last executing test programs: 3.441578585s ago: executing program 4 (id=116): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/201, 0xc9, 0x2, 0x8000}) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x6db, 0x9c) write$P9_RSTAT(r0, &(0x7f0000000240)={0x54, 0x7d, 0x2, {0x0, 0x4d, 0xcfe, 0x3ff, {0x8, 0x3, 0x4}, 0xa40000, 0x3, 0x3, 0xc8c6, 0xa, '/dev/null\x00', 0x6, '#}/}\\)', 0x0, '', 0xa, '/dev/null\x00'}}, 0x54) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000002c0)=""/4, 0x4) write$tun(r0, &(0x7f0000000300)={@void, @val={0x0, 0x0, 0x7, 0x9, 0x5b, 0x5}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @local, @random="4796b47f8e07", @mcast2}}, 0x3e) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{r0}, {@void, @max}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000480)={@initdev, 0x0}, &(0x7f00000004c0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x18, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0xf, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000000440)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x23, '\x00', r1, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5de7, 0x3, 0x7, 0x9}, 0x10, 0x0, r0, 0x8, &(0x7f0000000640)=[r0, r0, r0, r2, 0x1, r0, r0, r0], &(0x7f0000000680)=[{0x3, 0x2, 0x2, 0x4}, {0x1, 0x5, 0xf, 0x5}, {0x5, 0x5, 0xa, 0x8}, {0x1, 0x2, 0x6, 0xe}, {0x2, 0x1, 0x1}, {0x1, 0x4, 0x10, 0xa}, {0x0, 0x5, 0x3, 0x9}, {0x1, 0x3, 0x4, 0x4}], 0x10, 0x5}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='rxrpc_rx_data\x00', r0, 0x0, 0xb59}, 0x18) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f00000008c0)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/148, 0x94, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, &(0x7f0000001a00)=0x40) lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cgroup_pressure(r0, &(0x7f0000001b00)='memory.pressure\x00', 0x2, 0x0) ftruncate(r8, 0x9) write$tun(r0, &(0x7f0000001b40)={@val={0x0, 0x88be}, @val={0x1, 0x1, 0x1a, 0x15dd, 0x2, 0xda5}, @mpls={[{0x0, 0x0, 0x1}], @generic="e209fb26513d2c7c287c87857487c40a287b5557946d3552cccadf74ba4906f615e6ceacecfe2d31144b17fa7e12daa9a5f2511a333cbf590db3625f131fabd47313790cd3ca07bc2a5287e4c9c0192f18698603c4a98dcb1cb528f8b7306881cb4fd5b5a7f3949c5c1c9ec7170c692111c970fa7b666a"}}, 0x89) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001c00)={r4, 0x1, 0x360648, 0x6}) sendmsg$802154_raw(r9, &(0x7f0000001d40)={&(0x7f0000001c40)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000001d00)={&(0x7f0000001c80)="78e37f9cbe3c0523b101d8becd6327485a4e22f7652abadf8636caacf0d4723dfde1504b85995733adfa090f25a1c4268677a652fa717ea17288493b5fcce15750f8decf34f24f57ee6a0ed5fff22969f40ba5b5e02077538030ddc433ba5039fe4c7b7ee904eef894fd", 0x6a}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000025) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000001e80)=0x9) syz_extract_tcp_res(&(0x7f0000001ec0), 0x4, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000001f00)=@rnullb, r7, &(0x7f0000001f40)) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000001fc0)={0xe, {0x7, 0x17, 0x1, 0xbd, "a1dde90bcbceeb7d277f1ad21da047563c0fd8ff80b1b73b4653d5d58f90018370a180bc649be2711f71eb4ea9d1c850c18313dffb776c8c35b81569a3c80e085e50e15e7ed4b5618f201ab376636c0112da178a2145400adc9a3f140b2e1762991bb20ace8cb0b7d8ed691a807800d8ed03858f6e46f8ea796ae06908e0af48d66bd58d830ce853951e16af1c2666f63c46f72b0077ceeb588b726a2ca349a4d8f7491cd885512752ffae5328ab5b43494c20f44b2221a3d99de63082"}}, 0xc9) 3.327605385s ago: executing program 4 (id=118): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0x52f, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.315546826s ago: executing program 4 (id=119): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.416299906s ago: executing program 4 (id=133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x23, &(0x7f00000004c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, r3, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@debug}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@minixdf}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000a00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) r6 = syz_io_uring_setup(0x232, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x0, 0x30}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd=r5, 0x4, 0x0}) io_uring_enter(r6, 0x207a98, 0x0, 0x0, 0x0, 0x0) 2.246360531s ago: executing program 4 (id=138): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000280)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ptrace(0x4206, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000280)=ANY=[], 0x48) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 2.229865362s ago: executing program 1 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f04, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xe, 0xc340) (fail_nth: 8) 2.198595725s ago: executing program 0 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) lremovexattr(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) statfs(0x0, &(0x7f0000000440)=""/137) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000380), 0x2, 0x4}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd8e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 2.197512565s ago: executing program 2 (id=141): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000000000000000000070000009f153f5bfefc6875705b235f321c0fc7624e27c2e3c3486c21cc00f4af5c7295cbda5e6ab981c8e0f99e5b70c0b5e7bdbd056bc55a191ad80a69030a38e62b6f908289828219fd2287edc0e274bb7a6c770ab170b90000000016365325080a68c79b0c41944fa1f8beba245e2455a96ae5957c236a261544f06d5477"], 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x5, 0xa159, 0x1004, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa0, 0x4d91, 0x80000001, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x3, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000004, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cd, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x62, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x8, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0x4, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000008, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1.832760538s ago: executing program 3 (id=142): r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@sysvgroups}, {@usrjquota}]}, 0x1, 0x7c8, &(0x7f00000004c0)="$eJzs3d9rW9cdAPDvleWfyRIPBkv2ErOHLRAiJ5mXbDCYxx7GYIHA9rzEyIrxLFvBkkNsDFsYg8EYtKEPhfalz/2RvvW1tM/9G/pSSklIWyc0pdCicvXDli3ZlhP/avz5wLXP0T3SOd97ru49V/cgBXBkjaR/MhGnI+KlJOJk4/EkInprqWzEeL3c05XlfLokUa3+9YukVubJynI+Wp6TOtbInIqID/4TcS7TXm95cWlmoljsbeZHK7O3RsuLS+enZyemClOFucsXx8YuXfn1lcu7F+tXHy0df/jyn375zvg3//7p/f9/mMR4HG+sa41jt4zESGOb9KabcJ0/7nZlByzZZn12n9rBzqRvzZ5G/5yOk9GjpwDghZee/6sAwBGTOP8DwBHT/Bzgycpyvrm0fj4weCCfSuyfR3+IiIF6/M37m/U12cY9u4HafdChJ0lkY/V25bb3u7o1EhGvv/f3t9Il9ug+JEAn/7obETeGR9qP/0nbnIWdutBFmZENecc/2D/vp+Of33Qa/2VWxz+xOv5JDwv1+SH9Hd67z2Ikoq813/7+zzzo+MTf70LljfHf7+pz29JAW8Z/q5PWhnsauR+lmTMRMV0spMe2ExFxNnr7b04XCxe3qOPs4+8eb7audfz35b1/vJnWn/5fK5F5kO1f/5zJicrE88Tc6tHdiJ9l1+b2PW07/g/Uxrqr/R/NtRHXWl/o4YYXPrOW/PNv//vaZvWn8afxNpf2+PdW9Y2IX0Tn+JuSLecnjqbdf6H+t3Md737y6tBm9bf2f7qk9TevBTbR9+zRtkv7f2jr+IeTtfmahfnybtbeTfyd9/++5G+1dHNj3JmoVOYvRvQlf2l//NLac5v5ZvnqP5uRbow/s+X+n14J3ugyxuzDz9+O+PmJZ4t/1W5dcq6T9v/kjvp/54n7T2d6Nqu/u/4fq6XONh7p5vjXbQOfZ9sBAAAAAAAAAAAAAAAAAAAAAAAAQLcyEXE8kkxuNZ3J5HL13/D+SQxliqVy5dzN0sLcZNR+K3s4ejPNr7o8Wc8nze8/HW7JX9qQ/1VE/DgiXukfrOVz+VJx8qCDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICGY5v8/n/qs/6Dbh0AsGcGti3xuLAuW61Wq3vYHgBg721//gcAXjRbnP8H97MdAMD+cf0PAEeP8z8AHD3O/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxa1evpkv165XlfJqfvL24MFO6fX6yUJ7JzS7kc/nS/K3cVKk0VSzk8qXZ7V6vWCrdGou5hTujlUK5MlpeXLo+W1qYq1yfnp2YKlwv9O5LVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwM+XFpZmJYrEw/0Ik/hcRh6AZe5FI4lA0Y7cS2cb+11XhT89/fGqrMve22Y3HO64aPKw7/7eHohkHfGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IH4PgAA///nOSJ8") creat(&(0x7f0000000000)='./file0\x00', 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x8) r3 = openat(r2, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x1e10, &(0x7f0000000140)={0x0, 0x296a, 0x13090}, &(0x7f00000000c0), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) openat(r3, 