171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.066099][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.177163][T15185] loop0: detected capacity change from 0 to 1024 [ 237.188978][T15185] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 237.202800][T15185] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 237.213676][T15185] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #32: comm syz.0.4082: iget: special inode unallocated [ 237.227216][T15185] EXT4-fs (loop0): no journal found [ 237.232449][T15185] EXT4-fs (loop0): can't get journal size [ 237.261992][T15185] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.4082: iget: special inode unallocated [ 237.286349][T15185] EXT4-fs (loop0): failed to initialize system zone (-117) [ 237.296550][T15185] EXT4-fs (loop0): mount failed [ 237.469440][T15207] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 237.495228][T15209] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.510610][T15209] loop6: detected capacity change from 0 to 128 [ 237.520616][T15209] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.533716][T15209] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.677768][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4094'. [ 237.691618][T15219] netlink: 'syz.8.4097': attribute type 46 has an invalid length. [ 237.711312][T15223] SELinux: policydb magic number 0x936b2c30 does not match expected magic number 0xf97cff8c [ 237.725616][T15223] SELinux: failed to load policy [ 237.726554][T12255] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.753705][T15226] loop6: detected capacity change from 0 to 512 [ 237.784284][T15220] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.792651][T15220] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.800931][T15220] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.809269][T15220] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.825231][T15220] vxlan0: entered promiscuous mode [ 237.830519][T15220] vxlan0: entered allmulticast mode [ 237.833461][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4102'. [ 237.846884][T15220] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.855344][T15220] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.863874][T15220] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.872384][T15220] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.876024][ T3375] tipc: Node number set to 2886997007 [ 237.900866][T15237] IPVS: set_ctl: invalid protocol: 41 172.20.20.41:20003 [ 237.994630][T15244] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.028901][T15244] lo speed is unknown, defaulting to 1000 [ 238.508227][T15258] xt_hashlimit: max too large, truncated to 1048576 [ 238.515673][T15258] Cannot find set identified by id 0 to match [ 238.689421][T15272] loop0: detected capacity change from 0 to 2048 [ 238.706515][T15273] macvlan0: entered allmulticast mode [ 238.712028][T15273] veth1_vlan: entered allmulticast mode [ 238.718641][T15273] macvlan0: left allmulticast mode [ 238.723956][T15273] veth1_vlan: left allmulticast mode [ 238.782363][T15280] loop6: detected capacity change from 0 to 1024 [ 238.789386][T15280] EXT4-fs: Ignoring removed orlov option [ 238.794281][T15284] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 238.795687][T15280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.804093][T15284] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 238.827462][T15284] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 238.836079][T15284] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 238.937395][T15293] loop0: detected capacity change from 0 to 512 [ 239.015335][T15300] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 239.038809][T15301] ip6gretap0 speed is unknown, defaulting to 1000 [ 239.080861][T15301] lo speed is unknown, defaulting to 1000 [ 239.103958][T15298] 9pnet: Could not find request transport: { [ 239.147807][T15308] loop6: detected capacity change from 0 to 7 [ 239.154329][T15308] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.162579][T15309] FAULT_INJECTION: forcing a failure. [ 239.162579][T15309] name failslab, interval 1, probability 0, space 0, times 0 [ 239.175340][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.6.4128 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 239.175366][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.175379][T15309] Call Trace: [ 239.175385][T15309] [ 239.175392][T15309] dump_stack_lvl+0xf2/0x150 [ 239.175420][T15309] dump_stack+0x15/0x1a [ 239.175498][T15309] should_fail_ex+0x24a/0x260 [ 239.175608][T15309] should_failslab+0x8f/0xb0 [ 239.175635][T15309] kmem_cache_alloc_noprof+0x52/0x320 [ 239.175676][T15309] ? security_file_alloc+0x32/0x100 [ 239.175730][T15309] security_file_alloc+0x32/0x100 [ 239.175835][T15309] init_file+0x5b/0x1a0 [ 239.175870][T15309] alloc_empty_file+0xea/0x200 [ 239.175901][T15309] alloc_file_pseudo+0xc9/0x140 [ 239.175940][T15309] aio_setup_ring+0x137/0x700 [ 239.175992][T15309] ioctx_alloc+0x2b2/0x4c0 [ 239.176095][T15309] __se_sys_io_setup+0x6b/0x1b0 [ 239.176124][T15309] __x64_sys_io_setup+0x31/0x40 [ 239.176152][T15309] x64_sys_call+0x160f/0x2dc0 [ 239.176183][T15309] do_syscall_64+0xc9/0x1c0 [ 239.176223][T15309] ? clear_bhb_loop+0x55/0xb0 [ 239.176258][T15309] ? clear_bhb_loop+0x55/0xb0 [ 239.176287][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.176313][T15309] RIP: 0033:0x7fe8e96ccda9 [ 239.176328][T15309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.176355][T15309] RSP: 002b:00007fe8e7d37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 239.176378][T15309] RAX: ffffffffffffffda RBX: 00007fe8e98e5fa0 RCX: 00007fe8e96ccda9 [ 239.176416][T15309] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004 [ 239.176428][T15309] RBP: 00007fe8e7d37090 R08: 0000000000000000 R09: 0000000000000000 [ 239.176440][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.176520][T15309] R13: 0000000000000000 R14: 00007fe8e98e5fa0 R15: 00007ffdadefa2d8 [ 239.176538][T15309] [ 239.176601][T15308] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.379410][T15308] loop6: unable to read partition table [ 239.385205][T15308] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 239.385205][T15308] ) failed (rc=-5) [ 239.399017][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 239.399034][ T29] audit: type=1400 audit(2000000673.358:225171): avc: denied { execute } for pid=15311 comm="syz.0.4130" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 239.471204][ T29] audit: type=1400 audit(2000000673.424:225172): avc: denied { name_bind } for pid=15314 comm="syz.6.4132" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 239.551734][T15318] loop8: detected capacity change