last executing test programs: 3.339040527s ago: executing program 0 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) pipe2(0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 2.297126025s ago: executing program 0 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') utime(&(0x7f0000000340)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) bind$can_raw(r4, &(0x7f0000000280), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.921112854s ago: executing program 0 (id=72): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x22, 0x2, 0x4, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708e19e3623ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000"], 0xd4}}, 0x0) unshare(0x22020400) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x12504, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x8}, 0x7e03, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x8, &(0x7f0000033e00)=""/102379, &(0x7f00000001c0)=0x18feb) preadv(r7, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)=""/138, 0x8a}], 0xd, 0x100, 0x2) 1.812692274s ago: executing program 0 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8004}, 0x0) 1.771387853s ago: executing program 0 (id=79): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x22, 0x2, 0x4, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708e19e3623ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xd4}}, 0x0) unshare(0x22020400) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x12504, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x8}, 0x7e03, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x8, &(0x7f0000033e00)=""/102379, &(0x7f00000001c0)=0x18feb) preadv(r7, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)=""/138, 0x8a}], 0xd, 0x100, 0x2) 1.706260964s ago: executing program 0 (id=81): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.693307883s ago: executing program 3 (id=82): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x29, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) 1.565409793s ago: executing program 1 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) pipe2(0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 1.505497353s ago: executing program 3 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.482730193s ago: executing program 3 (id=89): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x81}], 0x1f, 0x0, 0x0, 0x0) 618.836471ms ago: executing program 2 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x9813f578) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) msgget(0x2, 0x304) 612.754941ms ago: executing program 3 (id=95): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) 610.298961ms ago: executing program 1 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 544.542681ms ago: executing program 3 (id=97): r0 = io_uring_setup(0x7f91, &(0x7f0000000340)={0x0, 0x6faf, 0x80, 0x2, 0x2e1}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000006c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) 533.615511ms ago: executing program 2 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) fsetxattr$security_selinux(r8, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 308.026031ms ago: executing program 3 (id=99): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f050200000d0000000400000002000000005f00000061"], &(0x7f0000000200)=""/249, 0x37, 0xf9, 0xa, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2}) fcntl$lock(r0, 0x6f, &(0x7f0000000180)={0x2, 0x4, 0x9161, 0xfffffffffffffc01}) fcntl$lock(r1, 0x6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb73}) socket$rds(0x15, 0x5, 0x0) epoll_create1(0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000600)={0x4000001f}) ppoll(&(0x7f0000000180)=[{r7, 0x81}], 0x1f, 0x0, 0x0, 0x0) 274.85485ms ago: executing program 1 (id=101): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f050200000d0000000400000002000000005f00000061"], &(0x7f0000000200)=""/249, 0x37, 0xf9, 0xa, 0x0, 0x0, @void, @value}, 0x28) 274.11087ms ago: executing program 2 (id=102): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$lock(r0, 0x6f, &(0x7f0000000180)={0x2, 0x4, 0x9161, 0xfffffffffffffc01}) 245.52975ms ago: executing program 2 (id=103): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 243.286041ms ago: executing program 4 (id=104): fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) 236.83809ms ago: executing program 1 (id=105): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x36}, 0x41fe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0xffffff28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x27, 0x800, 0x853d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 199.17012ms ago: executing program 4 (id=106): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x8000, 0x3, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = getpid() setreuid(0xee00, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) 177.823661ms ago: executing program 2 (id=107): r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x1, 0x0, 0x80, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 102.67589ms ago: executing program 4 (id=108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x9813f578) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) msgget(0x2, 0x304) 78.68881ms ago: executing program 4 (id=109): creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[]) 50.73766ms ago: executing program 1 (id=110): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000a600000009"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 50.21449ms ago: executing program 4 (id=111): r0 = open(0x0, 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 6.28045ms ago: executing program 1 (id=112): r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r5 = socket(0x2a, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x1, 0x0, 0x80, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 820.09µs ago: executing program 2 (id=113): unshare(0x60600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000404"], 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0xc5ed, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x2a, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[], 0xa8}}, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=@deltaction={0x1dc, 0x31, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x49e}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4a}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x39, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff65e0}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a8d}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6c}}]}]}, 