0x0, 0x20200, 0x53) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = dup(r5) ioctl$GIO_UNISCRNMAP(r7, 0x43403d0e, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1.821823678s ago: executing program 0 (id=143): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x1d, 0x6}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 1.760411584s ago: executing program 1 (id=144): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.641662915s ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 1.58133295s ago: executing program 1 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x2000080, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x1, 0x1237, &(0x7f00000006c0)="$eJzs3E1rXFUYAOB3kon5qPlQ61cXeqgbV5cmC1eCBklBMgupRmgFcWonOOQ6E3KHQERtXbkV/Bfi0p0g/gE3/gWX3bjsQrjivZNk0qStlTJj6fNs7ptz3jfnXA4MnMs99/ab332+s11k2+1BTDUaMbUbke6kSDEVh17ZrK9Xr22ut1obV1K6vP7B6hsppaVXf/noyx8v/jo49+FPSz/Pxm8rH9/+cy0ibv2T/1m3SN0i9fqD1E7X+/1B+3remY5usZOl9F7eaRed1O0Vnb3R/rSd93d3D1K7d2NxYXevUxSp3TtIO52DNOin5nBKvZRlWVpcCO5p5lTLJ3c3bv1wpyzLiLKciaeiLMtyPhbiXDwdi7FULeIz8Ww8F+fj+XghXoyX4uUqa4x3AQAAAAAAAAAAAAAAAAAAAE+A+53/X44V5/8BAAAAAAAAAAAAAAAAAABgDN6/em1zvdXauJLSXET+7f7W/lZ9rfvXt6MbeXTiUizHX1Gd/q/V8eV3WxuXUmUlvslvDutv7m9Nn6xfrT4nMKxvVn2H9at1fTpZPxsLo/VrsRznzx5/7Yz6me8jXn9tpD6L5fj90+hHHjeqsY/rv15N6Z1b9ZziaPwLVd6xRjRG/2yOZ30AAADgUcjSkaP9+9sj+/csO91f74/r+od4PnDX/r4ZF+yhJ644+GKnneedvZPB3KmWBwWNiPjXyfcKGsNHLGfmxFzEf/7PYw2mHrZqerga908+/O7m5G/wcQvm/x/TeKyCif0kMUbHi36y/Y+LR+H8+GcFAAAAAAAAAADAgzyydwajcdb7v82o3yybHR3zrfgqm9wdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpAAAAP//d+24Qg==") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 1.540550803s ago: executing program 3 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000000e00)="$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") r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008800) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000340)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={0x0}}, 0x20) 1.424822424s ago: executing program 2 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x8, 0x6, 0x40, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80f2, 0x4, 0x100}}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@delchain={0x34, 0x65, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {0x7, 0x11}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r5 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e23, 0xffff, @mcast1, 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}) io_uring_enter(r5, 0x749d, 0x4, 0x0, 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000200), &(0x7f0000000340)=0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) r10 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r10}, &(0x7f0000000080)={0x8, 0x6, 0x9, 0x5, 0x7, 0x4}) 1.334025742s ago: executing program 1 (id=149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x62, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private1, @in6=@remote, 0x4e24, 0x1a, 0x4e23, 0x7, 0x2, 0x0, 0x80, 0x32, r3, 0xee01}, {0x6, 0x4, 0x5, 0x5, 0x8, 0x5, 0xf}, {0x3ff, 0x3, 0x5}, 0xfffff001, 0x6e6bb9, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x32}, 0xa, @in=@private=0xa0100fe, 0x3507, 0x4, 0x0, 0x10, 0x9, 0x6, 0x7}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0x52f, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.295875855s ago: executing program 2 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 1.136836689s ago: executing program 0 (id=151): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xd, @empty, 0x8}, {0xa, 0x4e24, 0xce, @empty, 0x4}, 0xffffffffffffffff, 0xfffffffb}}, 0x48) r3 = socket(0x1e, 0x4, 0x0) listen(r1, 0x4) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000500)=0x8, 0x4) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000180)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) mount(&(0x7f00000003c0)=@sg0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='hpfs\x00', 0x1000, &(0x7f0000000480)='#! ') getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000380)=0x4) mincore(&(0x7f0000002000/0x2000)=nil, 0x2000, &(0x7f0000000580)=""/30) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x7, "22803a", "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"}}, 0x110) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000004c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000540)='ext2\x00', 0x6e95e5e5f8f1e4d9) 1.109125002s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 971.196754ms ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000002004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x0) 819.133057ms ago: executing program 3 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) (fail_nth: 4) 812.244268ms ago: executing program 2 (id=155): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8000081"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001980)=ANY=[@ANYRES16=r2, @ANYRES16=r5, @ANYRES16=r3, @ANYRES16=r6, @ANYBLOB="08002b000800000005002f00"], 0x4c}, 0x1, 0x0, 0x0, 0x4841}, 0x40808) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r6, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0x2000000001040023) setsockopt$MRT_ADD_MFC(r10, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) bpf$MAP_CREATE(0x0, 0x0, 0x50) 587.749547ms ago: executing program 1 (id=156): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 515.042634ms ago: executing program 3 (id=157): r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@sysvgroups}, {@usrjquota}]}, 0x1, 0x7c8, &(0x7f00000004c0)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x8) r3 = openat(r2, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x1e10, &(0x7f0000000140)={0x0, 0x296a, 0x13090}, &(0x7f00000000c0), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) openat(r3, &(0x7f0000000000)='./file0\x00', 0x20200, 0x53) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = dup(r5) ioctl$GIO_UNISCRNMAP(r7, 0x43403d0e, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 283.340955ms ago: executing program 0 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrlimit(0x9, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40008003}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x8b, &(0x7f0000000080)=""/139}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0x52f, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x140, 0x178, 0xc, 0x140, 0x178, 0x140, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0xff000000, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0xce4, 0x9004, 0x8, 0x0, 0x5, 0xc0de}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85320, &(0x7f0000000900)={{0x80}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @mcast1, 0x7}}}, 0x80, 0x0}, 0x2000f765) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd63"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 272.153095ms ago: executing program 3 (id=159): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x400, 0x80, 0x5, 0x5}, {0x10, 0xa, 0x7, 0x1000000}, {0x2, 0x6, 0x7, 0x4fda9aff}, {0x1, 0x4, 0x0, 0x3}, {0x5, 0xdd, 0x6, 0x5}, {0x2, 0x5, 0x1, 0x1000}, {0x206, 0xf9, 0xad, 0x10000}]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7", 0x3e}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0", 0x9c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bd", 0x1e}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a", 0x77}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf8", 0x30}], 0x3}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 52.938515ms ago: executing program 2 (id=160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x2000080, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x1, 0x1237, &(0x7f00000006c0)="$eJzs3E1rXFUYAOB3kon5qPlQ61cXeqgbV5cmC1eCBklBMgupRmgFcWonOOQ6E3KHQERtXbkV/Bfi0p0g/gE3/gWX3bjsQrjivZNk0qStlTJj6fNs7ptz3jfnXA4MnMs99/ab332+s11k2+1BTDUaMbUbke6kSDEVh17ZrK9Xr22ut1obV1K6vP7B6hsppaVXf/noyx8v/jo49+FPSz/Pxm8rH9/+cy0ibv2T/1m3SN0i9fqD1E7X+/1B+3remY5usZOl9F7eaRed1O0Vnb3R/rSd93d3D1K7d2NxYXevUxSp3TtIO52DNOin5nBKvZRlWVpcCO5p5lTLJ3c3bv1wpyzLiLKciaeiLMtyPhbiXDwdi7FULeIz8Ww8F+fj+XghXoyX4uUqa4x3AQAAAAAAAAAAAAAAAAAAAE+A+53/X44V5/8BAAAAAAAAAAAAAAAAAABgDN6/em1zvdXauJLSXET+7f7W/lZ9rfvXt6MbeXTiUizHX1Gd/q/V8eV3WxuXUmUlvslvDutv7m9Nn6xfrT4nMKxvVn2H9at1fTpZPxsLo/VrsRznzx5/7Yz6me8jXn9tpD6L5fj90+hHHjeqsY/rv15N6Z1b9ZziaPwLVd6xRjRG/2yOZ30AAADgUcjSkaP9+9sj+/csO91f74/r+od4PnDX/r4ZF+yhJ644+GKnneedvZPB3KmWBwWNiPjXyfcKGsNHLGfmxFzEf/7PYw2mHrZqerga908+/O7m5G/wcQvm/x/TeKyCif0kMUbHi36y/Y+LR+H8+GcFAAAAAAAAAADAgzyydwajcdb7v82o3yybHR3zrfgqm9wdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpAAAAP//d+24Qg==") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 