from 0 to 1024 [ 239.582259][T15318] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 239.668696][T15333] loop6: detected capacity change from 0 to 7 [ 239.669053][T15333] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.691461][T15333] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.691528][T15333] loop6: unable to read partition table [ 239.699368][T15333] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 239.699368][T15333] ) failed (rc=-5) [ 239.773373][ T29] audit: type=1400 audit(2000000673.704:225173): avc: denied { watch watch_reads } for pid=15336 comm="syz.0.4141" path="/26" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.785354][T15338] loop0: detected capacity change from 0 to 2048 [ 239.832488][ T29] audit: type=1400 audit(2000000673.751:225174): avc: denied { create } for pid=15340 comm="syz.4.4142" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.832522][ T29] audit: type=1400 audit(2000000673.751:225175): avc: denied { read } for pid=15340 comm="syz.4.4142" name="file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.832553][ T29] audit: type=1400 audit(2000000673.751:225176): avc: denied { open } for pid=15340 comm="syz.4.4142" path="/55/file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.928106][T15345] 9pnet_fd: Insufficient options for proto=fd [ 240.012702][ T29] audit: type=1400 audit(2000000673.920:225177): avc: denied { append } for pid=15351 comm="syz.8.4147" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.056472][ T29] audit: type=1400 audit(2000000673.966:225178): avc: denied { unlink } for pid=14464 comm="syz-executor" name="file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.056814][ T29] audit: type=1400 audit(2000000673.966:225179): avc: denied { cpu } for pid=15354 comm="syz.0.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 240.083043][T15356] loop0: detected capacity change from 0 to 512 [ 240.083245][T15356] EXT4-fs: Ignoring removed orlov option [ 240.083298][T15356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.150088][T15356] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 240.150287][ T29] audit: type=1326 audit(2000000674.022:225180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.4.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445419cda9 code=0x7ffc0000 [ 240.158117][T15356] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 240.165215][T15356] System zones: 0-1, 15-15, 18-18, 34-34 [ 240.194406][T15364] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 240.197587][T15356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 240.197646][T15356] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 240.197681][T15356] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 240.203859][T15356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4148: bg 0: block 40: padding at end of block bitmap is not set [ 240.211529][T15356] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 240.211961][T15356] EXT4-fs (loop0): 1 truncate cleaned up [ 240.226227][T15356] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.4148: bad symlink. [ 240.244184][T15366] loop6: detected capacity change from 0 to 7 [ 240.292248][T15366] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.292277][T15366] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.292292][T15366] loop6: unable to read partition table [ 240.292352][T15366] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 240.292352][T15366] ) failed (rc=-5) [ 240.362392][T15369] netlink: 'syz.2.4152': attribute type 15 has an invalid length. [ 240.433037][T15379] 9pnet_fd: Insufficient options for proto=fd [ 240.562029][T15388] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 240.751605][T15407] loop6: detected capacity change from 0 to 7 [ 240.758860][T15407] loop6: unable to read partition table [ 240.780511][T15407] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 240.780511][T15407] ) failed (rc=-5) [ 240.817387][T15411] loop6: detected capacity change from 0 to 2048 [ 240.856799][T15411] EXT4-fs mount: 10 callbacks suppressed [ 240.856821][T15411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.945213][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.955493][T15424] program syz.8.4173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.024096][T15427] ip6gretap0 speed is unknown, defaulting to 1000 [ 241.077203][T15432] loop0: detected capacity change from 0 to 1024 [ 241.095263][T15427] lo speed is unknown, defaulting to 1000 [ 241.137407][T15432] EXT4-fs: Ignoring removed nobh option [ 241.143057][T15432] EXT4-fs: Ignoring removed bh option [ 241.224088][T15432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.417242][T15432] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.4177: Allocating blocks 385-513 which overlap fs metadata [ 241.470998][T15467] 9pnet_fd: Insufficient options for proto=fd [ 241.573351][T15472] __nla_validate_parse: 2 callbacks suppressed [ 241.573370][T15472] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4186'. [ 241.607179][T15432] EXT4-fs (loop0): pa ffff8881064e1c40: logic 16, phys. 129, len 24 [ 241.615241][T15432] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 241.859707][T15491] loop6: detected capacity change from 0 to 2048 [ 241.895430][T15491] syz.6.4191: attempt to access beyond end of device [ 241.895430][T15491] loop6: rw=0, sector=1552, nr_sectors = 512 limit=2048 [ 242.085404][T15496] loop6: detected capacity change from 0 to 1024 [ 242.092398][T15496] EXT4-fs: Ignoring removed orlov option [ 242.098182][T15496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.127749][T15496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.170871][T15502] tmpfs: Unknown parameter 'mpo|' [ 242.301791][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.814368][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4201'. [ 242.828485][T15525] loop8: detected capacity change from 0 to 512 [ 242.874709][T15527] loop8: detected capacity change from 0 to 512 [ 242.883376][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.936674][T15529] ip6gre1: entered allmulticast mode [ 242.985410][T15535] SELinux: policydb magic number 0x936b2c30 does not match expected magic number 0xf97cff8c [ 243.004498][T15535] SELinux: failed to load policy [ 243.047423][T15537] ip6gretap0 speed is unknown, defaulting to 1000 [ 243.100754][T15537] lo speed is unknown, defaulting to 1000 [ 243.110235][T15544] loop6: detected capacity change from 0 to 7 [ 243.116540][T15544] buffer_io_error: 2 callbacks suppressed [ 243.116555][T15544] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.132525][T15544] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.140512][T15544] loop6: unable to read