0x1dc}}, 0x0) sendmsg$inet6(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000000240)="878a3409f72df92135f1dac427719f29e10f6e3de783630925a690f86158771e39b072faa96359b3d72cad83adf2ada38a2a8d10944abcd391be2ce8a841e99d145d96fc3cce5c1c4774b64bdc7fa287", 0x50}, {&(0x7f0000000340)="d9a18bc54817a92b23ec34", 0xb}, {&(0x7f00000003c0)="86231c19f8fc589d687399b6700752bfea40381ca32ec1c6b14d75ce666608db1e3c50df642f46359e4b9bcfe067f626ca47d7139e0fdcaedaf2e7faa8113a9b29b2bfb112069544048f", 0x4a}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000000000000000000000000640e4", @ANYRES32=0x0, @ANYBLOB="00000000780000000000000029000000360000003c0b00000000000001070000000000000001040000000000010007280000000008000100400000000000000000000080000000007affffffffffffff05000000000000000710000000020208ff010100000000000000c204000000b4010100c20400000008000000"], 0xa0}, 0x8001) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) fgetxattr(r6, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000200)=""/112, 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000a5c7b01f010000ff7f0000cc0000000000000054bf8e1a63fbe8770f17341f6d499870", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) 0s ago: executing program 4 (id=114): r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r5 = socket(0x2a, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x1, 0x0, 0x80, 0x7ffc0001}]}) kernel console output (not intermixed with test programs): [ 18.764751][ T29] audit: type=1400 audit(1737406517.004:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 24.341311][ T29] audit: type=1400 audit(1737406522.574:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.342317][ T3287] cgroup: Unknown subsys name 'net' [ 24.364017][ T29] audit: type=1400 audit(1737406522.574:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.391372][ T29] audit: type=1400 audit(1737406522.614:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.565832][ T3287] cgroup: Unknown subsys name 'cpuset' [ 24.571825][ T3287] cgroup: Unknown subsys name 'rlimit' [ 24.700477][ T29] audit: type=1400 audit(1737406522.934:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.723762][ T29] audit: type=1400 audit(1737406522.934:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.744323][ T29] audit: type=1400 audit(1737406522.934:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.764676][ T29] audit: type=1400 audit(1737406522.934:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.785040][ T29] audit: type=1400 audit(1737406522.934:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.792658][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.809921][ T29] audit: type=1400 audit(1737406522.934:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.841895][ T29] audit: type=1400 audit(1737406523.064:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.872046][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.272174][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.299466][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 26.397855][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.411411][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.419494][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.427580][ T3302] bridge_slave_0: entered allmulticast mode [ 26.434085][ T3302] bridge_slave_0: entered promiscuous mode [ 26.449793][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 26.460324][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.467514][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.474650][ T3302] bridge_slave_1: entered allmulticast mode [ 26.481293][ T3302] bridge_slave_1: entered promiscuous mode [ 26.487698][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.495710][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.503377][ T3297] bridge_slave_0: entered allmulticast mode [ 26.509833][ T3297] bridge_slave_0: entered promiscuous mode [ 26.531489][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.538659][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.545951][ T3297] bridge_slave_1: entered allmulticast mode [ 26.552175][ T3297] bridge_slave_1: entered promiscuous mode [ 26.579510][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.592794][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.607007][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.627816][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.637616][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.661346][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.668521][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.675752][ T3303] bridge_slave_0: entered allmulticast mode [ 26.682461][ T3303] bridge_slave_0: entered promiscuous mode [ 26.702491][ T3302] team0: Port device team_slave_0 added [ 26.720244][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.727466][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.734605][ T3303] bridge_slave_1: entered allmulticast mode [ 26.740913][ T3303] bridge_slave_1: entered promiscuous mode [ 26.747059][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.754158][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.761332][ T3299] bridge_slave_0: entered allmulticast mode [ 26.767736][ T3299] bridge_slave_0: entered promiscuous mode [ 26.778847][ T3297] team0: Port device team_slave_0 added [ 26.785029][ T3302] team0: Port device team_slave_1 added [ 26.797921][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.805194][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.812335][ T3299] bridge_slave_1: entered allmulticast mode [ 26.818958][ T3299] bridge_slave_1: entered promiscuous mode [ 26.825748][ T3297] team0: Port device team_slave_1 added [ 26.864533][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.871537][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.897562][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.908760][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.915747][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.941646][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.952420][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.959554][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.966817][ T3305] bridge_slave_0: entered allmulticast mode [ 26.973052][ T3305] bridge_slave_0: entered promiscuous mode [ 26.980699][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.989955][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.997067][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.004196][ T3305] bridge_slave_1: entered allmulticast mode [ 27.010631][ T3305] bridge_slave_1: entered promiscuous mode [ 27.021365][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.030905][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.037938][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.063877][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.076635][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.083627][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.109524][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.121242][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.139694][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.160313][ T3299] team0: Port device team_slave_0 added [ 27.170754][ T3303] team0: Port device team_slave_0 added [ 27.186082][ T3299] team0: Port device team_slave_1 added [ 27.197005][ T3303] team0: Port device team_slave_1 added [ 27.203596][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.214070][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.249258][ T3297] hsr_slave_0: entered promiscuous mode [ 27.255509][ T3297] hsr_slave_1: entered promiscuous mode [ 27.261710][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.268820][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.294855][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.305977][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.312954][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.338952][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.350066][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.357077][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.383074][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.408146][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.415175][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.441217][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.456897][ T3305] team0: Port device team_slave_0 added [ 27.464240][ T3302] hsr_slave_0: entered promiscuous mode [ 27.470169][ T3302] hsr_slave_1: entered promiscuous mode [ 27.476135][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.483679][ T3302] Cannot create hsr debugfs directory [ 27.501470][ T3305] team0: Port device team_slave_1 added [ 27.527205][ T3303] hsr_slave_0: entered promiscuous mode [ 27.533270][ T3303] hsr_slave_1: entered promiscuous mode [ 27.539268][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.546836][ T3303] Cannot create hsr debugfs directory [ 27.562907][ T3299] hsr_slave_0: entered promiscuous mode [ 27.569157][ T3299] hsr_slave_1: entered promiscuous mode [ 27.574969][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.582579][ T3299] Cannot create hsr debugfs directory [ 27.597356][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.604304][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.630458][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.662454][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.669521][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.695444][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.762851][ T3305] hsr_slave_0: entered promiscuous mode [ 27.768943][ T3305] hsr_slave_1: entered promiscuous mode [ 27.774931][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.782516][ T3305] Cannot create hsr debugfs directory [ 27.864833][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.879801][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.895974][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.915315][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.923852][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.935347][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.945763][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.957086][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.967842][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.976792][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.986709][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.995024][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.035617][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.056286][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.067088][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.077032][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.085603][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.093994][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.106668][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.115347][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.160784][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.187517][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.201461][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.218524][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.225605][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.238416][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.245625][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.254622][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.266297][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.292031][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.300759][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.307812][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.317423][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.330602][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.339627][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.346749][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.355621][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.362675][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.372829][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.379992][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.409600][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.417744][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.434614][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.445333][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.460991][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.468221][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.476938][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.484036][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.505959][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.513162][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.534585][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.541681][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.554623][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.575855][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.601992][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.629473][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.650411][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.748535][ T3305] veth0_vlan: entered promiscuous mode [ 28.763900][ T3302] veth0_vlan: entered promiscuous mode [ 28.771766][ T3305] veth1_vlan: entered promiscuous mode [ 28.787322][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.798966][ T3297] veth0_vlan: entered promiscuous mode [ 28.805347][ T3302] veth1_vlan: entered promiscuous mode [ 28.816611][ T3297] veth1_vlan: entered promiscuous mode [ 28.823483][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.843868][ T3302] veth0_macvtap: entered promiscuous mode [ 28.862409][ T3297] veth0_macvtap: entered promiscuous mode [ 28.870428][ T3305] veth0_macvtap: entered promiscuous mode [ 28.877700][ T3302] veth1_macvtap: entered promiscuous mode [ 28.884889][ T3297] veth1_macvtap: entered promiscuous mode [ 28.892159][ T3305] veth1_macvtap: entered promiscuous mode [ 28.903926][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.917375][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.927903][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.938444][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.950342][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.960891][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.970739][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.981185][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.991614][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.000333][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.011366][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.022015][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.033408][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.051786][ T3299] veth0_vlan: entered promiscuous mode [ 29.058186][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.068724][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.078617][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.089126][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.099811][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.107517][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.116350][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.125133][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.133815][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.146531][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155299][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.164062][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.172806][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.184297][ T3299] veth1_vlan: entered promiscuous mode [ 29.193005][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.201832][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.210643][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.219366][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.283833][ T3299] veth0_macvtap: entered promiscuous mode [ 29.293585][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.311096][ T3299] veth1_macvtap: entered promiscuous mode [ 29.329275][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.339842][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.349909][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 29.349907][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.349920][ T29] audit: type=1400 audit(1737406527.574:122): avc: denied { prog_load } for pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.349938][ T29] audit: type=1400 audit(1737406527.574:123): avc: denied { bpf } for pid=3437 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.349956][ T29] audit: type=1400 audit(1737406527.574:124): avc: denied { create } for pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.356030][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.356045][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.367055][ T29] audit: type=1400 audit(1737406527.574:125): avc: denied { write } for pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.385721][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.387496][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.405887][ T29] audit: type=1400 audit(1737406527.574:126): avc: denied { read } for pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.500781][ T29] audit: type=1400 audit(1737406527.574:127): avc: denied { map_create } for pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.500823][ T3303] veth0_vlan: entered promiscuous mode [ 29.519718][ T29] audit: type=1400 audit(1737406527.574:128): avc: denied { perfmon } for pid=3437 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.538142][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.556217][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.566035][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.576844][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.586864][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.597363][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.615454][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.624512][ T29] audit: type=1400 audit(1737406527.834:129): avc: denied { prog_run } for pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.643202][ T29] audit: type=1400 audit(1737406527.834:130): avc: denied { map_read map_write } for pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.662870][ T29] audit: type=1400 audit(1737406527.844:131): avc: denied { create } for pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 29.685052][ T3303] veth1_vlan: entered promiscuous mode [ 29.709657][ T3448] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 29.718601][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.727448][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.736353][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.745112][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.772859][ T3453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 29.784055][ T3453] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 29.809807][ T3303] veth0_macvtap: entered promiscuous mode [ 29.823836][ T3455] loop3: detected capacity change from 0 to 512 [ 29.845636][ T3303] veth1_macvtap: entered promiscuous