52.444165ms ago: executing program 0 (id=161): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x26, 0xff, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) (async) read(r4, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068e000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x6e) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) close(r5) (async) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x24044800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x200c1}) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000000420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095000000000000001eadaa0fba2c476e568c6c98f3ff860347f2e7e1b0e2b4776e902eaf79a77a6753e1b45b93f1d9e23a24c569d1991d745a73d6e2f793e1f2ce5002db790348467b2ad7aecd146b963d440a7355df69caa8a8b1dfb3a8362c966ef2b7091d1f8718467ed67b64dab1dc871a99a2754bc0df5668e6f36395d9ba8695a152aa73d517cc46583b25939b2036b608e7fb1adb9ce09fdba9662e513747b11df6416409da8ae180faf34e78d68d230601b22207d9dcfb0ab3496f074aa3c6f601c2c0e4dff3b81e6c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.323847ms ago: executing program 3 (id=162): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) write$selinux_validatetrans(r5, 0x0, 0x79) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r6, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x10) 0s ago: executing program 0 (id=163): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r7, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) kernel console output (not intermixed with test programs): [ 18.793883][ T29] audit: type=1400 audit(1767518202.569:62): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.815843][ T29] audit: type=1400 audit(1767518202.569:63): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.838407][ T29] audit: type=1400 audit(1767518202.569:64): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.861482][ T29] audit: type=1400 audit(1767518202.569:65): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.884423][ T29] audit: type=1400 audit(1767518202.569:66): avc: denied { read open } for pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 22.484357][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 22.484371][ T29] audit: type=1400 audit(1767518206.259:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.513315][ T29] audit: type=1400 audit(1767518206.289:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.514072][ T3299] cgroup: Unknown subsys name 'net' [ 22.540971][ T29] audit: type=1400 audit(1767518206.319:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.653744][ T3299] cgroup: Unknown subsys name 'cpuset' [ 22.659903][ T3299] cgroup: Unknown subsys name 'rlimit' [ 22.749716][ T29] audit: type=1400 audit(1767518206.519:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.773112][ T29] audit: type=1400 audit(1767518206.519:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.793795][ T29] audit: type=1400 audit(1767518206.519:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.814219][ T29] audit: type=1400 audit(1767518206.519:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.834587][ T29] audit: type=1400 audit(1767518206.529:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.840086][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.859391][ T29] audit: type=1400 audit(1767518206.529:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.891336][ T29] audit: type=1400 audit(1767518206.549:79): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.927760][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.173763][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 24.200819][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 24.220446][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.264143][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 24.274774][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.338982][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.346497][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.353816][ T3315] bridge_slave_0: entered allmulticast mode [ 24.360369][ T3315] bridge_slave_0: entered promiscuous mode [ 24.373948][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.381026][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.388246][ T3313] bridge_slave_0: entered allmulticast mode [ 24.394820][ T3313] bridge_slave_0: entered promiscuous mode [ 24.405746][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.412871][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.420094][ T3315] bridge_slave_1: entered allmulticast mode [ 24.427037][ T3315] bridge_slave_1: entered promiscuous mode [ 24.439878][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.447015][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.454160][ T3313] bridge_slave_1: entered allmulticast mode [ 24.460625][ T3313] bridge_slave_1: entered promiscuous mode [ 24.478883][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.486670][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.493943][ T3325] bridge_slave_0: entered allmulticast mode [ 24.500272][ T3325] bridge_slave_0: entered promiscuous mode [ 24.525422][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.532488][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.539758][ T3325] bridge_slave_1: entered allmulticast mode [ 24.546156][ T3325] bridge_slave_1: entered promiscuous mode [ 24.557242][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.564433][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.571707][ T3312] bridge_slave_0: entered allmulticast mode [ 24.578045][ T3312] bridge_slave_0: entered promiscuous mode [ 24.585830][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.599787][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.607915][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.615045][ T3314] bridge_slave_0: entered allmulticast mode [ 24.621510][ T3314] bridge_slave_0: entered promiscuous mode [ 24.632684][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.641854][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.648951][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.656190][ T3312] bridge_slave_1: entered allmulticast mode [ 24.662529][ T3312] bridge_slave_1: entered promiscuous mode [ 24.669744][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.679609][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.686705][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.693852][ T3314] bridge_slave_1: entered allmulticast mode [ 24.700415][ T3314] bridge_slave_1: entered promiscuous mode [ 24.712041][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.734297][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.762077][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.776709][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.786538][ T3315] team0: Port device team_slave_0 added [ 24.793505][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.807530][ T3313] team0: Port device team_slave_0 added [ 24.814308][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.824091][ T3315] team0: Port device team_slave_1 added [ 24.830557][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.844037][ T3313] team0: Port device team_slave_1 added [ 24.862778][ T3325] team0: Port device team_slave_0 added [ 24.885617][ T3325] team0: Port device team_slave_1 added [ 24.896854][ T3312] team0: Port device team_slave_0 added [ 24.902628][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.909687][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.935819][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.947358][ T3314] team0: Port device team_slave_0 added [ 24.957359][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.964402][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.990327][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.001852][ T3312] team0: Port device team_slave_1 added [ 25.007858][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.014830][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.040792][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.052284][ T3314] team0: Port device team_slave_1 added [ 25.062566][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.069576][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.095776][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.118909][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.125875][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.151904][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.175911][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.182906][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.208813][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.222942][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.229980][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.255865][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.272344][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.279380][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.305329][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.318025][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.324991][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.350956][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.366110][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.373107][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.399060][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.425987][ T3315] hsr_slave_0: entered promiscuous mode [ 25.431947][ T3315] hsr_slave_1: entered promiscuous mode [ 25.455314][ T3313] hsr_slave_0: entered promiscuous mode [ 25.461355][ T3313] hsr_slave_1: entered promiscuous mode [ 25.467184][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 25.472895][ T3313] Cannot create hsr debugfs directory [ 25.487989][ T3325] hsr_slave_0: entered promiscuous mode [ 25.493975][ T3325] hsr_slave_1: entered promiscuous mode [ 25.499852][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 25.505591][ T3325] Cannot create hsr debugfs directory [ 25.541653][ T3314] hsr_slave_0: entered promiscuous mode [ 25.547788][ T3314] hsr_slave_1: entered promiscuous mode [ 25.553715][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 25.559422][ T3314] Cannot create hsr debugfs directory [ 25.571133][ T3312] hsr_slave_0: entered promiscuous mode [ 25.577260][ T3312] hsr_slave_1: entered promiscuous mode [ 25.583243][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 25.589065][ T3312] Cannot create hsr debugfs directory [ 25.766481][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.775733][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.784591][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.795925][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.818617][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.827632][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.836173][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.847685][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.879383][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.889130][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.902646][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.912163][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.938048][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.947983][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.958304][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.967799][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.006891][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.017408][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.026369][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.035977][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.045467][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.066775][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.083058][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.090129][ T814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.112044][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.119230][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.136472][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.174586][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.185893][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.198807][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.205883][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.222375][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.229524][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.247655][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.256682][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.276994][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.284153][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.302728][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.313252][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.341159][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.348371][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.358431][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.375245][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.382311][ T814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.395754][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.403875][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.431329][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.456517][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.465987][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.484129][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.491671][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.508168][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.537636][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.544738][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.593828][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.604350][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.646909][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.656538][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.681268][ T3315] veth0_vlan: entered promiscuous mode [ 26.697124][ T3315] veth1_vlan: entered promiscuous mode [ 26.738261][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.753913][ T3315] veth0_macvtap: entered promiscuous mode [ 26.784039][ T3315] veth1_macvtap: entered promiscuous mode [ 26.823826][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.837440][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.860854][ T1746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.870742][ T1746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.888930][ T1746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.899347][ T3312] veth0_vlan: entered promiscuous mode [ 26.905876][ T1746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.917910][ T3313] veth0_vlan: entered promiscuous mode [ 26.930575][ T3325] veth0_vlan: entered promiscuous mode [ 26.937676][ T3314] veth0_vlan: entered promiscuous mode [ 26.944996][ T3312] veth1_vlan: entered promiscuous mode [ 26.957277][ T3313] veth1_vlan: entered promiscuous mode [ 26.966701][ T3314] veth1_vlan: entered promiscuous mode [ 26.976169][ T3325] veth1_vlan: entered promiscuous mode [ 26.994310][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.995820][ T3314] veth0_macvtap: entered promiscuous mode [ 27.018284][ T3314] veth1_macvtap: entered promiscuous mode [ 27.039526][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.057767][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.061841][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 27.078846][ T3312] veth0_macvtap: entered promiscuous mode [ 27.085322][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.097196][ T3313] veth0_macvtap: entered promiscuous mode [ 27.107186][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.124593][ T3312] veth1_macvtap: entered promiscuous mode [ 27.131829][ T3325] veth0_macvtap: entered promiscuous mode [ 27.140133][ T814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.150424][ T3313] veth1_macvtap: entered promiscuous mode [ 27.161585][ T3325] veth1_macvtap: entered promiscuous mode [ 27.181704][ T814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.223632][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.240955][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.290674][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.308667][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.329366][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.340123][ T3494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.341381][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.351294][ T3494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.368431][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.415944][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.442705][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.479712][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.495589][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 27.495604][ T29] audit: type=1400 audit(1767518211.269:122): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.526045][ T29] audit: type=1400 audit(1767518211.269:123): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.574881][ T3511] loop0: detected capacity change from 0 to 128 [ 27.586074][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.603780][ T3511] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 27.623822][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.632542][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.667440][ T3511] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 27.674264][ T3514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 27.675629][ T3511] FAT-fs (loop0): Filesystem has been set read-only [ 27.694948][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.707581][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.717019][ T3511] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 27.723732][ T3518] hub 9-0:1.0: USB hub found [ 27.725504][ T29] audit: type=1400 audit(1767518211.329:124): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.741298][ T3518] hub 9-0:1.0: 8 ports detected [ 27.754721][ T29] audit: type=1400 audit(1767518211.369:125): avc: denied { write } for pid=3508 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 27.778118][ T29] audit: type=1400 audit(1767518211.419:126): avc: denied { mount } for pid=3509 comm="syz.0.1" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.785509][ T3520] mmap: syz.1.8 (3520) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.799818][ T29] audit: type=1400 audit(1767518211.489:127): avc: denied { write } for pid=3517 comm="syz.3.7" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.835929][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.871015][ T29] audit: type=1400 audit(1767518211.639:128): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.883280][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.883543][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.887523][ T3525] loop0: detected capacity change from 0 to 2048 [ 27.947431][ T3525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.947579][ T29] audit: type=1400 audit(1767518211.719:129): avc: denied { mount } for pid=3524 comm="syz.0.10" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.949457][ T3525] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.10: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 27.949541][ T29] audit: type=1400 audit(1767518211.719:130): avc: denied { add_name } for pid=3524 comm="syz.0.10" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.949628][ T29] audit: type=1400 audit(1767518211.719:131): avc: denied { create } for pid=3524 comm="syz.0.10" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.950841][ T3525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.951393][ T3525] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.10: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 27.954172][ T3525] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.10: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 27.964267][ T3004] udevd[3004]: worker [3306] terminated by signal 33 (Unknown signal 33) [ 27.964312][ T3004] udevd[3004]: worker [3306] failed while handling '/devices/virtual/block/loop0' [ 27.969427][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.011664][ T3527] loop2: detected capacity change from 0 to 8192 [ 28.012652][ T3527] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.021520][ T3527] netlink: 15 bytes leftover after parsing attributes in process `syz.2.11'. [ 28.051715][ C0] hrtimer: interrupt took 27648 ns [ 28.077934][ T3542] loop0: detected capacity change from 0 to 256 [ 28.123428][ T3523] loop4: detected capacity change from 0 to 128 [ 28.162873][ T3542] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 28.309954][ T3542] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.468273][ T3549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'. [ 28.511940][ T3554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'. [ 28.599419][ T3560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.619700][ T3560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.722527][ T3566] IPv6: NLM_F_CREATE should be specified when creating new route [ 28.804711][ T3572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26'. [ 28.875984][ T3578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.884673][ T3578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.891579][ T3576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3576 comm=syz.2.28 [ 28.979990][ T3584] loop2: detected capacity change from 0 to 2048 [ 29.014409][ T3528] loop2: p1 < > p4 [ 29.022478][ T3528] loop2: p4 size 8388608 extends beyond EOD, truncated [ 29.031819][ T3584] loop2: p1 < > p4 [ 29.036336][ T3584] loop2: p4 size 8388608 extends beyond EOD, truncated [ 29.068551][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 29.078146][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 29.130415][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 29.130586][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 29.366478][ T3598] loop1: detected capacity change from 0 to 128 [ 29.592280][ T3606] loop0: detected capacity change from 0 to 128 [ 30.231297][ T3615] loop2: detected capacity change from 0 to 128 [ 30.352181][ T3620] loop4: detected capacity change from 0 to 128 [ 30.834003][ T3630] loop0: p1 < > p4 [ 30.838345][ T3630] loop0: p4 size 8388608 extends beyond EOD, truncated [ 30.876564][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 30.885810][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 30.930570][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 30.944607][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 31.083845][ T3636] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 31.084010][ T3636] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.127828][ T3636] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.50: Failed to acquire dquot type 1 [ 31.127951][ T3636] EXT4-fs (loop0): Remounting filesystem read-only [ 31.127984][ T3636] EXT4-fs (loop0): 1 truncate cleaned up [ 31.128283][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.225937][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.304545][ T3654] FAULT_INJECTION: forcing a failure. [ 31.304545][ T3654] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.317650][ T3654] CPU: 1 UID: 0 PID: 3654 Comm: syz.4.56 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.317678][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.317692][ T3654] Call Trace: [ 31.317701][ T3654] [ 31.317708][ T3654] __dump_stack+0x1d/0x30 [ 31.317730][ T3654] dump_stack_lvl+0x95/0xd0 [ 31.317749][ T3654] dump_stack+0x15/0x1b [ 31.317767][ T3654] should_fail_ex+0x265/0x280 [ 31.317790][ T3654] should_fail+0xb/0x20 [ 31.317810][ T3654] should_fail_usercopy+0x1a/0x20 [ 31.317833][ T3654] strncpy_from_user+0x27/0x260 [ 31.318058][ T3654] strncpy_from_user_nofault+0x68/0xf0 [ 31.318083][ T3654] bpf_probe_read_compat_str+0xb4/0x130 [ 