partition table [ 243.147291][T15544] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 243.147291][T15544] ) failed (rc=-5) [ 243.190391][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4212'. [ 243.199473][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4212'. [ 243.242057][T15551] FAULT_INJECTION: forcing a failure. [ 243.242057][T15551] name failslab, interval 1, probability 0, space 0, times 0 [ 243.254902][T15551] CPU: 0 UID: 0 PID: 15551 Comm: syz.2.4212 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 243.254929][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 243.254942][T15551] Call Trace: [ 243.254948][T15551] [ 243.254955][T15551] dump_stack_lvl+0xf2/0x150 [ 243.254982][T15551] dump_stack+0x15/0x1a [ 243.255003][T15551] should_fail_ex+0x24a/0x260 [ 243.255036][T15551] should_failslab+0x8f/0xb0 [ 243.255061][T15551] kmem_cache_alloc_noprof+0x52/0x320 [ 243.255093][T15551] ? vm_area_dup+0x98/0x130 [ 243.255117][T15551] vm_area_dup+0x98/0x130 [ 243.255139][T15551] copy_mm+0x749/0x12d0 [ 243.255172][T15551] copy_process+0xd5b/0x1fb0 [ 243.255205][T15551] kernel_clone+0x167/0x5e0 [ 243.255231][T15551] ? vfs_write+0x644/0x920 [ 243.255254][T15551] __x64_sys_clone+0xe8/0x120 [ 243.255291][T15551] x64_sys_call+0x2d7e/0x2dc0 [ 243.255317][T15551] do_syscall_64+0xc9/0x1c0 [ 243.255341][T15551] ? clear_bhb_loop+0x55/0xb0 [ 243.255368][T15551] ? clear_bhb_loop+0x55/0xb0 [ 243.255395][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.255421][T15551] RIP: 0033:0x7ff7f79acda9 [ 243.255436][T15551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.255453][T15551] RSP: 002b:00007ff7f6016fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 243.255472][T15551] RAX: ffffffffffffffda RBX: 00007ff7f7bc5fa0 RCX: 00007ff7f79acda9 [ 243.255483][T15551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040004000 [ 243.255495][T15551] RBP: 00007ff7f6017090 R08: 0000000000000000 R09: 0000000000000000 [ 243.255512][T15551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 243.255524][T15551] R13: 0000000000000000 R14: 00007ff7f7bc5fa0 R15: 00007ffeb713e918 [ 243.255542][T15551] [ 243.875315][T15576] loop6: detected capacity change from 0 to 7 [ 243.881494][T15576] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.894477][T15576] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.902391][T15576] loop6: unable to read partition table [ 243.923967][T15576] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 243.923967][T15576] ) failed (rc=-5) [ 244.026746][T15593] Cannot find set identified by id 0 to match [ 244.040390][T15533] netlink: 'syz.6.4207': attribute type 15 has an invalid length. [ 244.048305][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4207'. [ 244.069398][ T3376] IPVS: starting estimator thread 0... [ 244.126862][T15596] loop0: detected capacity change from 0 to 1024 [ 244.162220][T15597] IPVS: using max 2064 ests per chain, 103200 per kthread [ 244.330507][T15617] loop6: detected capacity change from 0 to 7 [ 244.352880][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.361551][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.369576][T15617] loop6: unable to read partition table [ 244.375740][T15617] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 244.375740][T15617] ) failed (rc=-5) [ 244.394427][T15620] SELinux: policydb magic number 0x936b2c30 does not match expected magic number 0xf97cff8c [ 244.419025][T15620] SELinux: failed to load policy [ 244.456125][T15627] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4241'. [ 244.570642][T15637] 9pnet_fd: Insufficient options for proto=fd [ 244.751512][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 244.751532][ T29] audit: type=1326 audit(2000000678.363:225608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5704813d67 code=0x7ffc0000 [ 244.781223][ T29] audit: type=1326 audit(2000000678.363:225609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57047b8fa9 code=0x7ffc0000 [ 244.812893][ T29] audit: type=1326 audit(2000000678.363:225610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f570481cda9 code=0x7ffc0000 [ 244.813727][ T3376] IPVS: starting estimator thread 0... [ 244.836041][ T29] audit: type=1326 audit(2000000678.363:225611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5704813d67 code=0x7ffc0000 [ 244.836077][ T29] audit: type=1326 audit(2000000678.363:225612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57047b8fa9 code=0x7ffc0000 [ 244.836111][ T29] audit: type=1326 audit(2000000678.363:225613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f570481cda9 code=0x7ffc0000 [ 244.910932][ T29] audit: type=1326 audit(2000000678.363:225614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5704813d67 code=0x7ffc0000 [ 244.934524][ T29] audit: type=1326 audit(2000000678.363:225615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57047b8fa9 code=0x7ffc0000 [ 244.957653][ T29] audit: type=1326 audit(2000000678.363:225616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f570481cda9 code=0x7ffc0000 [ 244.981009][ T29] audit: type=1326 audit(2000000678.391:225617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5704813d67 code=0x7ffc0000 [ 245.039071][T15665] IPVS: using max 2448 ests per chain, 122400 per kthread [ 245.086269][T15675] loop8: detected capacity change from 0 to 1024 [ 245.093380][T15675] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 245.103069][T15675] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 245.114977][T15675] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.4261: iget: special inode unallocated [ 245.128335][T15675] EXT4-fs (loop8): no journal found [ 245.133576][T15675] EXT4-fs (loop8): can't get journal size [ 245.140414][T15675] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.4261: iget: special inode unallocated [ 245.154726][T15675] EXT4-fs (loop8): failed to initialize system zone (-117) [ 245.161995][T15675] EXT4-fs (loop8): mount failed [ 245.249079][T15694] loop6: detected capacity change from 0 to 7 [ 245.256501][T15694] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.256538][T15694] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.256558][T15694] loop6: unable to read partition table [ 245.256578][T15694] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 245.256578][T15694] ) failed (rc=-5) [ 245.284004][T15696] ip6gre1: entered allmulticast mode [ 245.316374][T15698] tipc: Failed to remove unknown binding: 66,1,1/0:1386269522/1386269524 [ 245.316402][T15698] tipc: Failed to remove unknown binding: 66,1,1/0:1386269522/1386269524 [ 245.347913][T15698] 9pnet_fd: Insufficient options for proto=fd [ 245.483957][T15712] loop6: detected capacity change from 0 to 512 [ 