last executing test programs: 35.864669877s ago: executing program 4 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800292ce5b6addea8763cb9bdd343000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0xbed}, 0x18) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a183fbff00000000000005000000080003"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x43e, &(0x7f0000000fc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0xfb) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 34.807063453s ago: executing program 4 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="25ecdd9abd54604278ae51bd67a6e6cb56be10b36a924909f2ea010f33a04680b2f1e2028f6afa40127aba1fe36edea1d102c7f89a1688f59eb94771760bd34257bcf0dba1a65c2c7809ca824e4d2f75cc0dad462c2e31795cc23f28949112b1d9ff0dc429164ad7fe88ed09043d5135ea9a62125adb6c6fb69f03d0c6c34146f2575afd4629230c0d52836b59524ae3ccc35555cecb728871dd505d54dbd776e7ff72d7bb488afc93ca661453242534eb91736cc672dac8a2e2c6", @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRESDEC, @ANYRESHEX, @ANYRES64], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/44, 0x2c, 0x74a6) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe81, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1, 0x60000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10000000000000000b000000ff0018000000000000001001000000000000290000000000000000007d6c3a6cf47f39b98d0c5bd4"], 0x28}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000580)={0x40, 0x5e, 0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000100)) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x100}], 0x49, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2b, &(0x7f0000000940)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x80, 0xf0, &(0x7f0000000340)=""/240, 0x41000, 0x19, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x4, 0x201, 0x8, 0xb}, {0x4, 0x3, 0x7}, {0x4, 0x2, 0xc, 0x9}, {0x1, 0x4, 0x8, 0x4}, {0x4, 0x3, 0x9, 0x6}, {0x2, 0x1, 0x10, 0x5}, {0x5, 0x1, 0x8, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kvm_test_age_hva\x00', r5, 0x0, 0x4}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c40)=ANY=[@ANYRESOCT, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 34.660848235s ago: executing program 4 (id=16): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="030000008000000000000000ffff000000000000000000000000000038830000747033ebc017c0ff0000000052b0fed98501fbc704"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000780), 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f00000014c0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) readv(r5, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/226, 0xe2}], 0x1) r8 = eventfd(0xb) io_submit(r4, 0x2, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7f, r0, &(0x7f0000000300)="ee6871789c398bd5f4ea1fc6b6378a1acf723ed7d27ee6e9406e5d23cbaedb11e1f9f3b5fc2fc9b3", 0x28, 0x3, 0x0, 0x0, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000380)="aec3b2b2c15c5790e4c34ff083f350cef82080ab671ebfe6462cbae44971796b12e3341cb1cbd7c9c245c5047efee5695940a0651572c9fb5043a2b83c18b38e8447b8f9e14ee32e9825eddca39ae05bb53bbe45395c1e5a0593a11de946a7efa67cbc78f4f8a155d12b003b9295baee86ed808a9365", 0x76, 0x56, 0x0, 0x1, r8}]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) 34.253809861s ago: executing program 4 (id=19): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x78c, &(0x7f0000002580)="$eJzs3M9rXOUaAOD3nGaaNs29yYXL5d5Nr9BCC6WTpNm0K+NG3BQKBbc1JCch5CRTMpOaxEJTd4JQm42CILp36VYo9Q8QN1JQcKULQbTGhboZmR+ZtulkOm2TThufB07m+875znnfd87kyzmQMwH8bb1U+5FEDEbEhUazLo2Ig/XWoYj1xrjNu1enaksS1erFn5P62M3qUOtYW/seifou8d+IuF2IOPX2w3HLq2vzk3meLTX7I5WFyyPl1bXTcwuTs9lstjg2fm707Pj42dHxXav1+OvnDt/88tWNja8/q9w42nc6iYl63dGsbdcC3afxnhRiYtv6xb0I1kNJF2P6nkEeAAB0VrvOP9C8NivEUBzodJXmAg4AAABeSNX+arf+6HokAAAA8JxJotcZAAAAAHtr6/8Atp7t3avnYHfy0ysRMdwufl/9GeKIQ1GIiIHN5IHHD5LGbvBU1q9HxK2JNp+/bp5o7mz0XvPw7hyR3XarNv9MtJt/0tb8E23mn76t7054SjvPf/fiH9hh/rvQZYzPP/pfYcf418sr7xxtFz9pxU92iP9Gl/FvbLx7c6dt1U8iTrT9+5M8EKvD90OMzMzl7X61Wune/vPknZ3rjxh4KH6S1KMmneu/3GX9b23+Or/eIf7JY53PfyN+/wP71T4T7zXzSCPiZvO11t/YFuPYwjdfPBw5Wd+KP92o/6vvGxsecf5fa9X/cZf1f/dp/0qXQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAujYjBSNJiq52mxWLEkYj4dwykealcOTVTWl6crm2LGI5COjOXZ6MRMdToJ7X+WL19r39mW388Iv717eFG0Lk8K06V8uleFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDLkYgYjCQtRkQaEb8NpWmx2OusAAAAgF033OsEAAAAgD3n/h8AAAD2vye9/092OQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX7tw/nxtqW7evTpV609fWV2eL105PZ2V54sLy1PFqdLS5eJsqTSbZ8Wp0sKjjpdGxNi5WF4ZqWTlykh5de3SQml5sXJpbmFyNruUFZ5JVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyuwfqSpMWISOvtNC0WI/4REcNRSGbm8mw0Iv4ZEXeGCv21/livkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDXlVfX5ifzPFt6sRvV/VVO141IIp6DNNo3/jPQPCudBifrEXn2Q3Nkj1JNm+Gf5jiPl/y1R7wtvW78vwdzEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvVdeXZufzPNsqdzrTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOit9MckImrLiaHjg9u3Hkx+H6q/RsSbH158f2WyUlkaq63/pbW+8kFz/Zn7drz2LGsAAACAfe/lxxm8dZ++dR8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQrfLq2vxknmdLe9iI672uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBJ/BQAA//9uN7Jr") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x9000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000086c0)={'ip6_vti0\x00', &(0x7f0000008640)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xc, 0x7, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x2, 0xfffffffb}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009100), 0x0, 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) fallocate(r5, 0x40, 0x401, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r3, &(0x7f0000000240)=';', 0x1) sendfile(r3, r9, 0x0, 0x7ffff000) 32.517820947s ago: executing program 4 (id=40): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0x10, 0x7, 0x28, @mcast1, @private0, 0x1, 0x740, 0xb8, 0x1ff}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r2, r3, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x1, 0x1, 0x7, 0x5041, r0, 0x100, '\x00', r2, r3, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x38002, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r2, 0x2e, 0x1, 0x1ff, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)=0x0) fcntl$lock(r5, 0x25, &(0x7f0000000540)={0x2, 0x2, 0x2, 0x1, r7}) capset(&(0x7f0000000580)={0x19980330, r7}, &(0x7f00000005c0)={0xdc20, 0x6, 0xa702, 0x7ff, 0x31f, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x9, 0xf, 0x5, 0xbc4f}]}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000007c0)=@sr0, r8, &(0x7f0000000880)) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000dc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000900)={0x468, 0x3f3, 0x10, 0x70bd25, 0x25dfdbfe, {0x6, 0x1, 0x5, [0xd17000, 0xd5b, 0x8001, 0xb, 0x5, 0x0, 0x2, 0x1, 0xe3, 0xeb3, 0x0, 0x4, 0x5, 0x657, 0x5, 0xb, 0x9, 0x0, 0x8, 0x4, 0xb615, 0x2, 0x7fffffff, 0x3, 0x8, 0x8, 0x3, 0x5, 0x3, 0x7, 0x3, 0xffff, 0x7, 0x5, 0xffffa9f6, 0x7, 0x3, 0x7, 0xe5, 0x91, 0x170, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x929e, 0xa, 0x6, 0xebaa, 0x2, 0xfffffe01, 0x6, 0x1, 0x200, 0x5, 0x8, 0x6, 0x5, 0x8, 0x1, 0xc4, 0x8, 0x2], [0x5, 0x800, 0xc51, 0x8, 0x2, 0x4, 0x7, 0x148d, 0x8, 0x9, 0x5, 0x8, 0x200, 0xffffffff, 0x9e, 0x54, 0x4, 0x3ff, 0x400, 0x8, 0x1, 0x9, 0xfffffff8, 0x0, 0x7, 0x25, 0x7, 0xd8f7, 0xf, 0xa4, 0x7ff, 0x6, 0x2, 0x1, 0x4, 0x40000, 0x6, 0x1, 0x501a, 0x8, 0x1, 0x0, 0x80000000, 0x401, 0xffffff01, 0x100, 0x7fff, 0x6, 0xffff, 0xfffffffd, 0x1, 0x5, 0x2, 0x2, 0x0, 0x5, 0x8000, 0x6, 0x1, 0x9cb7, 0x6, 0x3, 0x3, 0x8], [0x4, 0x400, 0x0, 0x3, 0x0, 0x1, 0x0, 0x400, 0x5, 0xc2, 0x8, 0x648, 0x2, 0x4, 0x1, 0x7, 0xd, 0x6, 0x1000, 0xfffffff9, 0x4, 0xc00000, 0x1000, 0x40, 0x7, 0x5, 0x5, 0x1, 0x800, 0x3, 0xaf6, 0x4, 0xab, 0x100, 0x1, 0xfffffff7, 0x2, 0x1, 0x5, 0x32851968, 0xfffffff7, 0x80000001, 0xf89, 0x2d7, 0x3, 0x8, 0x8f, 0x10001, 0x8, 0xfffffff9, 0x9, 0x9, 0x5, 0x2800000, 0x5, 0x4, 0x7, 0x7af, 0x3, 0xf2f, 0x0, 0x4, 0x1, 0x8], [0x3, 0x4, 0x1, 0x7, 0x8, 0x7, 0x8, 0x3, 0xb, 0x80, 0x2, 0xfffffff8, 0xfffffffa, 0x2, 0x8, 0x0, 0x8, 0xfffffffd, 0x8, 0xfffff02a, 0x1, 0x7754, 0x3, 0x1, 0xff, 0x8, 0x3, 0x1000, 0x19, 0x5, 0xd, 0x7, 0x409, 0x9, 0x1000, 0x6, 0x40, 0x1, 0x7fff, 0x8, 0x8, 0x10, 0x80, 0x9d28, 0x7f, 0x5, 0x2, 0xc8, 0xe9a, 0x1000, 0x4, 0x10001, 0x9, 0x8, 0x101, 0x7, 0x607, 0x0, 0x2, 0x7, 0x0, 0x1, 0x9, 0x49], 0x46, ['\x00', ':-\x00', '!):\x00', '$#[(\x00', 'net/nf_conntrack_expect\x00', '/dev/sr0\x00', '\x00', '/^%.%:-\\G]\x00', '/dev/sr0\x00', '.%\x00']}, [""]}, 0x468}, 0x1, 0x0, 0x0, 0x80}, 0x200080c4) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9d90000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1400000}]}, 0x54}}, 0x24000004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000f80)={0x1f2, 0x4, 0x81, 0xd7}, 0x10) flock(r5, 0xc) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000fc0)=""/168, 0xa8, 0x8, 0xfffffffa, 0x7, 0x2, 0x46d}}, 0x120) lchown(&(0x7f00000012c0)='./file0\x00', r8, r9) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0xd1c, 0x5, 0x2, 0x8, 0x1ff]}, &(0x7f0000001380)=0x54) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x1276, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x3, &(0x7f0000001400)=@raw=[@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], &(0x7f0000001440)='GPL\x00', 0xfffffffa, 0xe7, &(0x7f0000001480)=""/231, 0xa1680, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001580)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x7, 0x20000000, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001700)=[0xffffffffffffffff, r0, r4, r4, r12, r5, r0, 0xffffffffffffffff, r0, r5], &(0x7f0000001740)=[{0x1, 0x5, 0xd, 0x1}, {0x3, 0x3, 0x8, 0xe}, {0x1, 0x100, 0xe, 0xb}], 0x10, 0x4, @void, @value}, 0x94) 32.204140012s ago: executing program 4 (id=45): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000340)=@llc={0x1a, 0xf1f05b6f3b391b20, 0x4, 0xe7, 0x5, 0x8, @multicast}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24040081) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) syz_clone(0x100, &(0x7f0000000700)="c9a6cbf1f6f893f91f3f3111d9f037c59326cc0477eb43a557735bc6e8561986785480fccda5ea3df1dbc1e2f116b5bb4d6959dd561ac670f3ea568bf537252ea13f7884c514f9f2ce054808d9cd7f34f15863f69586a1dfc6e1d8addd799a6eca7df90201b345c2c9bc71c0d7f52ce3e02b803ec3a115332c905ad6bdd0fe3a468bb2", 0x83, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000540)="3ec6fb98a6eb67a10a8830848cc17c5a203abab6bdb8de659731006d5b0e543254f9a1312f704bdee5640acb1270db43fecb9f62665f40280a30c02fd5561196b98374617f53cb79a4a66c9d978689b9e742b2202539763acf116e") semtimedop(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06d55443401570f2d500400004000000ff738fc23f22513b315a98b683"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffa) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617461000000000000000000000000000000000000000000000000000000005b0000004e8d9d510dc51651a7209197a144b2f6a510b9c223529cfab9ab0f0893fc7d51da343a0600000000000000baddd2234080d09621d99580dc9d932b65527dbd97cf9e6e8793fbd897524fc897e4d583a3f65a0a8d5d2919461a25cf"], &(0x7f0000000040)=0x7f) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 32.185558102s ago: executing program 32 (id=45): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000340)=@llc={0x1a, 0xf1f05b6f3b391b20, 0x4, 0xe7, 0x5, 0x8, @multicast}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24040081) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) syz_clone(0x100, &(0x7f0000000700)="c9a6cbf1f6f893f91f3f3111d9f037c59326cc0477eb43a557735bc6e8561986785480fccda5ea3df1dbc1e2f116b5bb4d6959dd561ac670f3ea568bf537252ea13f7884c514f9f2ce054808d9cd7f34f15863f69586a1dfc6e1d8addd799a6eca7df90201b345c2c9bc71c0d7f52ce3e02b803ec3a115332c905ad6bdd0fe3a468bb2", 