31.318106][ T3654] bpf_prog_59ea531272c1e515+0x3e/0x44 [ 31.318124][ T3654] bpf_trace_run3+0x10f/0x1e0 [ 31.318168][ T3654] ? xas_load+0x413/0x430 [ 31.318192][ T3654] ? __kfree_skb+0x109/0x150 [ 31.318215][ T3654] ? __rcu_read_unlock+0x4f/0x70 [ 31.318233][ T3654] ? __kfree_skb+0x109/0x150 [ 31.318258][ T3654] kmem_cache_free+0x327/0x3a0 [ 31.318355][ T3654] __kfree_skb+0x109/0x150 [ 31.318374][ T3654] ? nlmon_xmit+0x4f/0x60 [ 31.318391][ T3654] consume_skb+0x49/0x150 [ 31.318463][ T3654] nlmon_xmit+0x4f/0x60 [ 31.318504][ T3654] dev_hard_start_xmit+0x125/0x3e0 [ 31.318530][ T3654] __dev_queue_xmit+0xdc9/0x1ee0 [ 31.318554][ T3654] ? __dev_queue_xmit+0x148/0x1ee0 [ 31.318628][ T3654] ? __skb_clone+0x2a6/0x2d0 [ 31.318653][ T3654] __netlink_deliver_tap+0x3c3/0x500 [ 31.318680][ T3654] netlink_unicast+0x66b/0x690 [ 31.318706][ T3654] netlink_sendmsg+0x58b/0x6b0 [ 31.318732][ T3654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.318766][ T3654] __sock_sendmsg+0x145/0x180 [ 31.318860][ T3654] ____sys_sendmsg+0x31e/0x4a0 [ 31.318883][ T3654] ___sys_sendmsg+0x17b/0x1d0 [ 31.318919][ T3654] __x64_sys_sendmsg+0xd4/0x160 [ 31.319012][ T3654] x64_sys_call+0x17ba/0x3000 [ 31.319031][ T3654] do_syscall_64+0xca/0x2b0 [ 31.319165][ T3654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.319182][ T3654] RIP: 0033:0x7f205afaf749 [ 31.319234][ T3654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.319248][ T3654] RSP: 002b:00007f2059a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.319264][ T3654] RAX: ffffffffffffffda RBX: 00007f205b205fa0 RCX: 00007f205afaf749 [ 31.319304][ T3654] RDX: 0000000000000840 RSI: 0000200000000180 RDI: 0000000000000003 [ 31.319314][ T3654] RBP: 00007f2059a17090 R08: 0000000000000000 R09: 0000000000000000 [ 31.319324][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.319334][ T3654] R13: 00007f205b206038 R14: 00007f205b205fa0 R15: 00007ffdf1c87458 [ 31.319384][ T3654] [ 31.339953][ T3650] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.636734][ T3657] 0ªX¹¦À: renamed from caif0 [ 31.650015][ T3657] 0ªX¹¦À: entered allmulticast mode [ 31.655651][ T3660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 31.658764][ T3660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 31.663950][ T3657] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 31.689777][ T3660] Symlink component flag not implemented [ 31.695607][ T3660] Symlink component flag not implemented [ 31.701707][ T3660] Symlink component flag not implemented (7) [ 31.707766][ T3660] Symlink component flag not implemented (116) [ 31.723142][ T3660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3660 comm=syz.1.58 [ 31.761702][ T3663] ======================================================= [ 31.761702][ T3663] WARNING: The mand mount option has been deprecated and [ 31.761702][ T3663] and is ignored by this kernel. Remove the mand [ 31.761702][ T3663] option from the mount to silence this warning. [ 31.761702][ T3663] ======================================================= [ 31.803169][ T3663] msdos: Unknown parameter 'dotsdots' [ 31.823018][ T3668] process 'syz.2.61' launched '/dev/fd/3' with NULL argv: empty string added [ 31.867774][ T3673] FAULT_INJECTION: forcing a failure. [ 31.867774][ T3673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.867851][ T3673] CPU: 1 UID: 0 PID: 3673 Comm: syz.4.64 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.867956][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.867981][ T3673] Call Trace: [ 31.867988][ T3673] [ 31.867996][ T3673] __dump_stack+0x1d/0x30 [ 31.868019][ T3673] dump_stack_lvl+0x95/0xd0 [ 31.868186][ T3673] dump_stack+0x15/0x1b [ 31.868205][ T3673] should_fail_ex+0x265/0x280 [ 31.868227][ T3673] should_fail+0xb/0x20 [ 31.868246][ T3673] should_fail_usercopy+0x1a/0x20 [ 31.868275][ T3673] _copy_from_user+0x1c/0xb0 [ 31.868301][ T3673] __copy_msghdr+0x244/0x300 [ 31.868326][ T3673] ___sys_sendmsg+0x109/0x1d0 [ 31.868414][ T3673] __x64_sys_sendmsg+0xd4/0x160 [ 31.868443][ T3673] x64_sys_call+0x17ba/0x3000 [ 31.868466][ T3673] do_syscall_64+0xca/0x2b0 [ 31.868496][ T3673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.868519][ T3673] RIP: 0033:0x7f205afaf749 [ 31.868544][ T3673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.868561][ T3673] RSP: 002b:00007f2059a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.868580][ T3673] RAX: ffffffffffffffda RBX: 00007f205b205fa0 RCX: 00007f205afaf749 [ 31.868593][ T3673] RDX: 000000000000c800 RSI: 0000200000000200 RDI: 0000000000000003 [ 31.868606][ T3673] RBP: 00007f2059a17090 R08: 0000000000000000 R09: 0000000000000000 [ 31.868618][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.868678][ T3673] R13: 00007f205b206038 R14: 00007f205b205fa0 R15: 00007ffdf1c87458 [ 31.868696][ T3673] [ 32.030199][ T3680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.030323][ T3680] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.202837][ T3691] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.241307][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.242015][ T3691] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.68: Directory hole found for htree leaf block 0 [ 32.263243][ T3691] EXT4-fs (loop4): Remounting filesystem read-only [ 32.377827][ T3696] __nla_validate_parse: 6 callbacks suppressed [ 32.377840][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 32.393874][ T3325] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 32.457040][ T3703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.73'. [ 32.470758][ T3705] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.597954][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 32.597970][ T29] audit: type=1400 audit(1767518216.369:560): avc: denied { nlmsg_read } for pid=3719 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 32.602424][ T29] audit: type=1326 audit(1767518216.369:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.602719][ T29] audit: type=1326 audit(1767518216.369:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.602802][ T29] audit: type=1326 audit(1767518216.369:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.602920][ T29] audit: type=1326 audit(1767518216.369:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.603464][ T29] audit: type=1326 audit(1767518216.379:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.603553][ T29] audit: type=1326 audit(1767518216.379:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.603816][ T29] audit: type=1326 audit(1767518216.379:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.604064][ T29] audit: type=1326 audit(1767518216.379:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.604257][ T29] audit: type=1326 audit(1767518216.379:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f272cd7f749 code=0x7ffc0000 [ 32.708716][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 32.804263][ T3728] set_capacity_and_notify: 11 callbacks suppressed [ 32.804279][ T3728] loop4: detected capacity change from 0 to 128 [ 32.871365][ T3729] loop3: detected capacity change from 0 to 128 [ 32.920590][ T3728] syz.4.82: attempt to access beyond end of device [ 32.920590][ T3728] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 32.947453][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 32.952338][ T3735] hsr_slave_1 (unregistering): left promiscuous mode [ 32.995039][ T3739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'. [ 33.039124][ T3743] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.056743][ T3741] loop0: detected capacity change from 0 to 2048 [ 33.104276][ T3749] FAULT_INJECTION: forcing a failure. [ 33.104276][ T3749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.117425][ T3749] CPU: 0 UID: 0 PID: 3749 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.117455][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.117500][ T3749] Call Trace: [ 33.117504][ T3749] [ 33.117510][ T3749] __dump_stack+0x1d/0x30 [ 33.117602][ T3749] dump_stack_lvl+0x95/0xd0 [ 33.117614][ T3749] dump_stack+0x15/0x1b [ 33.117690][ T3749] should_fail_ex+0x265/0x280 [ 33.117706][ T3749] should_fail+0xb/0x20 [ 33.117717][ T3749] should_fail_usercopy+0x1a/0x20 [ 33.117754][ T3749] _copy_from_user+0x1c/0xb0 [ 33.117914][ T3749] kstrtouint_from_user+0x69/0xf0 [ 33.117968][ T3749] ? 