245.497152][T15712] EXT4-fs: Ignoring removed i_version option [ 245.503357][T15712] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.520266][T15712] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 245.537189][T15712] EXT4-fs (loop6): 1 truncate cleaned up [ 245.544202][T15712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.631636][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4278'. [ 245.643815][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.860223][T15736] loop6: detected capacity change from 0 to 256 [ 245.873189][T15736] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4283'. [ 245.908813][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4284'. [ 245.918361][T15738] bridge_slave_1: left allmulticast mode [ 245.924042][T15738] bridge_slave_1: left promiscuous mode [ 245.929856][T15738] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.938293][T15738] bridge_slave_0: left allmulticast mode [ 245.944130][T15738] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.965201][T15739] loop6: detected capacity change from 0 to 512 [ 245.981134][T15739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 245.989336][T15739] System zones: 0-2, 18-18, 34-34 [ 245.996295][T15739] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4284: bg 0: block 248: padding at end of block bitmap is not set [ 246.011662][T15739] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.4284: Failed to acquire dquot type 1 [ 246.030561][T15739] EXT4-fs (loop6): 1 truncate cleaned up [ 246.037169][T15739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.050219][T15739] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.088056][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.106092][ T50] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 246.107447][T15752] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 246.147631][T15754] loop6: detected capacity change from 0 to 512 [ 246.207983][T15760] loop0: detected capacity change from 0 to 512 [ 246.293310][T15772] macvlan0: entered allmulticast mode [ 246.298754][T15772] veth1_vlan: entered allmulticast mode [ 246.310690][T15772] macvlan0: left allmulticast mode [ 246.315913][T15772] veth1_vlan: left allmulticast mode [ 246.443294][T15786] SELinux: policydb magic number 0x936b2c30 does not match expected magic number 0xf97cff8c [ 246.459487][T15786] SELinux: failed to load policy [ 246.510820][T15795] loop8: detected capacity change from 0 to 512 [ 246.579957][T15799] loop8: detected capacity change from 0 to 2048 [ 246.623941][T15799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.661142][T10347] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.730173][T15819] SELinux: policydb magic number 0x936b2c30 does not match expected magic number 0xf97cff8c [ 246.740525][T15819] SELinux: failed to load policy [ 246.788409][T15828] loop8: detected capacity change from 0 to 512 [ 246.868420][T15836] loop8: detected capacity change from 0 to 2048 [ 246.901051][T15836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.958894][T10347] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.010046][T15859] loop0: detected capacity change from 0 to 512 [ 247.020054][T15859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 247.033730][T15859] System zones: 1-12 [ 247.040056][T15859] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.4330: Directory hole found for htree index block 0 [ 247.058274][T15859] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 247.069377][T15859] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.4330: Directory hole found for htree index block 0 [ 247.090536][T15859] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 247.099334][T15859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.117600][T15864] loop8: detected capacity change from 0 to 512 [ 247.175426][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.294602][T15888] loop6: detected capacity change from 0 to 7 [ 247.300970][T15888] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.308972][T15888] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.317105][T15888] loop6: unable to read partition table [ 247.323187][T15888] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 247.323187][T15888] ) failed (rc=-5) [ 247.369212][T15890] loop0: detected capacity change from 0 to 512 [ 247.432318][T15894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4345'. [ 247.443983][T15894] bridge0: port 3(syz_tun) entered blocking state [ 247.450695][T15894] bridge0: port 3(syz_tun) entered disabled state [ 247.457808][T15894] syz_tun: entered allmulticast mode [ 247.463859][T15894] syz_tun: entered promiscuous mode [ 247.469992][T15894] bridge0: port 3(syz_tun) entered blocking state [ 247.476546][T15894] bridge0: port 3(syz_tun) entered forwarding state [ 247.871595][T15905] loop6: detected capacity change from 0 to 8192 [ 247.932261][T15905] loop6: p1 p2 p3 [ 248.046201][T15923] ip6gretap0 speed is unknown, defaulting to 1000 [ 248.088672][T15923] lo speed is unknown, defaulting to 1000 [ 248.144005][T15930] loop8: detected capacity change from 0 to 2048 [ 248.150868][T15930] EXT4-fs: inline encryption not supported [ 248.192862][T15930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.257821][T10347] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.390297][T15949] ip6gretap0 speed is unknown, defaulting to 1000 [ 248.436982][T15955] loop0: detected capacity change from 0 to 256 [ 248.479269][T15949] lo speed is unknown, defaulting to 1000 [ 248.636259][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4373'. [ 248.645645][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4373'. [ 248.663508][T15974] 9pnet_fd: Insufficient options for proto=fd [ 248.671146][T15974] SELinux: Context !Լ is not valid (left unmapped). [ 248.804211][T15982] loop8: detected capacity change from 0 to 1024 [ 248.811212][T15982] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 248.821014][T15982] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 248.841594][T15982] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.4379: iget: special inode unallocated [ 248.854851][T15982] EXT4-fs (loop8): no journal found [ 248.860110][T15982] EXT4-fs (loop8): can't get journal size [ 248.881486][T15982] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.4379: iget: special inode unallocated [ 248.894921][T15982] EXT4-fs (loop8): failed to initialize system zone (-117) [ 248.902246][T15982] EXT4-fs (loop8): mount failed [ 249.026005][T16000] loop6: detected capacity change from 0 to 1024 [ 249.034216][T15998] loop0: detected capacity change from 0 to 128 [ 249.043615][T16000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.050964][T15998] ext4: Unknown parameter 'subj_role' [ 249.085512][T16000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.122248][T16000] ip6gretap0 speed is unknown, defaulting to 1000 [ 249.181494][T16000] lo speed is unknown, defaulting to 1000 [ 249.382248][T16032] ip6gretap0 speed is unknown, defaulting to 1000 [ 249.545915][T16032] lo speed is unknown, defaulting to 1000 [ 249.632896][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.744281][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4406'. [ 249.890106][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4410'. [ 250.099101][T16086] atomic_op ffff88812e863528 conn xmit_atomic 0000000000000000 [ 250.115794][T16087] netlink: 87 bytes leftover after parsing attributes in process `syz.4.4414'. [ 250.139351][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 250.139419][ T29] audit: type=1400 audit(2000000939.407:226528): avc: denied { create } for pid=16076 comm="syz.4.