last executing test programs: 3.872013013s ago: executing program 2 (id=117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 3.416530392s ago: executing program 2 (id=120): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x80, 0x7, 0x7, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1, {[@end, @ssrr={0x89, 0x17, 0xd2, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @multicast1]}, @lsrr={0x83, 0x7, 0x27, [@local]}, @timestamp_addr={0x44, 0x24, 0x2e, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0xe}, {@loopback}, {@loopback, 0xffffffff}, {@empty, 0x5}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') 2.664934267s ago: executing program 4 (id=127): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x50, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket(0x3, 0x4, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.896935372s ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180070972b0ff9228232536ccbef5c000000000000440000004400000004000000000000000100000d00000000010000000300000000000000000000030000000005000000010000000000000300000000050000"], 0x0, 0x60, 0x0, 0x0, 0x800000}, 0x28) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000024000000001011ee78000000000000000011004e2000109078c20c000100000000"], 0x0) (rerun: 64) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) 1.759140235s ago: executing program 1 (id=132): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x100) 1.730133285s ago: executing program 1 (id=134): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="c190a1ba754b38780ce8b3", 0xb}, {&(0x7f0000000280)="0eb2adcbad", 0x5}], 0x2}, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000800fe880000000200000000000000000101ac1414bb000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="d000000012a980e96dad61e2cda64a6c49a5d9fb4496a4b2ce124610500c36ca8e81ef948839b59392ae85e5f133a71d24f5bf09b7dfc831f40101494be95b6064cbdd38b2c89109a9e045efb562af3d9c74c53139e0aac8f749a2e57f452a308be3c83a7dea5f3548ab0e509dde84bea111ccf2c17c5730e22becd03804b629c8b851851bc3b50bdda5ee98e1b157be87984f8005874855d042b9055a760215a01c8d105d9746ea635c1c5d4bde7e9857545aabaaad3acbb420766fc08290f9c07821f6af0496b8422d6348cba18b7661f2eedd2d10b30b5277feff11c84ef33e0cf0459af465880135824b1ec18c535dc6974a5ace4071baf7fa3df4b9f4aad0d7310bbb98eaffbf63efc719fa8f68f159a02750f368192c78c304b8accaec138752", @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32=r7, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e2ee6990000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x60, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4c2f7f62ebf76857e45cd6970166943a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x24}, @NL80211_ATTR_PMKID={0x14, 0x55, "00f550a89b5ab66ccf6a732a0666fbfc"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_STATUS_CODE={0x32, 0x48, 0x3e}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r8 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r8, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) socket$rds(0x15, 0x5, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000bc0)={{r10}, "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"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r13, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x22, &(0x7f0000000240)=0xe9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r11) 1.50653216s ago: executing program 2 (id=135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0xfffffffe}, 0x50) r0 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) listen(0xffffffffffffffff, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000300)='./file0\x00', 0x20) socket(0x11, 0x2, 0x0) 1.50610608s ago: executing program 4 (id=136): socket(0x2, 0x80805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x35000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kyber_throttled\x00'}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1.441348151s ago: executing program 0 (id=137): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") 1.322478134s ago: executing program 3 (id=138): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x8001, 0x1, 0xc, 0x1}, {0x6, 0x1, 0x19, 0x8000000}, {0x26, 0x5, 0xf8, 0x1}, {0xf, 0xb, 0x8, 0x7ff}, {0xc9fe, 0x4, 0x2, 0x480000}, {0x9, 0x6, 0x5, 0x3}]}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) 1.126976008s ago: executing program 1 (id=139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="03000000e6223d39ff00", 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_read_part_table(0x611, &(0x7f00000007c0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060102000000000000000001000001140007800800064000000003080008400000003005000100060000000500050002e4ffff04000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x529d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x3c87, 0xffbb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) setresuid(0x0, 0xee01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0xfe) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000e42e77455753cfbb"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') 