mode [ 29.852806][ T3455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 29.863540][ T3455] System zones: 1-12 [ 29.891053][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.901568][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.907759][ T3455] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.8: corrupted in-inode xattr: invalid ea_ino [ 29.911445][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.934967][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.944852][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.954604][ T3455] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.8: couldn't read orphan inode 15 (err -117) [ 29.955299][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.976784][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.987368][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.998608][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.006975][ T3455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.007228][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.030025][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.039963][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.050491][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.060338][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.070787][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.080648][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.091126][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.101757][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.121597][ T3463] netlink: 352 bytes leftover after parsing attributes in process `syz.0.12'. [ 30.136045][ T3464] bond1: entered promiscuous mode [ 30.141106][ T3464] bond1: entered allmulticast mode [ 30.146863][ T3464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 30.162765][ T3464] bond1 (unregistering): Released all slaves [ 30.178153][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.186983][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.195788][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.204525][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.418147][ T3482] 9pnet: Could not find request transport: fd0x0000000000000007 [ 30.542203][ C1] hrtimer: interrupt took 57903 ns [ 30.595479][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.628896][ T3504] loop1: detected capacity change from 0 to 512 [ 30.652082][ T3504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 30.658779][ T3509] loop3: detected capacity change from 0 to 512 [ 30.667268][ T3504] System zones: 1-12 [ 30.678567][ T3504] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.27: corrupted in-inode xattr: invalid ea_ino [ 30.725738][ T3504] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.27: couldn't read orphan inode 15 (err -117) [ 30.756454][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.777618][ T3509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 30.798409][ T3509] System zones: 1-12 [ 30.803350][ T3509] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.28: corrupted in-inode xattr: invalid ea_ino [ 30.827884][ T3504] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.828198][ T3509] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.28: couldn't read orphan inode 15 (err -117) [ 30.888464][ T3509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.070916][ T3509] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.196803][ T3526] loop3: detected capacity change from 0 to 512 [ 31.207168][ T3526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 31.224172][ T3526] System zones: 1-12 [ 31.245021][ T3526] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.35: corrupted in-inode xattr: invalid ea_ino [ 31.289436][ T3526] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.35: couldn't read orphan inode 15 (err -117) [ 31.338560][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.399853][ T3539] bond1: entered promiscuous mode [ 31.404930][ T3539] bond1: entered allmulticast mode [ 31.411152][ T3539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.421929][ T3539] bond1 (unregistering): Released all slaves [ 31.462550][ T3542] bond1: entered promiscuous mode [ 31.467679][ T3542] bond1: entered allmulticast mode [ 31.473009][ T3542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.491562][ T3542] bond1 (unregistering): Released all slaves [ 31.628272][ T3557] loop2: detected capacity change from 0 to 512 [ 31.662240][ T3557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 31.666000][ T3560] bond1: entered promiscuous mode [ 31.671451][ T3557] System zones: 1-12 [ 31.675344][ T3560] bond1: entered allmulticast mode [ 31.682589][ T3557] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.44: corrupted in-inode xattr: invalid ea_ino [ 31.688573][ T3560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.718917][ T3557] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 31.750892][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.790568][ T3560] bond1 (unregistering): Released all slaves [ 31.848099][ T3568] 9pnet: Could not find request transport: t=0x000000000004e20 [ 31.929078][ T3574] erspan0: entered promiscuous mode [ 31.943664][ T3574] erspan0: left promiscuous mode [ 32.029301][ T3573] bond1: entered promiscuous mode [ 32.034662][ T3573] bond1: entered allmulticast mode [ 32.078806][ T3573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.090698][ T3578] 9pnet: Could not find request transport: t=0x000000000004e20 [ 32.127496][ T3573] bond1 (unregistering): Released all slaves [ 32.186601][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.659225][ T3585] erspan0: entered promiscuous mode [ 32.667182][ T3585] erspan0: left promiscuous mode [ 32.771623][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.784578][ T3589] 9pnet_fd: Insufficient options for proto=fd [ 32.994069][ T3595] 9pnet: Could not find request transport: t=0x000000000004e20 [ 33.011224][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 33.064048][ T3601] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 33.213730][ T3614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 33.247723][ T3619] bond1: entered promiscuous mode [ 33.252883][ T3619] bond1: entered allmulticast mode [ 33.259922][ T3619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.301794][ T3619] bond1 (unregistering): Released all slaves [ 33.325969][ T3621] loop4: detected capacity change from 0 to 512 [ 33.338956][ T3621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 