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.181356][ T29] audit: type=1400 audit(2000000939.435:226529): avc: denied { getopt } for pid=16076 comm="syz.4.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.201295][ T29] audit: type=1400 audit(2000000939.435:226530): avc: denied { create } for pid=16076 comm="syz.4.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.237061][ T29] audit: type=1400 audit(2000000939.444:226531): avc: denied { open } for pid=16088 comm="syz.6.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 250.256799][ T29] audit: type=1400 audit(2000000939.444:226532): avc: denied { kernel } for pid=16088 comm="syz.6.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 250.276554][ T29] audit: type=1400 audit(2000000939.491:226533): avc: denied { write } for pid=16088 comm="syz.6.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 250.296243][ T29] audit: type=1400 audit(2000000939.491:226534): avc: denied { connect } for pid=16088 comm="syz.6.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.316083][ T29] audit: type=1400 audit(2000000939.491:226535): avc: denied { write } for pid=16088 comm="syz.6.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.344962][ T29] audit: type=1400 audit(2000000939.594:226536): avc: denied { connect } for pid=16090 comm="syz.8.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.397859][ T29] audit: type=1400 audit(2000000939.622:226537): avc: denied { write } for pid=16090 comm="syz.8.4419" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 250.454861][T16097] loop6: detected capacity change from 0 to 7 [ 250.461269][T16097] Buffer I/O error on dev loop6, logical block 0, async page read [ 250.469227][T16097] Buffer I/O error on dev loop6, logical block 0, async page read [ 250.477106][T16097] loop6: unable to read partition table [ 250.493407][T16091] loop8: detected capacity change from 0 to 1024 [ 250.500420][T16097] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 250.500420][T16097] ) failed (rc=-5) [ 250.515286][T16091] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 250.525003][T16091] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 250.544580][T16091] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.4419: iget: special inode unallocated [ 250.546144][T16104] loop6: detected capacity change from 0 to 128 [ 250.580061][T16091] EXT4-fs (loop8): no journal found [ 250.585331][T16091] EXT4-fs (loop8): can't get journal size [ 250.595465][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4426'. [ 250.611270][T16091] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.4419: iget: special inode unallocated [ 250.636335][T16091] EXT4-fs (loop8): failed to initialize system zone (-117) [ 250.647495][T16091] EXT4-fs (loop8): mount failed [ 250.708841][T16121] block device autoloading is deprecated and will be removed. [ 250.740653][T16126] loop0: detected capacity change from 0 to 512 [ 250.747186][T16126] EXT4-fs: Ignoring removed i_version option [ 250.753274][T16126] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.757299][T16120] ip6gretap0 speed is unknown, defaulting to 1000 [ 250.780321][T16126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.795020][T16129] loop6: detected capacity change from 0 to 764 [ 250.807589][T16129] FAULT_INJECTION: forcing a failure. [ 250.807589][T16129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.820723][T16129] CPU: 1 UID: 0 PID: 16129 Comm: syz.6.4434 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 250.820815][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.820830][T16129] Call Trace: [ 250.820837][T16129] [ 250.820846][T16129] dump_stack_lvl+0xf2/0x150 [ 250.820878][T16129] dump_stack+0x15/0x1a [ 250.820904][T16129] should_fail_ex+0x24a/0x260 [ 250.821017][T16129] should_fail+0xb/0x10 [ 250.821052][T16129] should_fail_usercopy+0x1a/0x20 [ 250.821077][T16129] strncpy_from_user+0x25/0x210 [ 250.821181][T16129] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 250.821221][T16129] ? getname_flags+0x81/0x3b0 [ 250.821303][T16129] getname_flags+0xb0/0x3b0 [ 250.821337][T16129] getname+0x17/0x20 [ 250.821369][T16129] do_sys_openat2+0x67/0x120 [ 250.821441][T16129] __x64_sys_openat+0xf3/0x120 [ 250.821480][T16129] x64_sys_call+0x2b30/0x2dc0 [ 250.821524][T16129] do_syscall_64+0xc9/0x1c0 [ 250.821548][T16129] ? clear_bhb_loop+0x55/0xb0 [ 250.821575][T16129] ? clear_bhb_loop+0x55/0xb0 [ 250.821603][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.821637][T16129] RIP: 0033:0x7fe8e96ccda9 [ 250.821684][T16129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.821706][T16129] RSP: 002b:00007fe8e7d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.821726][T16129] RAX: ffffffffffffffda RBX: 00007fe8e98e5fa0 RCX: 00007fe8e96ccda9 [ 250.821746][T16129] RDX: 0000000000046443 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 250.821889][T16129] RBP: 00007fe8e7d37090 R08: 0000000000000000 R09: 0000000000000000 [ 250.821901][T16129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.821913][T16129] R13: 0000000000000000 R14: 00007fe8e98e5fa0 R15: 00007ffdadefa2d8 [ 250.821931][T16129] [ 250.832528][T16126] EXT4-fs (loop0): 1 truncate cleaned up [ 250.863303][T16120] lo speed is unknown, defaulting to 1000 [ 250.959071][T16126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.101069][T16126] ip6gretap0 speed is unknown, defaulting to 1000 [ 251.151844][T16126] lo speed is unknown, defaulting to 1000 [ 251.318409][T16160] macvlan0: entered allmulticast mode [ 251.323934][T16160] veth1_vlan: entered allmulticast mode [ 251.329698][T16156] loop8: detected capacity change from 0 to 1024 [ 251.329867][T16160] macvlan0: left allmulticast mode [ 251.341276][T16160] veth1_vlan: left allmulticast mode [ 