0x83, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000540)="3ec6fb98a6eb67a10a8830848cc17c5a203abab6bdb8de659731006d5b0e543254f9a1312f704bdee5640acb1270db43fecb9f62665f40280a30c02fd5561196b98374617f53cb79a4a66c9d978689b9e742b2202539763acf116e") semtimedop(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06d55443401570f2d500400004000000ff738fc23f22513b315a98b683"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffa) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617461000000000000000000000000000000000000000000000000000000005b0000004e8d9d510dc51651a7209197a144b2f6a510b9c223529cfab9ab0f0893fc7d51da343a0600000000000000baddd2234080d09621d99580dc9d932b65527dbd97cf9e6e8793fbd897524fc897e4d583a3f65a0a8d5d2919461a25cf"], &(0x7f0000000040)=0x7f) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4.208951657s ago: executing program 0 (id=160): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x82, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x0, 0x800, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000580)={0x40, 0x5e, 0x2}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="2eaf824e0000004000000000000000ebff00000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4) ppoll(&(0x7f0000000040)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r5 = eventfd(0x101) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x103, 0x1}, 0xf01a7180595e49a4) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x80d03) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.205996246s ago: executing program 1 (id=170): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x25, 0x3c, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) close(r1) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x6, 0x0, 0x9, 0x4, 0xc, 'z\x00\x00\x00@\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 3.95615949s ago: executing program 1 (id=172): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x101) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x4, 0x0, 0xc95, 0x9]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0x4}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x8, 0x1, 0x80, 0x3}, {0xe, 0x9, 0x6, 0x6}, {0xa, 0x8, 0x1, 0x7}]}) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000004000000000000a00000a14000000020a050000000300000914000000180a050f000000000000000003000002140000001100010000000000000000000a00000a"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000) 3.806921072s ago: executing program 0 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='msdos\x00', 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r8, 0x60, &(0x7f0000000340)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=@gettaction={0x90, 0x32, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='Y'], 0x9) sendto$inet6(r10, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.715069454s ago: executing program 3 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400"], 0xa8}}, 0x0) 3.611749905s ago: executing program 0 (id=167): set_mempolicy(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.829571537s ago: executing program 1 (id=168): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sync() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r5, 0x1002}, {r5, 0x8002}], 0x2, 0x0, 0x0, 0x0) r6 = getpid() r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = syz_pidfd_open(r6, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r5}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r10}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r11, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0) 2.800708438s ago: executing program 2 (id=171): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcaa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='unmap\x00'}, 0x18) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x2c7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x14, 0x0, @fd, 0x4, 0x0, 0x0, 0x12}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) personality(0x5400004) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 2.494802812s ago: executing program 0 (id=173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x7ff, 0x80, 0x5f00000, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) readv(r2, &(0x7f0000000340)=[{&(0x7f0000002480)=""/4097, 0x1001}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x3, 0x2, 0x40, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 2.400907064s ago: executing program 1 (id=174): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f2, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x2, r5, &(0x7f0000000240)=0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80800}) modify_ldt$write(0x1, 0x0, 0x0) write$evdev(r6, &(0x7f0000000040), 0x373) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 1.919859311s ago: executing program 2 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x97c}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() io_setup(0x3ff, &(0x7f0000000500)) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xff}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000080520000018120000fe906dc042b34f", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000003dc0)={[0x4]}, 0x8) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r7 = socket(0x10, 0x2, 0x39) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) 1.872149852s ago: executing program 3 (id=176): fsopen(&(0x7f0000000000)='nfs4\x00', 0x1) 1.812003922s ago: executing program 3 (id=177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x82, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x0, 0x800, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000580)={0x40, 0x5e, 0x2}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="2eaf824e0000004000000000000000ebff00000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4) ppoll(&(0x7f0000000040)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r5 = eventfd(0x101) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x103, 0x1}, 0xf01a7180595e49a4) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x80d03) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.489376517s ago: executing program 0 (id=180): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r10, 0x0, 0x800) bind$netlink(0xffffffffffffffff, &(0x7f0000000240), 0xc) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.458698698s ago: executing program 5 (id=182): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) 1.419167329s ago: executing program 1 (id=183): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x410ca4, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r7, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x1a00001a}]) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101a00, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1.203102892s ago: executing program 5 (id=184): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb7030000000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, 0x0, 0x0, 0x8010, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 738.788829ms ago: executing program 2 (id=185): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpquota}, {@nouid32}, {@debug}, {@abort}, {@noblock_validity}, {@acl}, {@bsdgroups}]}, 0x1, 0x631, &(0x7f0000000500)="$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") 573.931651ms ago: executing program 0 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x97c}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xff}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000080520000018120000fe906dc042b34f", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000003dc0)={[0x4]}, 0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r7 = socket(0x10, 0x2, 0x39) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) 495.608413ms ago: executing program 3 (id=187): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 315.732565ms ago: executing program 1 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcaa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='unmap\x00'}, 0x18) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x2c7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x14, 0x0, @fd, 0x4, 0x0, 0x0, 0x12}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) personality(0x5400004) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 304.589886ms ago: executing program 3 (id=189): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003080), 0x101000, 0x0) 287.185726ms ago: executing program 5 (id=190): mq_open(0x0, 0x2, 0xc0, 0x0) 158.969468ms ago: executing program 3 (id=191): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x7ff, 0x80, 0x5f00000, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) readv(r2, &(0x7f0000000340)=[{&(0x7f0000002480)=""/4097, 0x1001}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x3, 0x2, 0x40, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 158.694598ms ago: executing program 5 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 158.608178ms ago: executing program 5 (id=193): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 108.659418ms ago: executing program 5 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYRESOCT=r1], 0x80}, 0x1, 0x0, 0x0, 0x84080}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r9, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$lock(r9, 0x26, &(0x7f0000000080)) close_range(r8, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 98.882229ms ago: executing program 2 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61143800000000001d430000000000007a0a00fe0000001f6114370000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 249.66µs ago: executing program 2 (id=196): syz_emit_ethernet(0x3e, &(0x7f0000000880)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x2000, 0x88be, 0x8}}}}}}, 0x0) 0s ago: executing program 2 (id=197): set_mempolicy(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 28.452566][ T29] audit: type=1400 audit(1746755644.414:65): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.453656][ T3304] cgroup: Unknown subsys name 'net' [ 28.475311][ T29] audit: type=1400 audit(1746755644.414:66): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.502821][ T29] audit: type=1400 audit(1746755644.434:67): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.642147][ T3304] cgroup: Unknown subsys name 'cpuset' [ 28.648335][ T3304] cgroup: Unknown subsys name 'rlimit' [ 28.760296][ T29] audit: type=1400 audit(1746755644.714:68): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.783782][ T29] audit: type=1400 audit(1746755644.714:69): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.804682][ T29] audit: type=1400 audit(1746755644.724:70): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.825126][ T29] audit: type=1400 audit(1746755644.724:71): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.845494][ T29] audit: type=1400 audit(1746755644.724:72): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.854192][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.870625][ T29] audit: type=1400 audit(1746755644.724:73): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.902721][ T29] audit: type=1400 audit(1746755644.844:74): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.938503][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.075682][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.094647][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.123132][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.243222][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.250378][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.257943][ T3316] bridge_slave_0: entered allmulticast mode [ 30.264373][ T3316] bridge_slave_0: entered promiscuous mode [ 30.273835][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.280927][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.288128][ T3314] bridge_slave_0: entered allmulticast mode [ 30.294812][ T3314] bridge_slave_0: entered promiscuous mode [ 30.303740][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.310880][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.318096][ T3316] bridge_slave_1: entered allmulticast mode [ 30.324494][ T3316] bridge_slave_1: entered promiscuous mode [ 30.332229][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.339373][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.346559][ T3314] bridge_slave_1: entered allmulticast mode [ 30.353161][ T3314] bridge_slave_1: entered promiscuous mode [ 