1.114800028s ago: executing program 3 (id=140): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e20, @multicast1}}}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYRES16=r3, @ANYRESHEX=r7, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f00000002c0)=""/76) syz_socket_connect_nvme_tcp() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 1.088865218s ago: executing program 0 (id=141): socketpair(0x21, 0xe, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) r4 = socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x420082) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xc8) dup3(r8, r7, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1b3b}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000340)=0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r2, r1, 0x0) 1.059610598s ago: executing program 4 (id=142): socket(0x2, 0x80805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x35000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kyber_throttled\x00'}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1.00303321s ago: executing program 0 (id=143): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) futex_waitv(&(0x7f0000001b40)=[{0x6, &(0x7f0000000380)=0x10000, 0x2}, {0x9, &(0x7f0000000440)=0x100000001, 0x2}, {0x7, &(0x7f0000000480)=0x2, 0x2}, {0x10, &(0x7f00000004c0)=0x954, 0x2}, {0x9, &(0x7f0000000500)=0xd03, 0x2}, {0x6, &(0x7f0000000540)=0xfffffffffffffff7, 0x2}, {0x8, &(0x7f0000000580)=0x4, 0x2}, {0x7fff, &(0x7f00000005c0)=0x2, 0x82}, {0x0, &(0x7f0000000680)=0xfffffffffffffffa, 0x82}, {0x7, &(0x7f00000006c0)=0x8, 0x82}, {0x6f, &(0x7f0000000740)=0x4, 0x82}, {0x2, &(0x7f0000000780)=0xd, 0x2}, {0x9, &(0x7f00000007c0)=0x8, 0x82}, {0x8, &(0x7f0000000800)=0xfffffffffffffffd, 0x82}, {0x401, &(0x7f0000000840)=0x4f, 0x2}, {0x6, &(0x7f0000000880)=0x3, 0x2}, {0x8, &(0x7f00000008c0)=0x3, 0x2}, {0x1, &(0x7f0000000900), 0x82}, {0x6, &(0x7f0000000940)=0xf1, 0x82}, {0x2, &(0x7f0000000980)=0x9, 0x2}, {0x40de, &(0x7f00000009c0)=0xad5, 0x2}, {0x7fffffffffffffff, &(0x7f0000000a00)=0x401, 0x82}, {0x4, &(0x7f0000000a40)=0xa, 0x2}, {0x0, &(0x7f0000000a80)=0x4c47, 0x2}, {0x1ce3a6ab, &(0x7f0000000ac0)=0x3ff, 0x82}, {0x401, &(0x7f0000000b00)=0x1ff, 0x82}, {0xff, &(0x7f0000000b40)=0x504c, 0x82}, {0x7ff, &(0x7f0000000b80)=0x2, 0x82}, {0x5, &(0x7f0000000bc0)=0x3, 0x82}, {0x1, &(0x7f0000000c00)=0x7fffffff, 0x82}, {0x9, &(0x7f0000000c40)=0xfffffffffffffff9, 0x2}, {0x47, &(0x7f0000000c80)=0x8000, 0x82}, {0x6, &(0x7f0000000cc0)=0x400, 0x2}, {0x2, &(0x7f0000000d00)=0x4, 0x82}, {0x18, &(0x7f0000000d40)=0x7, 0x2}, {0x5, &(0x7f0000000d80)=0x1, 0x82}, {0x4, &(0x7f0000000dc0)=0x8, 0x82}, {0x3, &(0x7f0000000e00)=0x7, 0x2}, {0x8c7, &(0x7f0000000e40)=0x4, 0x2}, {0xf95, &(0x7f0000000e80)=0x6}, {0xf370, &(0x7f0000000ec0)=0x3, 0x82}, {0x3ff, &(0x7f0000000f00)=0x1, 0x2}, {0x1, &(0x7f0000000f40)=0x1, 0x82}, {0x10001, &(0x7f0000000f80)=0x92, 0x2}, {0x40, &(0x7f0000000fc0)=0x1, 0x84}, {0x6, &(0x7f0000001000)=0xb400000000000, 0x82}, {0x7, &(0x7f0000002400)=0x1000, 0x82}, {0x0, &(0x7f0000001080)=0xc4, 0x82}, {0x792a4438, &(0x7f00000010c0)=0x17, 0x82}, {0xffff, &(0x7f0000001100)=0x7, 0x82}, {0x6, &(0x7f0000001140)=0x7f, 0x82}, {0xa88, &(0x7f0000001180)=0xffff, 0x2}, {0xd, &(0x7f00000011c0)=0x9, 0x2}, {0x7fff, &(0x7f0000001200)=0xc94, 0x82}, {0x2, &(0x7f0000001240)=0x300000000000, 0x82}, {0x8, &(0x7f0000001280)=0x9, 0x82}, {0xc, &(0x7f00000012c0)=0x400, 0x82}, {0x10, &(0x7f0000001300)=0x8, 0x2}, {0xd, &(0x7f0000001340)=0x1, 0x82}, {0x7f, &(0x7f0000001380)=0x4, 0x82}, {0x1, &(0x7f00000013c0)=0xce, 0x82}, {0xffffffffffffff80, &(0x7f0000001400)=0xa, 0x82}, {0x4, &(0x7f0000001440)=0x1, 0x2}, {0x5, &(0x7f0000001480)=0x53, 0x2}, {0x5, &(0x7f00000014c0)=0xfb33, 0x82}, {0x9, &(0x7f0000001500)=0xf, 0x2}, {0x4, &(0x7f0000001540)=0x9, 0x2}, {0x7, &(0x7f0000001580)=0x7, 0x82}, {0x3, &(0x7f00000015c0)=0xb2}, {0x1c9428c8, &(0x7f0000001600)=0xa, 0x2}, {0xfb84142, &(0x7f0000001640)=0x6, 0xf891ff9d59be1455}, {0x8, &(0x7f0000001680)=0x7, 0x82}, {0x8, &(0x7f00000016c0)=0x101, 0x82}, {0x6, &(0x7f0000001700)=0x4, 0x82}, {0xffffffffffffffff, &(0x7f0000001740)=0x5, 0x82}, {0x9, &(0x7f0000001780)=0xd, 0x82}, {0x5, &(0x7f00000017c0)=0x1ff, 0x82}, {0x8, &(0x7f0000001800)=0x4}, {0x6, &(0x7f0000001840)=0xffff, 0x82}, {0x9, &(0x7f0000001880)=0x3, 0x82}, {0x6, &(0x7f00000018c0)=0x9, 0x82}, {0x1, &(0x7f0000001900)=0x7bf6, 0x2}, {0x5, &(0x7f0000001940)=0x4, 0x82}, {0xb49, &(0x7f0000001980)=0x1, 0x82}, {0x84b6, &(0x7f00000019c0)=0x4, 0x82}, {0x1, &(0x7f0000001a00)=0x1, 0x2}, {0x15, &(0x7f0000001a40), 0x2}, {0xe, &(0x7f0000001a80)=0xb04b, 0x82}, {0x0, &(0x7f0000001ac0)=0x80, 0x2}, {0xb, &(0x7f0000001b00)=0x1, 0x82}], 0x5a, 0x0, &(0x7f00000023c0)={0x77359400}, 0x1) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x890b, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x29, 0x6, [0x4, 0x9, 0x4, 0x5, 0x7, 0xf4]}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x4f}, &(0x7f0000000300)=0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30400c00000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x4805) 