251.349528][T16156] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 251.359517][T16156] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.371716][T16163] x_tables: unsorted underflow at hook 2 [ 251.412926][T16156] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.4442: iget: special inode unallocated [ 251.462875][T16156] EXT4-fs (loop8): no journal found [ 251.468198][T16156] EXT4-fs (loop8): can't get journal size [ 251.527946][T16156] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.4442: iget: special inode unallocated [ 251.541791][T16172] serio: Serial port ptm0 [ 251.558560][T16156] EXT4-fs (loop8): failed to initialize system zone (-117) [ 251.566446][T16156] EXT4-fs (loop8): mount failed [ 251.629454][T16181] bond3: entered promiscuous mode [ 251.634563][T16181] bond3: entered allmulticast mode [ 251.656145][T16181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.672450][T16181] bond3 (unregistering): Released all slaves [ 251.683116][T16184] loop6: detected capacity change from 0 to 512 [ 251.743140][T16184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.804968][T16184] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.912107][T12255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.953187][T16190] vcan0 speed is unknown, defaulting to 1000 [ 251.960542][T16190] vcan0 speed is unknown, defaulting to 1000 [ 251.966845][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.031116][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 252.038556][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.046091][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.048634][T16190] infiniband syz0: set active [ 252.053590][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.053616][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.053641][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.053667][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 252.058327][T16190] infiniband syz0: added vcan0 [ 252.065795][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.100269][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 252.107808][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.115419][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.122984][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.128427][T16190] RDS/IB: syz0: added [ 252.130456][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.135691][T16190] smc: adding ib device syz0 with port count 1 [ 252.141795][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 252.148046][T16190] smc: ib device syz0 port 1 has pnetid [ 252.155404][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.161677][ T1050] vcan0 speed is unknown, defaulting to 1000 [ 252.168742][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.174739][ T9] vcan0 speed is unknown, defaulting to 1000 [ 252.174767][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.182240][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.201783][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.209183][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.216658][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.224206][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.225205][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.231580][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.245208][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.252608][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.260100][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.267582][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.267894][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.275065][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.288573][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.295966][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.303446][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.311057][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.318542][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.326107][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.333595][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.341097][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.348486][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.354285][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.356027][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.369432][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.404649][ T3376] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.81 Device [syz0] on syz1 [ 252.405764][T14989] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /90/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 252.428818][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.459183][T14989] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 252.479505][T14989] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /90/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 252.522834][T14989] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 252.562385][T14989] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /90/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 252.587734][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.597584][T16207] loop6: detected capacity change from 0 to 7 [ 252.603756][T16207] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.615634][T14989] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 252.647601][T16207] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.655512][T16207] loop6: unable to read partition table [ 252.658565][T14989] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /90/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 252.692999][T14989] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 252.697272][T16207] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 252.697272][T16207] ) failed (rc=-5) [ 252.722074][T14989] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /90/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 252.737639][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.806545][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.806752][T14989] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 252.880430][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.904229][T16223] net_ratelimit: 86 callbacks suppressed [ 252.904247][T16223] dccp_invalid_packet: P.Data Offset(172) too large [ 252.906323][T16226] loop4: detected capacity change from 0 to 256 [ 252.974625][T16226] FAT-fs (loop4): bogus sectors per cluster 30 [ 252.978845][T16190] vcan0 speed is unknown, defaulting to 1000 [ 252.980893][T16226] FAT-fs (loop4): Can't find a valid FAT filesystem [ 253.006277][T16226] loop4: detected capacity change from 0 to 128 [ 