30.384264][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.399410][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.408636][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.415803][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.422985][ T3313] bridge_slave_0: entered allmulticast mode [ 30.429431][ T3313] bridge_slave_0: entered promiscuous mode [ 30.451590][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.460808][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.468038][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.475342][ T3313] bridge_slave_1: entered allmulticast mode [ 30.481718][ T3313] bridge_slave_1: entered promiscuous mode [ 30.489141][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.501401][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.552017][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 30.563667][ T3314] team0: Port device team_slave_0 added [ 30.570492][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.580547][ T3316] team0: Port device team_slave_0 added [ 30.594819][ T3314] team0: Port device team_slave_1 added [ 30.606571][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.621159][ T3316] team0: Port device team_slave_1 added [ 30.638629][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.645806][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.653052][ T3319] bridge_slave_0: entered allmulticast mode [ 30.659688][ T3319] bridge_slave_0: entered promiscuous mode [ 30.690524][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.697672][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.704908][ T3319] bridge_slave_1: entered allmulticast mode [ 30.711688][ T3319] bridge_slave_1: entered promiscuous mode [ 30.718707][ T3313] team0: Port device team_slave_0 added [ 30.724744][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.731819][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.758432][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.771839][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.778844][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.804856][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.820932][ T3313] team0: Port device team_slave_1 added [ 30.827361][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.834380][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.860327][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.874089][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.881046][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.906993][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.947121][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.957867][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.967384][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.974523][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.000546][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.012116][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.019085][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.045158][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.056659][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.063780][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.070952][ T3325] bridge_slave_0: entered allmulticast mode [ 31.077395][ T3325] bridge_slave_0: entered promiscuous mode [ 31.084575][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.091688][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.098981][ T3325] bridge_slave_1: entered allmulticast mode [ 31.105492][ T3325] bridge_slave_1: entered promiscuous mode [ 31.155355][ T3319] team0: Port device team_slave_0 added [ 31.168449][ T3316] hsr_slave_0: entered promiscuous mode [ 31.174519][ T3316] hsr_slave_1: entered promiscuous mode [ 31.181930][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.191688][ T3319] team0: Port device team_slave_1 added [ 31.198259][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.214248][ T3314] hsr_slave_0: entered promiscuous mode [ 31.220223][ T3314] hsr_slave_1: entered promiscuous mode [ 31.226186][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.233847][ T3314] Cannot create hsr debugfs directory [ 31.256289][ T3313] hsr_slave_0: entered promiscuous mode [ 31.262330][ T3313] hsr_slave_1: entered promiscuous mode [ 31.268196][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.275810][ T3313] Cannot create hsr debugfs directory [ 31.293569][ T3325] team0: Port device team_slave_0 added [ 31.321691][ T3325] team0: Port device team_slave_1 added [ 31.327925][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.335008][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.360995][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.372451][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.379623][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.405746][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.438001][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.445078][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.471052][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.497412][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.504457][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.530578][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.576570][ T3319] hsr_slave_0: entered promiscuous mode [ 31.582777][ T3319] hsr_slave_1: entered promiscuous mode [ 31.588625][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.596307][ T3319] Cannot create hsr debugfs directory [ 31.627812][ T3325] hsr_slave_0: entered promiscuous mode [ 31.634116][ T3325] hsr_slave_1: entered promiscuous mode [ 31.639874][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.647470][ T3325] Cannot create hsr debugfs directory [ 31.770159][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.793786][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.802695][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.813418][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.836948][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.846580][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.857911][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.867411][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.893693][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.903063][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.912423][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.924671][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.966904][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.986551][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.995768][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.004795][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.028651][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.050570][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.066889][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.074016][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.087307][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.096362][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.105656][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.116109][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.123211][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.143526][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.159940][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.193899][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.214780][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.225561][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.232663][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.245054][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.252177][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.264247][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.281038][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.300587][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.315178][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.330185][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.337292][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.349403][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.356499][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.368016][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.385248][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.392502][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.402772][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.409857][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.419044][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.426170][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.435928][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.443057][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.466370][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.486420][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.514681][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.552219][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.587387][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.629308][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.655017][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.722630][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.747448][ T3319] veth0_vlan: entered promiscuous mode [ 32.797119][ T3319] veth1_vlan: entered promiscuous mode [ 32.812321][ T3316] veth0_vlan: entered promiscuous mode [ 32.843054][ T3316] veth1_vlan: entered promiscuous mode [ 32.856860][ T3319] veth0_macvtap: entered promiscuous mode [ 32.864415][ T3314] veth0_vlan: entered promiscuous mode [ 32.879452][ T3314] veth1_vlan: entered promiscuous mode [ 32.887414][ T3319] veth1_macvtap: entered promiscuous mode [ 32.898888][ T3316] veth0_macvtap: entered promiscuous mode [ 32.924448][ T3316] veth1_macvtap: entered promiscuous mode [ 32.937431][ T3313] veth0_vlan: entered promiscuous mode [ 32.951159][ T3325] veth0_vlan: entered promiscuous mode [ 32.959808][ T3325] veth1_vlan: entered promiscuous mode [ 32.966443][ T3314] veth0_macvtap: entered promiscuous mode [ 32.974613][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.986446][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.995674][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.004606][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.013496][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.022337][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.037203][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.048128][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.058828][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.066712][ T3313] veth1_vlan: entered promiscuous mode [ 33.079093][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.089725][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.100629][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.109017][ T3314] veth1_macvtap: entered promiscuous mode [ 33.120260][ T3325] veth0_macvtap: entered promiscuous mode [ 33.133725][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.142589][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.151396][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.160148][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.176498][ T3325] veth1_macvtap: entered promiscuous mode [ 33.192852][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.203411][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.213249][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.223743][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.234443][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.248159][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.258806][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.268736][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.279267][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.289165][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.299618][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.313751][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.313845][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.343265][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.353791][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.363813][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.374709][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.385976][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.405061][ T3313] veth0_macvtap: entered promiscuous mode [ 33.417988][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.428622][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.438528][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.449230][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.459109][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.469733][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.485335][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.493807][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.502733][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.511495][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.520375][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.534132][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 33.534216][ T29] audit: type=1400 audit(1746755649.494:104): avc: denied { read write } for pid=3452 comm="syz.2.3" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.544825][ T3325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.572034][ T3325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.580879][ T3325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.589782][ T3325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.612960][ T3313] veth1_macvtap: entered promiscuous mode [ 33.618845][ T29] audit: type=1400 audit(1746755649.494:105): avc: denied { open } for pid=3452 comm="syz.2.3" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.641809][ T29] audit: type=1400 audit(1746755649.494:106): avc: denied { ioctl } for pid=3452 comm="syz.2.3" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.665650][ T3458] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 33.666190][ T29] audit: type=1400 audit(1746755649.504:107): avc: denied { write } for pid=3452 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.698011][ T29] audit: type=1400 audit(1746755649.574:108): avc: denied { allowed } for pid=3455 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.717048][ T29] audit: type=1400 audit(1746755649.604:109): avc: denied { create } for pid=3455 comm="syz.0.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.738066][ T29] audit: type=1400 audit(1746755649.644:110): avc: denied { relabelto } for pid=3455 comm="syz.0.1" name="file1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 33.765217][ T29] audit: type=1400 audit(1746755649.644:111): avc: denied { associate } for pid=3455 comm="syz.0.1" name="file1" dev="tmpfs" ino=18 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 33.793020][ T29] audit: type=1400 audit(1746755649.644:112): avc: denied { create } for pid=3455 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.843396][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.853986][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.863730][ T29] audit: type=1326 audit(1746755649.824:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3461 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 33.864298][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.892500][ T3462] loop1: detected capacity change from 0 to 128 [ 33.897556][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.904684][ T3462] ======================================================= [ 33.904684][ T3462] WARNING: The mand mount option has been deprecated and [ 33.904684][ T3462] and is ignored by this kernel. Remove the mand [ 33.904684][ T3462] option from the mount to silence this warning. [ 33.904684][ T3462] ======================================================= [ 33.913647][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.959149][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.969109][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.979647][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.994764][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.025544][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.036136][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.046172][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.056714][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.066664][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.077208][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.087042][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.097541][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.110548][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.123617][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.132475][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.141361][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.150205][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.249725][ T3478] loop3: detected capacity change from 0 to 164 [ 34.294680][ T3478] process 'syz.3.4' launched '/dev/fd/3' with NULL argv: empty string added [ 34.319860][ T3471] loop4: detected capacity change from 0 to 2048 [ 34.321778][ T3478] syz.3.4: attempt to access beyond end of device [ 34.321778][ T3478] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.341529][ T3478] syz.3.4: attempt to access beyond end of device [ 34.341529][ T3478] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.362012][ T3471] loop4: p1 < > p4 [ 34.365030][ T3478] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 34.373009][ T3471] loop4: p4 size 8388608 extends beyond EOD, truncated [ 34.474924][ T3484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 34.634778][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.774331][ T3498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9'. [ 35.124000][ T3505] loop1: detected capacity change from 0 to 512 [ 35.184913][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 35.292856][ T3494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 35.408752][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.426250][ T3494] loop4: detected capacity change from 0 to 512 [ 35.456065][ T3505] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.487040][ T3494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.500241][ T3494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.536453][ T3494] EXT4-fs (loop4): 1 truncate cleaned up [ 35.546166][ C0] hrtimer: interrupt took 26917 ns [ 35.563211][ T3494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.630144][ T3514] netlink: 'syz.0.12': attribute type 27 has an invalid length. [ 35.655956][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.682422][ T3519] sctp: [Deprecated]: syz.0.12 (pid 3519) Use of int in max_burst socket option. [ 35.682422][ T3519] Use struct sctp_assoc_value instead [ 35.920894][ T3530] loop4: detected capacity change from 0 to 512 [ 35.946126][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.957654][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.972298][ T3530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.985839][ T3530] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.001156][ T3530] EXT4-fs (loop4): 1 truncate cleaned up [ 36.007989][ T3530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.223866][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.258623][ T3539] loop4: detected capacity change from 0 to 2048 [ 36.280153][ T3519] syz.0.12 (3519) used greatest stack depth: 11040 bytes left [ 36.303380][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.314562][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.363365][ T3514] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.372348][ T3514] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.381320][ T3514] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.390475][ T3514] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.420102][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.470146][ T3539] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.529701][ T3514] syz.0.12 (3514) used greatest stack depth: 10760 bytes left [ 36.703711][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.823597][ T3556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.281536][ T3582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 37.291289][ T3582] dummy0: entered allmulticast mode [ 37.536776][ T3543] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 37.562371][ T3593] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 37.731591][ T3605] can0: slcan on ttyS3. [ 37.822151][ T3604] can0 (unregistered): slcan off ttyS3. [ 37.847475][ T3609] bridge_slave_0: left allmulticast mode [ 37.853237][ T3609] bridge_slave_0: left promiscuous mode [ 37.859056][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.870762][ T3543] syz.4.19 (3543) used greatest stack depth: 9496 bytes left [ 37.879068][ T3609] bridge_slave_1: left allmulticast mode [ 37.884924][ T3609] bridge_slave_1: left promiscuous mode [ 37.890667][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.902081][ T3609] bond0: (slave bond_slave_0): Releasing backup interface [ 37.910392][ T3609] bond0: (slave bond_slave_1): Releasing backup interface [ 37.927371][ T3609] team0: Port device team_slave_0 removed [ 37.942300][ T3539] syz.4.19 (3539) used greatest stack depth: 7032 bytes left [ 37.950664][ T3609] team0: Port device team_slave_1 removed [ 37.957163][ T3325] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /4/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 37.958530][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.989199][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.096524][ T3616] ŞŞŞŞŞŞ: renamed from vlan0 [ 38.137852][ T3618] bridge0: port 3(team0) entered blocking state [ 38.144492][ T3618] bridge0: port 3(team0) entered disabled state [ 38.151271][ T3618] team0: entered allmulticast mode [ 38.156481][ T3618] team_slave_0: entered allmulticast mode [ 38.162298][ T3618] team_slave_1: entered allmulticast mode [ 38.170520][ T3618] team0: entered promiscuous mode [ 38.175732][ T3618] team_slave_0: entered promiscuous mode [ 38.181580][ T3618] team_slave_1: entered promiscuous mode [ 38.188751][ T3618] bridge0: port 3(team0) entered blocking state [ 38.195069][ T3618] bridge0: port 3(team0) entered forwarding state [ 38.205400][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.389374][ T3412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.435471][ T3412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.494167][ T3412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.544795][ T29] kauditd_printk_skb: 6070 callbacks suppressed [ 38.544813][ T29] audit: type=1400 audit(1746755654.504:5245): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.545643][ T3412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.552411][ T29] audit: type=1400 audit(1746755654.504:5246): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.603563][ T29] audit: type=1400 audit(1746755654.504:5247): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.624818][ T29] audit: type=1400 audit(1746755654.514:5248): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.646021][ T29] audit: type=1400 audit(1746755654.514:5249): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.667106][ T29] audit: type=1400 audit(1746755654.514:5250): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.688267][ T29] audit: type=1400 audit(1746755654.514:5251): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.709504][ T29] audit: type=1400 audit(1746755654.514:5252): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.730731][ T29] audit: type=1400 audit(1746755654.514:5253): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.751811][ T29] audit: type=1400 audit(1746755654.514:5254): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 