992.89721ms ago: executing program 3 (id=144): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x20, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) (fail_nth: 4) 610.704018ms ago: executing program 0 (id=145): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 610.104358ms ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(0x0, 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000780)={0x80000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf251500000008000100", @ANYRES32, @ANYBLOB="0c0014006261746164763000080001"], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000c0) (fail_nth: 2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 543.292939ms ago: executing program 3 (id=147): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 526.583169ms ago: executing program 2 (id=148): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x3, 0x7, 0x1ff, 0x6, 0x35}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 487.68268ms ago: executing program 0 (id=149): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x23}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000026c0)='+\x00\x00\x00\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000440)={[], [{@obj_role={'obj_role', 0x3d, '\x96\x95\x05}C\xe3\\\x9fT\x1aq\xc3\xce\xb0\x8eY6\xa7X4\x04fr\xa4\xb6y\xf2\xa1\xe4\xe6\xa7\xd7jF\xddQ\xe5\x1c\n\x19\xe6B\x17\xd0\xd3\xe2{\xbd66\x0e\xa6\x11\x06$0\xab\xbf~;\x00\x00\x00\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, '[\\,'}}, {@permit_directio}]}, 0xfb, 0x542, &(0x7f0000001cc0)="$eJzs3cFvI1cZAPBvvPFudjfbpMABKrUUWrRbwdqbhrYRh1IkBKdKiHJfQuJEUZw4ip12E1WQ/QuQUAVInMqFCxJ/ABJaiQtHQKoEZ5CKQAi2IMEBOmjscZI648RbnHjX+f2k2XnvjWe+72XzxjP20ySAc+vpiHglIt5P0/S5iJjO20v5EnudJXvde/ffXMyWJNL0tb8lkeRt3WMl+fpqvttkRHz9qxHfyje8/Zu0LSs3d3bXFur12la+T7W1vllt7uzeXF1fWKmt1Dbm5mZfnH9p/oX5W0Pp57WIePnLf/r+d3/ylZd/8bk3/nj7Lze+naU1lW8/3I8HNHHcxk7Xy5cme3bY+pDBHkZZf8rdyuXB9rl7ivkAANBfdo3/kYj4dEQ8F9Nx4fjLWQAAAOARlH5xKv6TRKTFLvZpBwAAAB4hpfYc2KRUyecCTEWpVKl05vB+LK6U6o1m67PLje2Npc5c2Zkol5ZX67Vb+VzhmSgnWX22XT6oP99Tn4uIxyPirenL7XplsVFfGvWHHwAAAHBOXO25///ndOf+HwAAABgzM6NOAAAAADh17v8BAABg/Ln/BwAAgLH2tVdfzZa0+/evl17f2V5rvH5zqdZcq6xvL1YWG1ublZVGY6X9zL71k45XbzQ2Px8b23eqrVqzVW3u7N5eb2xvtG6vxuSZdAgAAAA44vFP3vt9EhF7X7jcXjIXR50UcCYm9ktJvi4Y/X94rLN+94ySAs7EhQFe8+6l4nbXCfBom+ht6DPWgfFTHnUCwMglJ2zvO3nn1/n6U8PNBwAAGL7rnyj+/v+k+4GIvdIZpAecIoMYzq+e7//T6VElApy59vf/g07kcbEAY6U80AxAYJz939//93UtX6fpAycFAAAM1VR7SUqV/OO9qSiVKpXOVftMlJPl1XrtVkQ8FhG/my5fyuqz7T2TAeYIAAAAAAAAAAAAAAAAAAAAAAAAAADRfip3EikAAAAw1iJKf05+2XmW//XpZ6d6Px+4mPy7/SeBL0bEGz967Qd3Flqtrdms/e/77a0f5u3Pj+ITDAAAAKBX9z69vf7XqLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNy8d//Nxe4ywMsvDyvuX78UETNF8Sdisr2ejHJEXPlHEhOH9ksi4sIQ4u/djYiPF8VPsrT2QxbFH8YP4YT4MZP/FIriXx1CfDjP7mXnn1eKxl8pnm6vi8ffRMQH6h9W//Nf7J//LvQZ/9cGjPHEOz+r9o1/N+KJieLzTzd+0if+MwPG/+Y3dnf7bUvfjrjeff9pn/EORzgoVVvrm9Xmzu7N1fWFldpKbWNubvbF+ZfmX5i/VV1erdfyfwtjfO/Jn79/XP+vFL7/JXk2/fv/bMHxOu9Jlz7Q9t937tz/aLeydzT+jWcK4v/qx/krjsYv5XE+k5ez7de75b1O+bCnfvrbp47r/9JB/8sP8v9/o99Bex0ZKE8O+qsDAJyC5s7u2kK9Xtsa20J2l/4QpDEOheSthyKN4RW+M9QDpmmaZmOqYNO9iBjkOEkMuael4nwOCn3PAKM+MwEAAMN2cNE/6kwAAAAAAAAAAAAAAAAAAADg/DqLp6z1xjx4BHIyjEdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxf8CAAD//6gJ2yk=") sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) syz_io_uring_complete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 270.400234ms ago: executing program 3 (id=150): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000010000002a03000000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffff3, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 269.707734ms ago: executing program 2 (id=151): r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x1, 0xd10, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xb, 0x447}, 0xc001, 0x10000, 0x0, 0x5, 0x6, 0x4, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) statfs(&(0x7f0000000000)='./file1\x00', 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x402c542c, &(0x7f0000000000)=0xff) r7 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x1d}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83260000c6010500200012800b00010067656e6576650000100002800400060008000100010000001400030067656e6500250004000000080023000101000008000d000600"/84], 0x6c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000880) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r1, r0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r10, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r12 = getgid() keyctl$chown(0x4, r7, r9, r12) r13 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r15 = getgid() setsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000200)={r14, r9, r15}, 0xc) socket$isdn_base(0x22, 0x3, 0x0) 186.131106ms ago: executing program 1 (id=152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r4, &(0x7f0000001900)=""/4079, 0xfef, 0x66) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r7}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}, 0x416e}}, 0x1, 0x0, 0xd3c, 0x6, 0x3}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000880)={r8, 