253.032353][T16226] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.067744][T15788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.078711][T16226] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.092684][T15788] bridge0: port 3(syz_tun) entered disabled state [ 253.112313][T15788] syz_tun (unregistering): left allmulticast mode [ 253.118791][T15788] syz_tun (unregistering): left promiscuous mode [ 253.125306][T15788] bridge0: port 3(syz_tun) entered disabled state [ 253.145304][T16232] rdma_op ffff88810218d180 conn xmit_rdma 0000000000000000 [ 253.153924][T16232] usb usb1: usbfs: process 16232 (syz.6.4465) did not claim interface 0 before use [ 253.202266][T14464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.257852][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.353002][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.414489][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.432572][T16248] loop4: detected capacity change from 0 to 1024 [ 253.439944][T16248] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 253.450526][T16248] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 253.467270][T16248] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.4471: iget: special inode unallocated [ 253.483288][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.491021][T16248] EXT4-fs (loop4): no journal found [ 253.498854][T16248] EXT4-fs (loop4): can't get journal size [ 253.515648][T16243] ip6gretap0 speed is unknown, defaulting to 1000 [ 253.524665][T16248] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.4471: iget: special inode unallocated [ 253.553275][T16248] EXT4-fs (loop4): failed to initialize system zone (-117) [ 253.555034][T16243] lo speed is unknown, defaulting to 1000 [ 253.567280][T16248] EXT4-fs (loop4): mount failed [ 253.606398][T16243] vcan0 speed is unknown, defaulting to 1000 [ 253.612715][ T50] bridge_slave_1: left allmulticast mode [ 253.618530][ T50] bridge_slave_1: left promiscuous mode [ 253.624254][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.642878][ T50] bridge_slave_0: left allmulticast mode [ 253.648655][ T50] bridge_slave_0: left promiscuous mode [ 253.654475][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.673828][T16258] loop6: detected capacity change from 0 to 7 [ 253.680405][T16258] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.689587][T16258] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.697587][T16258] loop6: unable to read partition table [ 253.703874][T16258] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 253.703874][T16258] ) failed (rc=-5) [ 253.850397][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.860731][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.870487][ T50] bond0 (unregistering): Released all slaves [ 253.915333][ T50] IPVS: stopping master sync thread 15752 ... [ 254.004842][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 254.004863][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4483'. [ 254.014844][T16286] wireguard0: entered promiscuous mode [ 254.014866][T16286] wireguard0: entered allmulticast mode [ 254.050484][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4483'. [ 254.139482][ T50] hsr_slave_0: left promiscuous mode [ 254.152986][T16296] FAULT_INJECTION: forcing a failure. [ 254.152986][T16296] name failslab, interval 1, probability 0, space 0, times 0 [ 254.165742][T16296] CPU: 1 UID: 0 PID: 16296 Comm: syz.4.4485 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 254.165779][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.165794][T16296] Call Trace: [ 254.165802][T16296] [ 254.165811][T16296] dump_stack_lvl+0xf2/0x150 [ 254.165844][T16296] dump_stack+0x15/0x1a [ 254.165914][T16296] should_fail_ex+0x24a/0x260 [ 254.165954][T16296] should_failslab+0x8f/0xb0 [ 254.166036][T16296] __kmalloc_node_noprof+0xad/0x410 [ 254.166077][T16296] ? vmemdup_user+0x42/0x1b0 [ 254.166107][T16296] vmemdup_user+0x42/0x1b0 [ 254.166177][T16296] con_set_unimap+0x3b/0x940 [ 254.166207][T16296] ? should_fail_ex+0xd7/0x260 [ 254.166269][T16296] vt_ioctl+0x1078/0x1810 [ 254.166299][T16296] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 254.166326][T16296] tty_ioctl+0x815/0xbe0 [ 254.166357][T16296] ? __pfx_tty_ioctl+0x10/0x10 [ 254.166496][T16296] __se_sys_ioctl+0xc9/0x140 [ 254.166540][T16296] __x64_sys_ioctl+0x43/0x50 [ 254.166566][T16296] x64_sys_call+0x1690/0x2dc0 [ 254.166595][T16296] do_syscall_64+0xc9/0x1c0 [ 254.166625][T16296] ? clear_bhb_loop+0x55/0xb0 [ 254.166728][T16296] ? clear_bhb_loop+0x55/0xb0 [ 254.166819][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.166900][T16296] RIP: 0033:0x7f445419cda9 [ 254.166919][T16296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.166941][T16296] RSP: 002b:00007f4452807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.166963][T16296] RAX: ffffffffffffffda RBX: 00007f44543b5fa0 RCX: 00007f445419cda9 [ 254.166978][T16296] RDX: 0000000020000640 RSI: 0000000000004b67 RDI: 0000000000000003 [ 254.166997][T16296] RBP: 00007f4452807090 R08: 0000000000000000 R09: 0000000000000000 [ 254.167092][T16296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.167106][T16296] R13: 0000000000000000 R14: 00007f44543b5fa0 R15: 00007fffaa332838 [ 254.167129][T16296] [ 254.401404][ T50] hsr_slave_1: left promiscuous mode [ 254.407444][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.415043][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.424220][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.431864][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.450899][ T50] veth1_macvtap: left promiscuous mode [ 254.456568][ T50] veth0_macvtap: left promiscuous mode [ 254.462163][ T50] veth1_vlan: left promiscuous mode [ 254.467452][ T50] veth0_vlan: left promiscuous mode [ 254.545220][ T11] ================================================================== [ 254.553460][ T11] BUG: KCSAN: data-race in batadv_hard_if_event / batadv_mcast_mla_update [ 254.561986][ T11] [ 254.564304][ T11] write to 0xffff888104033610 of 1 bytes by task 50 on cpu 1: [ 254.571765][ T11] batadv_hard_if_event+0x896/0xfb0 [ 254.576965][ T11] raw_notifier_call_chain+0x6f/0x1d0 [ 254.582342][ T11] call_netdevice_notifiers_info+0xae/0x100 [ 254.588250][ T11] unregister_netdevice_many_notify+0x98a/0x1280 [ 254.594583][ T11] default_device_exit_batch+0x5f0/0x650 [ 254.600229][ T11] cleanup_net+0x4eb/0x890 [ 254.604665][ T11] process_scheduled_works+0x483/0x9a0 [ 254.610127][ T11] worker_thread+0x51d/0x6f0 [ 254.614716][ T11] kthread+0x4ae/0x520 [ 254.618806][ T11] ret_from_fork+0x4b/0x60 [ 254.623233][ T11] ret_from_fork_asm+0x1a/0x30 [ 254.628027][ T11] [ 254.630352][ T11] read to 0xffff888104033610 of 1 bytes by task 