38.858053][ T3412] bridge_slave_1: left allmulticast mode [ 38.864293][ T3412] bridge_slave_1: left promiscuous mode [ 38.869983][ T3412] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.907950][ T3412] bridge_slave_0: left allmulticast mode [ 38.913853][ T3412] bridge_slave_0: left promiscuous mode [ 38.919662][ T3412] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.064503][ T3412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.074550][ T3412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.092328][ T3412] bond0 (unregistering): Released all slaves [ 39.166595][ T3412] hsr_slave_0: left promiscuous mode [ 39.183695][ T3412] hsr_slave_1: left promiscuous mode [ 39.189483][ T3412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.197039][ T3412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.224182][ T3412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.231713][ T3412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.276110][ T3412] veth1_macvtap: left promiscuous mode [ 39.281694][ T3412] veth0_macvtap: left promiscuous mode [ 39.287220][ T3412] veth1_vlan: left promiscuous mode [ 39.345657][ T3412] veth0_vlan: left promiscuous mode [ 39.477819][ T3412] team0 (unregistering): Port device team_slave_1 removed [ 39.525426][ T3412] team0 (unregistering): Port device team_slave_0 removed [ 41.166304][ T3664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3664 comm=syz.2.56 [ 41.180745][ T3664] mmap: syz.2.56 (3664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.797347][ T3674] veth0_vlan: entered allmulticast mode [ 42.725223][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 42.744979][ T3688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 42.745016][ T3688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.745047][ T3688] vhci_hcd vhci_hcd.0: Device attached [ 42.870967][ T3688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 42.877527][ T3688] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.885279][ T3688] vhci_hcd vhci_hcd.0: Device attached [ 42.897503][ T3692] vhci_hcd: connection closed [ 42.897574][ T51] vhci_hcd: stop threads [ 42.897829][ T3689] vhci_hcd: connection closed [ 42.902292][ T51] vhci_hcd: release socket [ 42.902303][ T51] vhci_hcd: disconnect device [ 42.921191][ T51] vhci_hcd: stop threads [ 42.925544][ T51] vhci_hcd: release socket [ 42.929983][ T51] vhci_hcd: disconnect device [ 42.934893][ T3390] vhci_hcd: vhci_device speed not set [ 43.551386][ T29] kauditd_printk_skb: 40369 callbacks suppressed [ 43.551406][ T29] audit: type=1400 audit(1746755659.504:42132): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 43.558953][ T3044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.580014][ T29] audit: type=1400 audit(1746755659.514:42133): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 43.585533][ T3044] audit: audit_lost=1478 audit_rate_limit=0 audit_backlog_limit=64 [ 43.606623][ T29] audit: type=1400 audit(1746755659.514:42134): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 43.614532][ T3044] audit: backlog limit exceeded [ 43.614821][ T3044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.635710][ T29] audit: type=1400 audit(1746755659.514:42135): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 43.640560][ T3044] audit: audit_lost=1479 audit_rate_limit=0 audit_backlog_limit=64 [ 43.647073][ T29] audit: type=1400 audit(1746755659.514:42136): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 43.740607][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 43.756425][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 43.774667][ T3702] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 43.782392][ T3702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.67'. [ 43.791299][ T3702] dummy0: entered promiscuous mode [ 43.796491][ T3702] dummy0: left allmulticast mode [ 43.804554][ T3702] bridge0: port 3(dummy0) entered blocking state [ 43.810947][ T3702] bridge0: port 3(dummy0) entered disabled state [ 43.817530][ T3702] dummy0: entered allmulticast mode [ 43.823920][ T3702] bridge0: port 3(dummy0) entered blocking state [ 43.830382][ T3702] bridge0: port 3(dummy0) entered forwarding state [ 43.844050][ T3697] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 44.877379][ T3709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3709 comm=syz.0.70 [ 44.898161][ T3708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 44.904742][ T3708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 44.911404][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 44.912919][ T3708] vhci_hcd vhci_hcd.0: Device attached [ 45.411523][ T1039] vhci_hcd: vhci_device speed not set [ 45.471383][ T1039] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 45.754544][ T3712] vhci_hcd: connection reset by peer [ 45.760250][ T137] vhci_hcd: stop threads [ 45.764534][ T137] vhci_hcd: release socket [ 45.768953][ T137] vhci_hcd: disconnect device [ 46.108324][ T3719] Zero length message leads to an empty skb [ 46.126899][ T3719] Cannot find set identified by id 0 to match [ 46.336415][ T3723] macvtap0: refused to change device tx_queue_len [ 47.383771][ T3731] netlink: 'syz.2.78': attribute type 13 has an invalid length. [ 47.453337][ T3390] Process accounting resumed [ 47.466783][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.474202][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.515987][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.526598][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.564159][ T3731] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.573364][ T3731] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.582450][ T3731] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.591526][ T3731] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.561624][ T29] kauditd_printk_skb: 42723 callbacks suppressed [ 48.561644][ T29] audit: type=1400 audit(1746755664.524:83545): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.578515][ T3044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.589365][ T29] audit: type=1400 audit(1746755664.524:83546): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.595888][ T3044] audit: audit_lost=1918 audit_rate_limit=0 audit_backlog_limit=64 [ 48.616859][ T29] audit: type=1400 audit(1746755664.524:83547): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.624755][ T3044] audit: backlog limit exceeded [ 48.645851][ T29] audit: type=1400 audit(1746755664.524:83548): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.652828][ T3044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.671862][ T29] audit: type=1400 audit(1746755664.524:83549): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.678348][ T3044] audit: audit_lost=1919 audit_rate_limit=0 audit_backlog_limit=64 [ 50.343463][ T3755] bridge0: entered promiscuous mode [ 50.348800][ T3755] macvlan2: entered promiscuous mode [ 50.366439][ T3755] bridge0: port 4(macvlan2) entered blocking state [ 50.373061][ T3755] bridge0: port 4(macvlan2) entered disabled state [ 50.380332][ T3755] macvlan2: entered allmulticast mode [ 50.385797][ T3755] bridge0: entered allmulticast mode [ 50.393045][ T3755] macvlan2: left allmulticast mode [ 50.398187][ T3755] bridge0: left allmulticast mode [ 50.404241][ T3755] bridge0: left promiscuous mode [ 50.541692][ T1039] usb 3-1: enqueue for inactive port 0 [ 50.541712][ T1039] usb 3-1: enqueue for inactive port 0 [ 50.611894][ T1039] vhci_hcd: vhci_device speed not set [ 51.945282][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 51.950000][ T3765] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 53.571439][ T29] kauditd_printk_skb: 42759 callbacks suppressed [ 53.571458][ T29] audit: type=1400 audit(1746755669.524:125531): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.578726][ T3044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.600118][ T29] audit: type=1400 audit(1746755669.534:125532): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.605596][ T3044] audit: audit_lost=2179 audit_rate_limit=0 audit_backlog_limit=64 [ 53.626834][ T29] audit: type=1400 audit(1746755669.534:125533): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.634727][ T3044] audit: backlog limit exceeded [ 53.635144][ T3044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.656010][ T29] audit: type=1400 audit(1746755669.534:125534): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.660840][ T3044] audit: audit_lost=2180 audit_rate_limit=0 audit_backlog_limit=64 [ 53.667360][ T29] audit: type=1400 audit(1746755669.534:125535): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.732095][ T3774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.758316][ T3777] capability: warning: `syz.3.94' uses 32-bit capabilities (legacy support in use) [ 53.797146][ T3779] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 53.804936][ T3779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'. [ 53.815366][ T3779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.824226][ T3779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.833109][ T3779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.841921][ T3779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.852855][ T3779] team0: Port device geneve1 added [ 55.551430][ T3908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 55.563942][ T3910] loop1: detected capacity change from 0 to 1024 [ 55.575392][ T3908] loop3: detected capacity change from 0 to 128 [ 55.596471][ T3908] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 55.614768][ T3919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3919 comm=syz.0.95 [ 55.627232][ T3919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3919 comm=syz.0.95 [ 55.641588][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.694369][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.712934][ T3908] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 55.720792][ T3908] FAT-fs (loop3): Filesystem has been set read-only [ 55.727710][ T3908] syz.3.98: attempt to access beyond end of device [ 55.727710][ T3908] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.871228][ T3931] capability: warning: `syz.1.99' uses deprecated v2 capabilities in a way that may be insecure [ 55.967604][ T3916] chnl_net:caif_netlink_parms(): no params data found [ 56.035077][ T3938] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 56.035077][ T3938] program syz.3.100 not setting count and/or reply_len properly [ 56.096192][ T3943] loop2: detected capacity change from 0 to 512 [ 56.114843][ T3943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.159702][ T3943] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.160481][ T3916] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.177071][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.184708][ T3916] bridge_slave_0: entered allmulticast mode [ 56.196609][ T3951] loop0: detected capacity change from 0 to 256 [ 56.203510][ T3916] bridge_slave_0: entered promiscuous mode [ 56.234447][ T3916] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.241682][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.250202][ T3916] bridge_slave_1: entered allmulticast mode [ 56.257988][ T3916] bridge_slave_1: entered promiscuous mode [ 56.270971][ T3952] loop1: detected capacity change from 0 to 512 [ 56.280000][ T3916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.289388][ T3952] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 56.291083][ T3916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.306189][ T3952] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.102: inode #1: comm syz.1.102: iget: illegal inode # [ 56.320113][ T3952] EXT4-fs (loop1): no journal found [ 56.325479][ T3952] EXT4-fs (loop1): can't get journal size [ 56.342465][ T3916] team0: Port device team_slave_0 added [ 56.349159][ T3952] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 56.359732][ T3916] team0: Port device team_slave_1 added [ 56.370115][ T3952] EXT4-fs (loop1): failed to initialize system zone (-22) [ 56.380355][ T3952] EXT4-fs (loop1): mount failed [ 56.415127][ T3916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.422204][ T3916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.448249][ T3916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.461605][ T3916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.468598][ T3916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.470150][ T3959] loop0: detected capacity change from 0 to 512 [ 56.494701][ T3916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.592270][ T3916] hsr_slave_0: entered promiscuous mode [ 56.598511][ T3916] hsr_slave_1: entered promiscuous mode [ 56.605046][ T3916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.639022][ T3916] Cannot create hsr debugfs directory [ 56.658252][ T3959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.675254][ T3959] EXT4-fs (loop0): 1 truncate cleaned up [ 56.685783][ T3959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.725389][ T3959] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 56.804552][ T3374] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 56.887101][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.904169][ T3916] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.961669][ T3916] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.979176][ T3916] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.000612][ T3916] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.009684][ T3969] fido_id[3969]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.034621][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.060075][ T3972] loop0: detected capacity change from 0 to 128 [ 57.096544][ T3972] syz.0.107: attempt to access beyond end of device [ 57.096544][ T3972] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 57.147182][ T3975] loop2: detected capacity change from 0 to 2048 [ 57.167874][ T3916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.200127][ T3916] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.222162][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.229399][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.267282][ T3794] Alternate GPT is invalid, using primary GPT. [ 57.273867][ T3794] loop2: p1 p2 p3 [ 57.282259][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.289389][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.307063][ T3975] Alternate GPT is invalid, using primary GPT. [ 57.313613][ T3975] loop2: p1 p2 p3 [ 57.321026][ T3916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.331517][ T3916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.385701][ T51] kworker/u8:3: attempt to access beyond end of device [ 57.385701][ T51] loop0: rw=1, sector=145, nr_sectors = 73 limit=128 [ 57.399842][ T3982] loop3: detected capacity change from 0 to 2048 [ 57.419786][ T3984] loop1: detected capacity change from 0 to 512 [ 57.454968][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.462094][ T3916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.497707][ T3984] netlink: 'syz.1.108': attribute type 4 has an invalid length. [ 57.512065][ T3984] netlink: 'syz.1.108': attribute type 4 has an invalid length. [ 57.573693][ T4000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.110'. [ 57.735262][ T3916] veth0_vlan: entered promiscuous mode [ 57.746024][ T3916] veth1_vlan: entered promiscuous mode [ 57.765239][ T3916] veth0_macvtap: entered promiscuous mode [ 57.773454][ T3916] veth1_macvtap: entered promiscuous mode [ 57.787253][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.797899][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.807771][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.818254][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.828772][ T4014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 57.830612][ T3916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.848665][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.859347][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.869273][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.879895][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.891722][ T3916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.901065][ T3916] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.909944][ T3916] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.918806][ T3916] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927684][ T3916] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.018757][ T4017] loop2: detected capacity change from 0 to 512 [ 58.039023][ T4017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.067155][ T4017] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.075228][ T4017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 58.087673][ T4017] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 58.097287][ T4017] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 58.109099][ T4017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.127693][ T4017] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.112: dx entry: limit 65535 != root limit 120 [ 58.139785][ T4017] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.112: Corrupt directory, running e2fsck is recommended [ 58.217061][ T4023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 58.228539][ T4023] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.112: dx entry: limit 65535 != root limit 120 [ 58.240661][ T4023] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.112: Corrupt directory, running e2fsck is recommended [ 58.253907][ T4023] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.112: path /31/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 58.254920][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.370965][ T3998] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.466812][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.724392][ T4029] vlan0: entered allmulticast mode [ 58.761424][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 58.761444][ T29] audit: type=1400 audit(1746755674.494:126252): avc: denied { create } for pid=4024 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.787463][ T29] audit: type=1400 audit(1746755674.494:126253): avc: denied { write } for pid=4024 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.927138][ T29] audit: type=1326 audit(1746755674.864:126254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.933348][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 58.950730][ T29] audit: type=1326 audit(1746755674.864:126255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.950766][ T29] audit: type=1326 audit(1746755674.864:126256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.950798][ T29] audit: type=1326 audit(1746755674.864:126257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.950915][ T29] audit: type=1326 audit(1746755674.864:126258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.950943][ T29] audit: type=1326 audit(1746755674.864:126259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.951050][ T29] audit: type=1326 audit(1746755674.864:126260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.951079][ T29] audit: type=1326 audit(1746755674.864:126261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f66824be969 code=0x7ffc0000 [ 58.968927][ T4032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 59.131630][ T4032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.139221][ T4028] hsr_slave_0: left promiscuous mode [ 59.139673][ T4032] vhci_hcd vhci_hcd.0: Device attached [ 59.150395][ T4028] hsr_slave_1: left promiscuous mode [ 59.183643][ T1039] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.191552][ T1039] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.199316][ T1039] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.207364][ T1039] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.214727][ T1039] rtc rtc0: __rtc_set_alarm: err=-22 [ 59.229168][ T4042] loop1: detected capacity change from 0 to 512 [ 59.239920][ T4042] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.249051][ T4042] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 59.260261][ T4042] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 59.281390][ T4042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 59.306035][ T4042] System zones: 0-2, 18-18, 34-34 [ 59.316944][ T4042] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.353987][ T4042] EXT4-fs (loop1): 1 truncate cleaned up [ 59.360068][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.381483][ T4032] loop2: detected capacity change from 0 to 2048 [ 59.411842][ T1039] vhci_hcd: vhci_device speed not set [ 59.434986][ T4052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.452541][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.471418][ T1039] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 59.504311][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.555817][ T4052] lo speed is unknown, defaulting to 1000 [ 59.562771][ T4052] lo speed is unknown, defaulting to 1000 [ 59.586328][ T4052] lo speed is unknown, defaulting to 1000 [ 59.597639][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 59.631482][ T4060] loop5: detected capacity change from 0 to 2048 [ 59.643403][ T4059] loop1: detected capacity change from 0 to 256 [ 59.672141][ T4059] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.703701][ T4060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.742547][ T4035] vhci_hcd: connection reset by peer [ 59.758430][ T4052] infiniband syz0: set active [ 59.763270][ T4052] infiniband syz0: added lo [ 59.767816][ T3390] lo speed is unknown, defaulting to 1000 [ 59.779033][ T4057] loop3: detected capacity change from 0 to 1024 [ 59.785524][ T51] vhci_hcd: stop threads [ 59.789820][ T51] vhci_hcd: release socket [ 59.794310][ T51] vhci_hcd: disconnect device [ 59.802502][ T4057] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.880572][ T4057] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.123: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.897157][ T4057] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.123: Failed to acquire dquot type 0 [ 59.901860][ T4052] RDS/IB: syz0: added [ 59.973963][ T4057] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.123: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.028113][ T4052] smc: adding ib device syz0 with port count 1 [ 60.042432][ T4052] smc: ib device syz0 port 1 has pnetid [ 60.048442][ T3389] lo speed is unknown, defaulting to 1000 [ 60.069278][ T4074] lo speed is unknown, defaulting to 1000 [ 60.084657][ T4057] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.123: Invalid inode bitmap blk 0 in block_group 0 [ 60.116969][ T4052] lo speed is unknown, defaulting to 1000 [ 60.136160][ T51] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.164103][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 60.185746][ T4057] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 60.196463][ T4052] lo speed is unknown, defaulting to 1000 [ 60.246363][ T4082] loop0: detected capacity change from 0 to 512 [ 60.310133][ T4082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.367723][ T4082] EXT4-fs (loop0): 1 truncate cleaned up [ 60.374103][ T4082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.629150][ T4082] lo speed is unknown, defaulting to 1000 [ 61.093176][ T4052] lo speed is unknown, defaulting to 1000 [ 61.174069][ T4057] EXT4-fs (loop3): 1 orphan inode deleted [ 61.190408][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.220336][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.356071][ T4057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.572696][ T4097] loop3: detected capacity change from 0 to 512 [ 61.591485][ T4052] lo speed is unknown, defaulting to 1000 [ 61.648785][ T4100] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 61.700847][ T4097] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 61.854196][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.903342][ T4060] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.921471][ T4060] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 