0x1000, "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"}, &(0x7f0000000240)=0x1008) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0xf7, 0x3, @vifc_lcl_ifindex=r7, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) 184.400336ms ago: executing program 3 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10023, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_ROPEN(r3, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x2, 0x3, 0x6}, 0x3}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) r8 = open(&(0x7f0000000000)='./bus\x00', 0x10d8c1, 0x170) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newsa={0x160, 0x10, 0x713, 0x80ff, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x4}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x6e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x110, 0x60, "210466d38547aa140db9a200000000c538c7cb7a0e2145f5a3dc7f3cc31c64f7ac3e"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x2000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f0141d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000600)={0x0, 0x6, 0x6, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001d00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000001880)={0x0, 0x0, {0x2, @usage=0x9, r14, 0x7, 0x9, 0x9, 0x2, 0xffff00000, 0x19, @usage=0x2, 0x6, 0xf55, [0x7, 0x7, 0x3, 0xb, 0x9, 0x2]}, {0x7, @struct={0x8, 0x2}, r15, 0x4, 0x4, 0x3af, 0x10001, 0xd, 0x28, @usage=0x100000000, 0x6, 0x7ff, [0x8000000000000001, 0x3, 0x0, 0x7, 0x1, 0x9]}, {0x5, @usage=0x3, r16, 0xf1, 0x2, 0x8, 0x9, 0x400, 0x80, @struct={0x6, 0x401}, 0x2, 0x9, [0x2, 0x4c4, 0x80, 0x9, 0x0, 0xe]}, {0x2, 0x400, 0x84}}) 151.789697ms ago: executing program 4 (id=154): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 109.860907ms ago: executing program 0 (id=155): pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r5, 0xfffffffffffffc01, 0x0) 7.083459ms ago: executing program 4 (id=156): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setreuid(0xee01, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 6.722409ms ago: executing program 1 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0xfffffffe}, 0x50) r0 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) listen(0xffffffffffffffff, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000300)='./file0\x00', 0x20) socket(0x11, 0x2, 0x0) 0s ago: executing program 4 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0xff, 0x0, 0x3, 0x8f}) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 33.471981][ T29] audit: type=1400 audit(1757589170.679:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.473146][ T3294] cgroup: Unknown subsys name 'net' [ 33.494761][ T29] audit: type=1400 audit(1757589170.679:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.522120][ T29] audit: type=1400 audit(1757589170.709:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.663536][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.669874][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.841372][ T29] audit: type=1400 audit(1757589171.049:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.865154][ T29] audit: type=1400 audit(1757589171.049:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.885851][ T29] audit: type=1400 audit(1757589171.059:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.894560][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.906286][ T29] audit: type=1400 audit(1757589171.059:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.935079][ T29] audit: type=1400 audit(1757589171.059:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.960005][ T29] audit: type=1400 audit(1757589171.059:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.964518][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.983289][ T29] audit: type=1400 audit(1757589171.129:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.346484][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.365858][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.389243][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.474286][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.481516][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.488881][ T3303] bridge_slave_0: entered allmulticast mode [ 35.495359][ T3303] bridge_slave_0: entered promiscuous mode [ 35.512518][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.519656][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.526964][ T3303] bridge_slave_1: entered allmulticast mode [ 35.533518][ T3303] bridge_slave_1: entered promiscuous mode [ 35.551824][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.559002][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.566149][ T3309] bridge_slave_0: entered allmulticast mode [ 35.572574][ T3309] bridge_slave_0: entered promiscuous mode [ 35.580940][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.599285][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.607835][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.614992][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.622768][ T3309] bridge_slave_1: entered allmulticast mode [ 35.629219][ T3309] bridge_slave_1: entered promiscuous mode [ 35.644411][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.656085][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.663218][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.670342][ T3307] bridge_slave_0: entered allmulticast mode [ 35.677009][ T3307] bridge_slave_0: entered promiscuous mode [ 35.689274][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.696572][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.703750][ T3307] bridge_slave_1: entered allmulticast mode [ 35.710220][ T3307] bridge_slave_1: entered promiscuous mode [ 35.726391][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.753850][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.778078][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.788536][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.804029][ T3303] team0: Port device team_slave_0 added [ 35.810734][ T3303] team0: Port device team_slave_1 added [ 35.824724][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.863203][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.870281][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.877452][ T3314] bridge_slave_0: entered allmulticast mode [ 35.883875][ T3314] bridge_slave_0: entered promiscuous mode [ 35.906216][ T3307] team0: Port device team_slave_0 added [ 35.911995][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.919212][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.926612][ T3314] bridge_slave_1: entered allmulticast mode [ 35.933297][ T3314] bridge_slave_1: entered promiscuous mode [ 35.940097][ T3309] team0: Port device team_slave_0 added [ 35.946196][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.953178][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.979101][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.990726][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.997751][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.023709][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.035064][ T3307] team0: Port device team_slave_1 added [ 36.040890][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.048123][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.055254][ T3304] bridge_slave_0: entered allmulticast mode [ 36.061586][ T3304] bridge_slave_0: entered promiscuous mode [ 36.074025][ T3309] team0: Port device team_slave_1 added [ 36.092503][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.099724][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.106923][ T3304] bridge_slave_1: entered allmulticast mode [ 36.113646][ T3304] bridge_slave_1: entered promiscuous mode [ 36.126348][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.150913][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.166428][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.173415][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.199375][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.210548][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.217542][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.243496][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.270119][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.277129][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.303121][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.316519][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.323510][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.349593][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.364242][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.380048][ T3314] team0: Port device team_slave_0 added [ 36.403663][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.419912][ T3303] hsr_slave_0: entered promiscuous mode [ 36.426091][ T3303] hsr_slave_1: entered promiscuous mode [ 36.432965][ T3314] team0: Port device team_slave_1 added [ 36.441433][ T3307] hsr_slave_0: entered promiscuous mode [ 36.447526][ T3307] hsr_slave_1: entered promiscuous mode [ 36.453479][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 36.459203][ T3307] Cannot create hsr debugfs directory [ 36.470413][ T3304] team0: Port device team_slave_0 added [ 36.488388][ T3304] team0: Port device team_slave_1 added [ 36.525835][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.532863][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.558876][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.570176][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.577179][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.603158][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.614315][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.621248][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.647166][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.659795][ T3309] hsr_slave_0: entered promiscuous mode [ 36.665882][ T3309] hsr_slave_1: entered promiscuous mode [ 36.671770][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.677527][ T3309] Cannot create hsr