11 on cpu 0: [ 254.637722][ T11] batadv_mcast_mla_update+0x21b/0x1700 [ 254.643303][ T11] process_scheduled_works+0x483/0x9a0 [ 254.648768][ T11] worker_thread+0x51d/0x6f0 [ 254.653363][ T11] kthread+0x4ae/0x520 [ 254.657455][ T11] ret_from_fork+0x4b/0x60 [ 254.661887][ T11] ret_from_fork_asm+0x1a/0x30 [ 254.666663][ T11] [ 254.668992][ T11] value changed: 0x00 -> 0x01 [ 254.673681][ T11] [ 254.676014][ T11] Reported by Kernel Concurrency Sanitizer on: [ 254.682173][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.692872][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.702946][ T11] Workqueue: bat_events batadv_mcast_mla_update [ 254.709209][ T11] ================================================================== [ 254.717858][ T50] team0 (unregistering): Port device team_slave_1 removed [ 254.766377][ T50] team0 (unregistering): Port device team_slave_0 removed [ 254.855046][T16307] ip6gretap0 speed is unknown, defaulting to 1000 [ 254.950586][T16307] lo speed is unknown, defaulting to 1000 [ 254.982012][T16307] vcan0 speed is unknown, defaulting to 1000 [ 255.224527][ T50] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.272701][ T50] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.345725][ T50] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.421055][ T50] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.498375][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.539179][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.603654][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.678991][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.733331][ T50] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.773396][ T50] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.838319][ T50] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.912334][ T50] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.989116][ T50] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.030873][ T50] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.083579][ T50] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.126373][ T50] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.214830][ T50] bridge_slave_1: left allmulticast mode [ 256.220511][ T50] bridge_slave_1: left promiscuous mode [ 256.226268][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.234182][ T50] bridge_slave_0: left allmulticast mode [ 256.239832][ T50] bridge_slave_0: left promiscuous mode [ 256.245570][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.253876][ T50] bridge_slave_1: left allmulticast mode [ 256.259513][ T50] bridge_slave_1: left promiscuous mode [ 256.265331][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.273224][ T50] bridge_slave_0: left allmulticast mode [ 256.278909][ T50] bridge_slave_0: left promiscuous mode [ 256.284581][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.660934][ T50] bond0 (unregistering): Released all slaves [ 256.669180][ T50] bond0 (unregistering): Released all slaves [ 256.677964][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.687858][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.697592][ T50] bond0 (unregistering): Released all slaves [ 256.706550][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.716291][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.725962][ T50] bond0 (unregistering): Released all slaves [ 256.734263][ T50] bond1 (unregistering): Released all slaves [ 256.742666][ T50] bond2 (unregistering): Released all slaves [ 256.752532][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.762661][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.772009][ T50] bond0 (unregistering): Released all slaves [ 256.780654][ T50] bond1 (unregistering): Released all slaves [ 256.789143][ T35] ip6gretap0 speed is unknown, defaulting to 1000 [ 256.795618][ T35] infiniband syz1: ib_query_port failed (-19) [ 256.875386][ T50] tipc: Disabling bearer [ 256.880618][ T50] tipc: Left network mode [ 256.889351][ T50] IPVS: stopping master sync thread 10656 ... [ 257.222423][ T50] hsr_slave_0: left promiscuous mode [ 257.232435][ T50] hsr_slave_1: left promiscuous mode [ 257.243030][ T50] hsr_slave_0: left promiscuous mode [ 257.252180][ T50] hsr_slave_1: left promiscuous mode [ 257.257770][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.265352][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.273275][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.280731][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.289852][ T50] hsr_slave_0: left promiscuous mode [ 257.295816][ T50] hsr_slave_1: left promiscuous mode [ 257.301662][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.309126][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.316929][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.324409][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.332485][ T50] hsr_slave_0: left promiscuous mode [ 257.338250][ T50] hsr_slave_1: left promiscuous mode [ 257.343842][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.351262][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.358943][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.366472][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.380288][ T50] veth1_macvtap: left promiscuous mode [ 257.385794][ T50] veth0_macvtap: left promiscuous mode [ 257.391427][ T50] veth1_vlan: left promiscuous mode [ 257.396698][ T50] veth0_vlan: left promiscuous mode [ 257.402460][ T50] veth1_macvtap: left promiscuous mode [ 257.407998][ T50] veth0_macvtap: left promiscuous mode [ 257.414030][ T50] veth1_macvtap: left promiscuous mode [ 257.419534][ T50] veth0_macvtap: left promiscuous mode [ 257.425014][ T50] veth1_vlan: left promiscuous mode [ 257.430272][ T50] veth0_vlan: left promiscuous mode [ 257.435990][ T50] veth1_macvtap: left promiscuous mode [ 257.441496][ T50] veth0_macvtap: left promiscuous mode [ 257.621713][T10180] smc: removing ib device syz! [ 257.661952][ T50] team0 (unregistering): Port device team_slave_1 removed [ 257.672405][ T50] team0 (unregistering): Port device team_slave_0 removed [ 257.728031][ T50] team0 (unregistering): Port device team_slave_1 removed [ 257.739222][ T50] team0 (unregistering): Port device team_slave_0 removed [ 257.766730][ T52] smc: removing ib device syz0 [ 257.769657][ T11] smc: removing ib device sz1 [ 257.829138][ T50] team0 (unregistering): Port device team_slave_1 removed [ 257.853387][ T50] team0 (unregistering): Port device team_slave_0 removed [ 258.009327][ T8] vcan0 speed is unknown, defaulting to 1000 [ 258.015385][ T1050] lo speed is unknown, defaulting to 1000 [ 258.982128][ T50] IPVS: stop unused estimator thread 0... [ 258.988182][ T50] IPVS: stop unused estimator thread 0...