61.934028][ T4060] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.934028][ T4060] [ 61.943792][ T4060] EXT4-fs (loop5): Total free blocks count 0 [ 61.949825][ T4060] EXT4-fs (loop5): Free/Dirty block details [ 61.955837][ T4060] EXT4-fs (loop5): free_blocks=2415919104 [ 61.961667][ T4060] EXT4-fs (loop5): dirty_blocks=8208 [ 61.966978][ T4060] EXT4-fs (loop5): Block reservation details [ 61.973029][ T4060] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 61.984188][ T4104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 61.993172][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 62.094167][ T4052] lo speed is unknown, defaulting to 1000 [ 62.144237][ T4052] lo speed is unknown, defaulting to 1000 [ 62.207243][ T4106] lo speed is unknown, defaulting to 1000 [ 62.213163][ T4106] lo speed is unknown, defaulting to 1000 [ 62.227640][ T4106] lo speed is unknown, defaulting to 1000 [ 62.257580][ T1876] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 62.272977][ T4106] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.292296][ T4106] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.334003][ T4106] lo speed is unknown, defaulting to 1000 [ 62.357857][ T4106] lo speed is unknown, defaulting to 1000 [ 62.371878][ T4106] lo speed is unknown, defaulting to 1000 [ 62.409188][ T4106] lo speed is unknown, defaulting to 1000 [ 62.436187][ T4106] lo speed is unknown, defaulting to 1000 [ 62.472305][ T4106] lo speed is unknown, defaulting to 1000 [ 62.681680][ T4119] loop0: detected capacity change from 0 to 512 [ 62.704062][ T4119] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.713352][ T4119] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 62.743150][ T4119] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 62.769547][ T4119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 62.779015][ T4119] System zones: 0-2, 18-18, 34-34 [ 62.794521][ T4126] loop2: detected capacity change from 0 to 512 [ 62.806107][ T4126] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 62.815741][ T4126] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 62.831147][ T4117] loop5: detected capacity change from 0 to 512 [ 62.838630][ T4119] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.861062][ T4125] loop1: detected capacity change from 0 to 512 [ 62.887473][ T4119] EXT4-fs (loop0): 1 truncate cleaned up [ 62.888672][ T4125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.907822][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.924716][ T4125] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.947209][ T4117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.959970][ T4117] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.002146][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.060536][ T3916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.065115][ T4135] loop0: detected capacity change from 0 to 512 [ 63.086383][ T4135] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.136: corrupted in-inode xattr: invalid ea_ino [ 63.146495][ T4135] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.136: couldn't read orphan inode 15 (err -117) [ 63.170696][ T4135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.191183][ T4138] No source specified [ 63.226323][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.312128][ T4144] loop5: detected capacity change from 0 to 512 [ 63.321026][ T4144] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.363450][ T4144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.141'. [ 63.372506][ T4144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.141'. [ 63.386882][ T4147] loop0: detected capacity change from 0 to 1024 [ 63.396761][ T4147] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.412658][ T4148] loop3: detected capacity change from 0 to 512 [ 63.433944][ T4148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.453431][ T4147] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.138: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.468668][ T4148] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.479622][ T4147] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.138: Failed to acquire dquot type 0 [ 63.493127][ T4147] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.138: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.511922][ T4147] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.138: Invalid inode bitmap blk 0 in block_group 0 [ 63.525261][ T4147] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 63.541604][ T1876] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.556439][ T4147] EXT4-fs (loop0): 1 orphan inode deleted [ 63.565372][ T1876] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 63.570284][ T4147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.626746][ T4147] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.632101][ T4157] rdma_rxe: rxe_newlink: failed to add lo [ 63.660679][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.692110][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.708164][ T4157] loop2: detected capacity change from 0 to 2048 [ 63.721685][ T4161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.737232][ T4164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4164 comm=syz.5.144 [ 63.749747][ T4164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4164 comm=syz.5.144 [ 63.763868][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.767649][ T4167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.784831][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 63.784843][ T29] audit: type=1400 audit(1746755679.744:126872): avc: denied { create } for pid=4162 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 63.810540][ T29] audit: type=1326 audit(1746755679.744:126873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.834163][ T29] audit: type=1326 audit(1746755679.744:126874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.857718][ T29] audit: type=1326 audit(1746755679.744:126875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.872090][ T4167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.881209][ T29] audit: type=1326 audit(1746755679.744:126876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.912612][ T29] audit: type=1326 audit(1746755679.744:126877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.939276][ T29] audit: type=1326 audit(1746755679.744:126878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.962923][ T29] audit: type=1326 audit(1746755679.854:126879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 63.986648][ T29] audit: type=1326 audit(1746755679.854:126880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 64.010301][ T29] audit: type=1326 audit(1746755679.854:126881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3611e969 code=0x7ffc0000 [ 64.036371][ T4161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.095176][ T4161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.191741][ T4157] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.228173][ T4157] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 64.240736][ T4157] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.240736][ T4157] [ 64.250490][ T4157] EXT4-fs (loop2): Total free blocks count 0 [ 64.256559][ T4157] EXT4-fs (loop2): Free/Dirty block details [ 64.262511][ T4157] EXT4-fs (loop2): free_blocks=2415919104 [ 64.268427][ T4157] EXT4-fs (loop2): dirty_blocks=8208 [ 64.273778][ T4157] EXT4-fs (loop2): Block reservation details [ 64.279792][ T4157] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 64.287011][ T4161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.332463][ T4176] loop5: detected capacity change from 0 to 128 [ 64.348948][ T4161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.379233][ T4161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.409369][ T4161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.427092][ T4183] syz.5.148: attempt to access beyond end of device [ 64.427092][ T4183] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 64.460188][ T4183] syz.5.148: attempt to access beyond end of device [ 64.460188][ T4183] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 64.479416][ T4161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.520227][ T4192] loop1: detected capacity change from 0 to 512 [ 64.543822][ T4192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.552301][ T1039] usb 5-1: enqueue for inactive port 0 [ 64.561499][ T4183] syz.5.148: attempt to access beyond end of device [ 64.561499][ T4183] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 64.577679][ T1039] usb 5-1: enqueue for inactive port 0 [ 64.598196][ T4192] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.601302][ T111] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 64.606151][ T4192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 64.629143][ T4183] syz.5.148: attempt to access beyond end of device [ 64.629143][ T4183] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 64.653135][ T4192] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 64.662759][ T4192] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 64.672756][ T1039] vhci_hcd: vhci_device speed not set [ 64.731749][ T4192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.800329][ T4192] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.150: dx entry: limit 65535 != root limit 120 [ 64.812525][ T4192] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.150: Corrupt directory, running e2fsck is recommended [ 64.829423][ T4183] syz.5.148: attempt to access beyond end of device [ 64.829423][ T4183] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 64.879155][ T4183] syz.5.148: attempt to access beyond end of device [ 64.879155][ T4183] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 64.904735][ T4205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.931094][ T4183] syz.5.148: attempt to access beyond end of device [ 64.931094][ T4183] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 64.946628][ T4183] syz.5.148: attempt to access beyond end of device [ 64.946628][ T4183] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 64.969659][ T4183] syz.5.148: attempt to access beyond end of device [ 64.969659][ T4183] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 64.995054][ T4192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 65.016415][ T4183] syz.5.148: attempt to access beyond end of device [ 65.016415][ T4183] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 65.032866][ T4205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.065481][ T4192] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.150: dx entry: limit 65535 != root limit 120 [ 65.077688][ T4192] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.150: Corrupt directory, running e2fsck is recommended [ 65.091674][ T4192] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.150: path /28/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 65.132312][ T4205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.165073][ T4205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.210072][ T4205] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.224005][ T4205] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.246244][ T4205] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.259508][ T4205] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.306459][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.350025][ T4234] loop1: detected capacity change from 0 to 512 [ 65.360723][ T4234] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 65.407673][ T4234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 65.416722][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 65.445710][ T4232] loop5: detected capacity change from 0 to 512 [ 65.467050][ T4245] loop0: detected capacity change from 0 to 512 [ 65.474996][ T4232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.508295][ T4245] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 65.528023][ T4232] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.545501][ T4245] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 65.556199][ T10] lo speed is unknown, defaulting to 1000 [ 65.562154][ T10] syz2: Port: 1 Link ACTIVE [ 65.626539][ T4244] loop1: detected capacity change from 0 to 512 [ 65.637741][ T3916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.665415][ T4244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.678314][ T4244] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.763263][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.332508][ T4303] lo speed is unknown, defaulting to 1000 [ 66.363866][ T4303] lo speed is unknown, defaulting to 1000 [ 66.529911][ T4310] macvlan2: entered promiscuous mode [ 66.535327][ T4310] bridge0: entered promiscuous mode [ 66.541051][ T4310] bridge0: port 3(macvlan2) entered blocking state [ 66.547852][ T4310] bridge0: port 3(macvlan2) entered disabled state [ 66.556774][ T4310] macvlan2: entered allmulticast mode [ 66.562224][ T4310] bridge0: entered allmulticast mode [ 66.578742][ T4310] macvlan2: left allmulticast mode [ 66.584055][ T4310] bridge0: left allmulticast mode [ 66.596831][ T4310] bridge0: left promiscuous mode [ 66.675727][ T4316] No source specified [ 67.144128][ T4327] vlan2: entered allmulticast mode [ 67.159826][ T3390] lo speed is unknown, defaulting to 1000 [ 67.294421][ T4324] loop0: detected capacity change from 0 to 512 [ 67.490541][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.592004][ T4324] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.697240][ T4344] loop5: detected capacity change from 0 to 2048 [ 67.699833][ T4346] loop2: detected capacity change from 0 to 1024 [ 67.720777][ T4346] EXT4-fs: Ignoring removed orlov option [ 67.775462][ T4344] loop5: detected capacity change from 0 to 8192 [ 67.793849][ T4346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.968509][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.093272][ T4379] loop1: detected capacity change from 0 to 128 [ 68.541292][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.694912][ T4390] lo speed is unknown, defaulting to 1000 [ 68.754470][ T4390] lo speed is unknown, defaulting to 1000 [ 69.046308][ T4402] random: crng reseeded on system resumption [ 69.124617][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 69.130834][ T29] audit: type=1400 audit(1746755685.004:127678): avc: denied { append } for pid=4401 comm="syz.5.182" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.154145][ T29] audit: type=1400 audit(1746755685.004:127679): avc: denied { open } for pid=4401 comm="syz.5.182" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.177849][ T4404] loop1: detected capacity change from 0 to 2048 [ 69.237673][ T29] audit: type=1400 audit(1746755685.194:127680): avc: denied { bind } for pid=4406 comm="syz.5.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.588490][ T4408] vlan0: entered allmulticast mode [ 69.593831][ T4408] bridge_slave_0: entered allmulticast mode [ 69.607526][ T29] audit: type=1400 audit(1746755685.194:127681): avc: denied { name_bind } for pid=4406 comm="syz.5.184" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 69.629448][ T29] audit: type=1400 audit(1746755685.194:127682): avc: denied { node_bind } for pid=4406 comm="syz.5.184" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 69.662986][ T4404] loop1: detected capacity change from 0 to 8192 [ 69.672160][ T4407] netlink: 'syz.5.184': attribute type 13 has an invalid length. [ 69.739262][ T4410] loop2: detected capacity change from 0 to 1024 [ 69.759629][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.766952][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.786635][ T4410] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.806495][ T4410] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.814520][ T4410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 69.850913][ T4410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.906402][ T4410] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 69.925210][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.941818][ T4410] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.185: mark_inode_dirty error [ 69.955181][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.973589][ T4410] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.185: Invalid block bitmap block 3 in block_group 0 [ 69.987597][ T29] audit: type=1400 audit(1746755685.934:127683): avc: denied { write } for pid=4416 comm="syz.3.187" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.012969][ T4410] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.185: Invalid block bitmap block 3 in block_group 0 [ 70.028518][ T4410] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.185: Invalid block bitmap block 3 in block_group 0 [ 70.044972][ T4410] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 70.054911][ T4410] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.185: mark_inode_dirty error [ 70.069811][ T4407] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.078890][ T4407] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.087830][ T4407] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.096776][ T4407] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.104378][ T4410] Quota error (device loop2): write_blk: dquota write failed [ 70.113203][ T4410] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm syz.2.185: lblock 6 mapped to illegal pblock 1 (length 1) [ 70.131724][ T3393] lo speed is unknown, defaulting to 1000 [ 70.137508][ T3393] syz0: Port: 1 Link DOWN [ 70.142444][ T3374] lo speed is unknown, defaulting to 1000 [ 70.158013][ T4410] Quota error (device loop2): write_blk: dquota write failed [ 70.165488][ T4410] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 70.178953][ T4410] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.185: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.197298][ T4410] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 70.206374][ T4410] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.185: Failed to acquire dquot type 0 [ 70.228491][ T4410] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 49: comm syz.2.185: lblock 1 mapped to illegal pblock 49 (length 1) [ 70.266661][ T4410] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.185: Failed to acquire dquot type 0 [ 70.279110][ T4410] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 70.290090][ T4410] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #15: comm syz.2.185: mark_inode_dirty error [ 70.296457][ T4425] loop1: detected capacity change from 0 to 1024 [ 70.310637][ T4410] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 70.312816][ T4425] EXT4-fs: Ignoring removed orlov option [ 70.327222][ T4410] EXT4-fs (loop2): 1 orphan inode deleted [ 70.334210][ T4410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.363842][ T4425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.366546][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.391234][ T4435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.526268][ T4425] ================================================================== [ 70.534399][ T4425] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 70.542425][ T4425] [ 70.544769][ T4425] write to 0xffff8881073e36f8 of 4 bytes by task 4443 on cpu 1: [ 70.552412][ T4425] writeback_single_inode+0x14a/0x3e0 [ 70.557833][ T4425] sync_inode_metadata+0x5b/0x90 [ 70.562814][ T4425] generic_buffers_fsync_noflush+0xd9/0x120 [ 70.568750][ T4425] ext4_sync_file+0x1ab/0x690 [ 70.573478][ T4425] vfs_fsync_range+0x10a/0x130 [ 70.578278][ T4425] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.583954][ T4425] ext4_file_write_iter+0x383/0xf00 [ 70.589195][ T4425] iter_file_splice_write+0x5ef/0x970 [ 70.594593][ T4425] direct_splice_actor+0x153/0x2a0 [ 70.599721][ T4425] splice_direct_to_actor+0x30f/0x680 [ 70.605129][ T4425] do_splice_direct+0xda/0x150 [ 70.609921][ T4425] do_sendfile+0x380/0x640 [ 70.614372][ T4425] __x64_sys_sendfile64+0x105/0x150 [ 70.619603][ T4425] x64_sys_call+0xb39/0x2fb0 [ 70.624292][ T4425] do_syscall_64+0xd0/0x1a0 [ 70.628809][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.634722][ T4425] [ 70.637057][ T4425] read to 0xffff8881073e36f8 of 4 bytes by task 4425 on cpu 0: [ 70.644620][ T4425] vfs_fsync_range+0x9b/0x130 [ 70.649331][ T4425] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.654901][ T4425] ext4_file_write_iter+0x383/0xf00 [ 70.660117][ T4425] iter_file_splice_write+0x5ef/0x970 [ 70.665500][ T4425] direct_splice_actor+0x153/0x2a0 [ 70.670628][ T4425] splice_direct_to_actor+0x30f/0x680 [ 70.676010][ T4425] do_splice_direct+0xda/0x150 [ 70.680789][ T4425] do_sendfile+0x380/0x640 [ 70.685225][ T4425] __x64_sys_sendfile64+0x105/0x150 [ 70.690446][ T4425] x64_sys_call+0xb39/0x2fb0 [ 70.695054][ T4425] do_syscall_64+0xd0/0x1a0 [ 70.699569][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.705473][ T4425] [ 70.707803][ T4425] value changed: 0x00000038 -> 0x00000002 [ 70.713524][ T4425] [ 70.715861][ T4425] Reported by Kernel Concurrency Sanitizer on: [ 70.722051][ T4425] CPU: 0 UID: 0 PID: 4425 Comm: syz.1.188 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 70.734390][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 70.744465][ T4425] ================================================================== [ 70.753277][ T4448] loop2: detected capacity change from 0 to 512 [ 70.783626][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.797541][ T4448] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.052911][ T4425] ================================================================== [ 71.061038][ T4425] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 71.070283][ T4425] [ 71.072629][ T4425] write to 0xffff8881073e36f8 of 4 bytes by task 4443 on cpu 0: [ 71.080288][ T4425] writeback_single_inode+0x14a/0x3e0 [ 71.085696][ T4425] sync_inode_metadata+0x5b/0x90 [ 71.090671][ T4425] generic_buffers_fsync_noflush+0xd9/0x120 [ 71.096588][ T4425] ext4_sync_file+0x1ab/0x690 [ 71.101298][ T4425] vfs_fsync_range+0x10a/0x130 [ 71.106085][ T4425] ext4_buffered_write_iter+0x34f/0x3c0 [ 71.111654][ T4425] ext4_file_write_iter+0x383/0xf00 [ 71.116867][ T4425] iter_file_splice_write+0x5ef/0x970 [ 71.122264][ T4425] direct_splice_actor+0x153/0x2a0 [ 71.127383][ T4425] splice_direct_to_actor+0x30f/0x680 [ 71.132770][ T4425] do_splice_direct+0xda/0x150 [ 71.137547][ T4425] do_sendfile+0x380/0x640 [ 71.141992][ T4425] __x64_sys_sendfile64+0x105/0x150 [ 71.147212][ T4425] x64_sys_call+0xb39/0x2fb0 [ 71.151819][ T4425] do_syscall_64+0xd0/0x1a0 [ 71.156329][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.162232][ T4425] [ 71.164561][ T4425] read to 0xffff8881073e36f8 of 4 bytes by task 4425 on cpu 1: [ 71.172118][ T4425] generic_buffers_fsync_noflush+0x80/0x120 [ 71.178023][ T4425] ext4_sync_file+0x1ab/0x690 [ 71.182721][ T4425] vfs_fsync_range+0x10a/0x130 [ 71.187509][ T4425] ext4_buffered_write_iter+0x34f/0x3c0 [ 71.193074][ T4425] ext4_file_write_iter+0x383/0xf00 [ 71.198387][ T4425] iter_file_splice_write+0x5ef/0x970 [ 71.203775][ T4425] direct_splice_actor+0x153/0x2a0 [ 71.208909][ T4425] splice_direct_to_actor+0x30f/0x680 [ 71.214297][ T4425] do_splice_direct+0xda/0x150 [ 71.219068][ T4425] do_sendfile+0x380/0x640 [ 71.223508][ T4425] __x64_sys_sendfile64+0x105/0x150 [ 71.228820][ T4425] x64_sys_call+0xb39/0x2fb0 [ 71.233426][ T4425] do_syscall_64+0xd0/0x1a0 [ 71.237950][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.243853][ T4425] [ 71.246177][ T4425] value changed: 0x00000020 -> 0x00000002 [ 71.251896][ T4425] [ 71.254226][ T4425] Reported by Kernel Concurrency Sanitizer on: [ 71.260478][ T4425] CPU: 1 UID: 0 PID: 4425 Comm: syz.1.188 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 71.272817][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 71.282882][ T4425] ================================================================== [ 71.325480][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.360031][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.