0xffffffff81000000 [ 33.117976][ T3749] ? selinux_file_permission+0x1e2/0x320 [ 33.117994][ T3749] proc_fail_nth_write+0x50/0x160 [ 33.118081][ T3749] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 33.118097][ T3749] vfs_write+0x269/0x960 [ 33.118107][ T3749] ? vfs_read+0x4e6/0x770 [ 33.118116][ T3749] ? __rcu_read_unlock+0x4f/0x70 [ 33.118128][ T3749] ? __fget_files+0x184/0x1c0 [ 33.118269][ T3749] ? mutex_lock+0x58/0x90 [ 33.118285][ T3749] ksys_write+0xda/0x1a0 [ 33.118296][ T3749] __x64_sys_write+0x40/0x50 [ 33.118307][ T3749] x64_sys_call+0x2847/0x3000 [ 33.118321][ T3749] do_syscall_64+0xca/0x2b0 [ 33.118387][ T3749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.118401][ T3749] RIP: 0033:0x7f44e4d8e1ff [ 33.118410][ T3749] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 33.118452][ T3749] RSP: 002b:00007f44e37ef030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 33.118464][ T3749] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44e4d8e1ff [ 33.118507][ T3749] RDX: 0000000000000001 RSI: 00007f44e37ef0a0 RDI: 0000000000000003 [ 33.118514][ T3749] RBP: 00007f44e37ef090 R08: 0000000000000000 R09: 0000000000000000 [ 33.118521][ T3749] R10: fffffffffffffe30 R11: 0000000000000293 R12: 0000000000000001 [ 33.118528][ T3749] R13: 00007f44e4fe6038 R14: 00007f44e4fe5fa0 R15: 00007fffb1e07a38 [ 33.118548][ T3749] [ 33.121080][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 33.260886][ T3752] loop1: detected capacity change from 0 to 128 [ 33.308615][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 33.317981][ T3741] loop0: p1 p2 p3 [ 33.454911][ T3762] loop3: detected capacity change from 0 to 128 [ 33.577864][ T3773] netlink: 56 bytes leftover after parsing attributes in process `syz.2.96'. [ 33.586863][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 33.611670][ T3772] loop0: detected capacity change from 0 to 2048 [ 33.659041][ T3772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.672754][ T3772] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.98: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.690172][ T3772] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.98: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.747509][ T3772] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.98: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.790335][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.889104][ T3791] loop0: detected capacity change from 0 to 1024 [ 33.889537][ T3791] EXT4-fs: inline encryption not supported [ 33.889554][ T3791] EXT4-fs: Ignoring removed orlov option [ 33.890147][ T3791] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.909803][ T3791] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 33.909975][ T3791] System zones: 0-1, 3-12 [ 33.910668][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.912681][ T3791] 9pnet_fd: Insufficient options for proto=fd [ 33.919536][ T3792] loop1: detected capacity change from 0 to 8192 [ 33.924192][ T3792] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.927111][ T3792] netlink: 15 bytes leftover after parsing attributes in process `syz.1.105'. [ 34.115585][ T3799] loop1: detected capacity change from 0 to 128 [ 34.134889][ T3799] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.135063][ T3799] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.142903][ T3799] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.106: No space for directory leaf checksum. Please run e2fsck -D. [ 34.173096][ T3799] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.106: checksumming directory block 0 [ 34.188371][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.690673][ T3814] loop3: detected capacity change from 0 to 512 [ 34.722964][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.736985][ T3814] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.753451][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.832663][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.851275][ T3823] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.113: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 34.869131][ T3832] netlink: 'syz.2.114': attribute type 7 has an invalid length. [ 34.876937][ T3832] netlink: 'syz.2.114': attribute type 8 has an invalid length. [ 34.888059][ T3832] syz_tun: entered promiscuous mode [ 34.894202][ T3823] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.113: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 34.894786][ T3832] erspan0: entered promiscuous mode [ 34.914937][ T3823] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.113: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 34.916963][ T3832] gretap0: entered promiscuous mode [ 34.949904][ T3834] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.950345][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.964996][ T3834] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.004495][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.064066][ T3843] Zero length message leads to an empty skb [ 35.076165][ T3841] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.172829][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.172912][ T3849] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.173849][ T3849] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 35.198010][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.321654][ T3855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.367463][ T3855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.417088][ T3855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.434401][ T3857] vlan2: entered allmulticast mode [ 35.479442][ T3855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.545974][ T2032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.549973][ T2032] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.571159][ T2032] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.571242][ T2032] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.646834][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.765674][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.768499][ T3865] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.126: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 35.822230][ T3865] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.126: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 35.831034][ T3865] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.126: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 35.897422][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.971120][ T3882] Illegal XDP return value 4294967289 on prog (id 113) dev syz_tun, expect packet loss! [ 35.971637][ T3880] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.022196][ T3884] EXT4-fs: Ignoring removed bh option [ 36.041257][ T3882] usb usb8: usbfs: process 3882 (syz.1.132) did not claim interface 0 before use [ 36.064981][ T3884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a856c028, mo2=0002] [ 36.107004][ T3884] System zones: 1-12 [ 36.113919][ T3884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.174466][ T3882] syz.1.132 (3882) used greatest stack depth: 10408 bytes left [ 36.188253][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.223105][ T3900] FAULT_INJECTION: forcing a failure. [ 36.223105][ T3900] name failslab, interval 1, probability 0, space 0, times 0 [ 36.236028][ T3900] CPU: 0 UID: 0 PID: 3900 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.236053][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.236063][ T3900] Call Trace: [ 36.236069][ T3900] [ 36.236138][ T3900] __dump_stack+0x1d/0x30 [ 36.236160][ T3900] dump_stack_lvl+0x95/0xd0 [ 36.236180][ T3900] dump_stack+0x15/0x1b [ 36.236199][ T3900] should_fail_ex+0x265/0x280 [ 36.236228][ T3900] should_failslab+0x8c/0xb0 [ 36.236248][ T3900] __kmalloc_noprof+0xb9/0x5a0 [ 36.236270][ T3900] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 36.236369][ T3900] usb_hcd_submit_urb+0x5d3/0x1200 [ 36.236401][ T3900] ? kvm_sched_clock_read+0x11/0x20 [ 36.236458][ T3900] usb_submit_urb+0xaa3/0xbb0 [ 36.236487][ T3900] usb_start_wait_urb+0x8c/0x190 [ 36.236522][ T3900] usb_control_msg+0x18f/0x250 [ 36.236548][ T3900] hub_ext_port_status+0xc0/0x480 [ 36.236659][ T3900] hub_activate+0x5be/0x10c0 [ 36.236679][ T3900] hub_resume+0x47/0x1e0 [ 36.236705][ T3900] usb_resume_both+0x329/0x640 [ 36.236726][ T3900] ? __pfx_usb_runtime_resume+0x10/0x10 [ 36.236783][ T3900] usb_runtime_resume+0x21/0x30 [ 36.236802][ T3900] __rpm_callback+0x2ab/0x6e0 [ 36.236830][ T3900] ? __update_runtime_status+0xe8/0x1c0 [ 36.236860][ T3900] ? __pfx_usb_runtime_resume+0x10/0x10 [ 36.236930][ T3900] rpm_resume+0x904/0xd20 [ 36.236955][ T3900] ? klist_dec_and_del+0xba/0x270 [ 36.237036][ T3900] __pm_runtime_resume+0xd6/0x100 [ 36.237056][ T3900] usb_autoresume_device+0x23/0xc0 [ 36.237076][ T3900] usbdev_open+0x121/0x450 [ 36.237098][ T3900] chrdev_open+0x2eb/0x3a0 [ 36.237198][ T3900] ? __pfx_chrdev_open+0x10/0x10 [ 36.237231][ T3900] do_dentry_open+0x54b/0xa60 [ 36.237258][ T3900] vfs_open+0x37/0x1e0 [ 36.237355][ T3900] path_openat+0x1ddd/0x23b0 [ 36.237383][ T3900] ? filemap_map_pages+0xc0e/0xe50 [ 36.237410][ T3900] do_filp_open+0x109/0x230 [ 36.237445][ T3900] do_sys_openat2+0xa6/0x150 [ 36.237505][ T3900] __x64_sys_openat+0xf2/0x120 [ 36.237531][ T3900] x64_sys_call+0x2b07/0x3000 [ 36.237623][ T3900] do_syscall_64+0xca/0x2b0 [ 36.237650][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.237669][ T3900] RIP: 0033:0x7f44e4d8df90 [ 36.237747][ T3900] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 36.237762][ T3900] RSP: 002b:00007f44e37eeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 36.237779][ T3900] RAX: ffffffffffffffda RBX: 000000000000c300 RCX: 00007f44e4d8df90 [ 36.237793][ T3900] RDX: 000000000000c300 RSI: 00007f44e37eec10 RDI: 00000000ffffff9c [ 36.237804][ T3900] RBP: 00007f44e37eec10 R08: 0000000000000000 R09: 0000000000000000 [ 36.237882][ T3900] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 36.237893][ T3900] R13: 00007f44e4fe6038 R14: 00007f44e4fe5fa0 R15: 00007fffb1e07a38 [ 36.237908][ T3900] [ 36.533381][ T3900] hub 4-0:1.0: hub_ext_port_status failed (err = -12) [ 36.615720][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.620238][ T3909] syz.2.141: attempt to access beyond end of device [ 36.620238][ T3909] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 36.656625][ T3907] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.142: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 36.692845][ T3907] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.142: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 36.714559][ T3907] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.142: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 36.744741][ T3909] syz.2.141: attempt to access beyond end of device [ 36.744741][ T3909] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 36.759141][ T3909] syz.2.141: attempt to access beyond end of device [ 36.759141][ T3909] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 36.775569][ T3909] syz.2.141: attempt to access beyond end of device [ 36.775569][ T3909] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 36.874144][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.939271][ T3923] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 36.956396][ T3921] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.001988][ T3923] EXT4-fs (loop3): 1 truncate cleaned up [ 37.008371][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.053564][ T3923] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.147: Logical block already allocated [ 37.129389][ T3923] EXT4-fs (loop3): Remounting filesystem read-only [ 37.218322][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.225923][ T3935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.250936][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.258430][ T3935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.555066][ T3923] Set syz1 is full, maxelem 65536 reached [ 37.629883][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 37.629900][ T29] audit: type=1400 audit(1767518221.389:1279): avc: denied { write } for pid=3949 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 37.673421][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.706702][ T29] audit: type=1326 audit(1767518221.459:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e4d8f749 code=0x7ffc0000 [ 37.714601][ T3953] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 37.730056][ T29] audit: type=1326 audit(1767518221.459:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e4d8f749 code=0x7ffc0000 [ 37.737672][ T3953] audit: out of memory in audit_log_start [ 37.853104][ T29] audit: type=1400 audit(1767518221.489:1282): avc: denied { create } for pid=3952 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 37.933530][ T3959] set_capacity_and_notify: 11 callbacks suppressed [ 37.933547][ T3959] loop3: detected capacity change from 0 to 2048 [ 37.936048][ T3950] loop2: detected capacity change from 0 to 2048 [ 37.959602][ T29] audit: type=1400 audit(1767518221.729:1283): avc: denied { mounton } for pid=3949 comm="syz.2.155" path="/29/bus" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.984932][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.026556][ T3959] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.157: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.060080][ T3959] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.157: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.082517][ T3959] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.157: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.082655][ T3950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.132740][ T3950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.161711][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.317005][ T29] audit: type=1400 audit(1767518222.079:1284): avc: denied { name_bind } for pid=3966 comm="syz.3.159" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.338684][ T29] audit: type=1400 audit(1767518222.079:1285): avc: denied { node_bind } for pid=3966 comm="syz.3.159" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.452078][ T3970] loop2: detected capacity change from 0 to 8192 [ 38.489169][ T3970] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.588285][ T827] ================================================================== [ 38.596439][ T827] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 38.604964][ T827] [ 38.607298][ T827] write to 0xffff88811c11f108 of 44 bytes by task 3979 on cpu 1: [ 38.615010][ T827] tty_set_termios+0xc0/0x8c0 [ 38.619704][ T827] set_termios+0x490/0x4d0 [ 38.624130][ T827] tty_mode_ioctl+0x379/0x5c0 [ 38.628806][ T827] n_tty_ioctl_helper+0x91/0x210 [ 38.633751][ T827] n_tty_ioctl+0x101/0x230 [ 38.638156][ T827] tty_ioctl+0x83f/0xb80 [ 38.642409][ T827] __se_sys_ioctl+0xce/0x140 [ 38.646989][ T827] __x64_sys_ioctl+0x43/0x50 [ 38.651579][ T827] x64_sys_call+0x14b0/0x3000 [ 38.656269][ T827] do_syscall_64+0xca/0x2b0 [ 38.660771][ T827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.666741][ T827] [ 38.669075][ T827] read to 0xffff88811c11f121 of 1 bytes by task 827 on cpu 0: [ 38.676615][ T827] n_tty_receive_char_flow_ctrl+0x23/0x1d0 [ 38.682433][ T827] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 38.687983][ T827] tty_port_default_lookahead_buf+0x91/0xc0 [ 38.693981][ T827] flush_to_ldisc+0x288/0x340 [ 38.698652][ T827] process_scheduled_works+0x4ce/0x9d0 [ 38.704121][ T827] worker_thread+0x582/0x770 [ 38.708796][ T827] kthread+0x489/0x510 [ 38.712858][ T827] ret_from_fork+0x149/0x290 [ 38.717448][ T827] ret_from_fork_asm+0x1a/0x30 [ 38.722216][ T827] [ 38.724651][ T827] value changed: 0x11 -> 0x92 [ 38.729445][ T827] [ 38.731753][ T827] Reported by Kernel Concurrency Sanitizer on: [ 38.737894][ T827] CPU: 0 UID: 0 PID: 827 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.747691][ T827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.757828][ T827] Workqueue: events_unbound flush_to_ldisc [ 38.763641][ T827] ================================================================== [ 38.849356][ T3984] capability: warning: `syz.2.164' uses deprecated v2 capabilities in a way that may be insecure