33.362815][ T3621] System zones: 1-12 [ 33.376415][ T3621] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.67: corrupted in-inode xattr: invalid ea_ino [ 33.428746][ T3621] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.67: couldn't read orphan inode 15 (err -117) [ 33.460720][ T3621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.506488][ T3629] bond1: entered promiscuous mode [ 33.511538][ T3629] bond1: entered allmulticast mode [ 33.518411][ T3629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.530273][ T3629] bond1 (unregistering): Released all slaves [ 33.546276][ T3627] erspan0: entered promiscuous mode [ 33.554045][ T3627] erspan0: left promiscuous mode [ 33.616157][ T3633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.72'. [ 33.645618][ T3633] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 33.713742][ T3645] bond1: entered promiscuous mode [ 33.718942][ T3645] bond1: entered allmulticast mode [ 33.726086][ T3645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.737036][ T3645] bond1 (unregistering): Released all slaves [ 33.751248][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 33.763423][ T3648] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 33.785215][ T3650] 9pnet_fd: Insufficient options for proto=fd [ 33.914483][ T3662] 9pnet: Could not find request transport: fd0x0000000000000007 [ 34.067337][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.223282][ T3627] syz.2.69 (3627) used greatest stack depth: 10744 bytes left [ 34.234406][ T3674] erspan0: entered promiscuous mode [ 34.244776][ T3674] erspan0: left promiscuous mode [ 34.528820][ T3678] erspan0: entered promiscuous mode [ 34.535489][ T3678] erspan0: left promiscuous mode [ 34.892990][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 34.893003][ T29] audit: type=1326 audit(1737406533.124:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 34.951583][ T29] audit: type=1326 audit(1737406533.164:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 34.974999][ T29] audit: type=1326 audit(1737406533.164:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 34.998411][ T29] audit: type=1326 audit(1737406533.164:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.021619][ T29] audit: type=1326 audit(1737406533.164:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.045173][ T29] audit: type=1326 audit(1737406533.174:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.068326][ T29] audit: type=1326 audit(1737406533.174:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.091544][ T29] audit: type=1326 audit(1737406533.174:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.114722][ T29] audit: type=1326 audit(1737406533.174:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.137948][ T29] audit: type=1326 audit(1737406533.174:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afae5d29 code=0x7ffc0000 [ 35.236649][ T3697] 9pnet: Could not find request transport: t=0x000000000004e20 [ 35.363116][ T3716] loop2: detected capacity change from 0 to 512 [ 35.372649][ T3716] EXT4-fs: inline encryption not supported [ 35.403486][ T3716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.436605][ T3716] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.452264][ T3716] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 35.464099][ T3716] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 35.479736][ T3716] Zero length message leads to an empty skb [ 35.497360][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.511372][ T3288] ================================================================== [ 35.519485][ T3288] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 35.526429][ T3288] [ 35.528769][ T3288] write to 0xffff8881033b40f4 of 4 bytes by task 3604 on cpu 0: [ 35.536393][ T3288] shmem_mknod+0x136/0x180 [ 35.540811][ T3288] shmem_create+0x34/0x40 [ 35.545141][ T3288] path_openat+0xe92/0x1fa0 [ 35.549652][ T3288] do_filp_open+0x107/0x230 [ 35.554145][ T3288] do_sys_openat2+0xab/0x120 [ 35.558772][ T3288] __x64_sys_openat+0xf3/0x120 [ 35.563523][ T3288] x64_sys_call+0x2b30/0x2dc0 [ 35.568190][ T3288] do_syscall_64+0xc9/0x1c0 [ 35.572683][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.578584][ T3288] [ 35.580924][ T3288] read to 0xffff8881033b40f4 of 4 bytes by task 3288 on cpu 1: [ 35.588450][ T3288] fill_mg_cmtime+0x58/0x280 [ 35.593135][ T3288] generic_fillattr+0x241/0x330 [ 35.597975][ T3288] shmem_getattr+0x17b/0x200 [ 35.602564][ T3288] vfs_statx_path+0x171/0x2d0 [ 35.607237][ T3288] vfs_statx+0xe1/0x170 [ 35.611403][ T3288] __se_sys_newfstatat+0xdc/0x300 [ 35.616433][ T3288] __x64_sys_newfstatat+0x55/0x70 [ 35.621464][ T3288] x64_sys_call+0x236d/0x2dc0 [ 35.626151][ T3288] do_syscall_64+0xc9/0x1c0 [ 35.630645][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.636528][ T3288] [ 35.638835][ T3288] value changed: 0x2d496b21 -> 0x2d4c89f3 [ 35.644608][ T3288] [ 35.646920][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 35.653089][ T3288] CPU: 1 UID: 0 PID: 3288 Comm: udevd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 35.662969][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.673042][ T3288] ================================================================== [ 35.700936][ T3732] loop4: detected capacity change from 0 to 512 [ 35.708004][ T3732] EXT4-fs: inline encryption not supported [ 35.734379][ T3738] loop2: detected capacity change from 0 to 512 [ 35.747864][ T3734] loop1: detected capacity change from 0 to 512 [ 35.754643][ T3734] EXT4-fs: inline encryption not supported [ 35.761467][ T3738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 35.762306][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.769618][ T3738] System zones: 1-12 [ 35.770424][ T3738] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.113: corrupted in-inode xattr: invalid ea_ino [ 35.785831][ T3732] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.787922][ T3738] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 35.816587][ T3732] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 35.822762][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.842665][ T3738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.844481][ T3734] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.888509][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.912656][ T3734] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 35.926969][ T3738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.947137][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.