debugfs directory [ 36.691149][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.698205][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.724145][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.790565][ T3314] hsr_slave_0: entered promiscuous mode [ 36.796804][ T3314] hsr_slave_1: entered promiscuous mode [ 36.802690][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.808490][ T3314] Cannot create hsr debugfs directory [ 36.816036][ T3304] hsr_slave_0: entered promiscuous mode [ 36.822095][ T3304] hsr_slave_1: entered promiscuous mode [ 36.828250][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.834012][ T3304] Cannot create hsr debugfs directory [ 36.999854][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.014118][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.023127][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.031776][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.054836][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.065122][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.074734][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.093289][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.114263][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.134436][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.143279][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.151979][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.183784][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.195806][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.205808][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.214868][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.238212][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.267272][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.276171][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.291279][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.300007][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.311420][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.334259][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.341340][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.350286][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.357454][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.391832][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.416535][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.445793][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.462605][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.475116][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.482274][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.494299][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.504042][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.516229][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.523414][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.541627][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.548783][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.557787][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.564860][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.589366][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.599831][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.612293][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.619379][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.629789][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.636894][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.657287][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.668135][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.693645][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.708673][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.730320][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.737418][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.748029][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.755162][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.779620][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.790025][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.824821][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.880365][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.917457][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.968856][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.982096][ T3303] veth0_vlan: entered promiscuous mode [ 37.992171][ T3303] veth1_vlan: entered promiscuous mode [ 38.023225][ T3304] veth0_vlan: entered promiscuous mode [ 38.043847][ T3304] veth1_vlan: entered promiscuous mode [ 38.066949][ T3303] veth0_macvtap: entered promiscuous mode [ 38.104360][ T3304] veth0_macvtap: entered promiscuous mode [ 38.112571][ T3304] veth1_macvtap: entered promiscuous mode [ 38.144379][ T3303] veth1_macvtap: entered promiscuous mode [ 38.151650][ T3314] veth0_vlan: entered promiscuous mode [ 38.171722][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.184289][ T3309] veth0_vlan: entered promiscuous mode [ 38.198658][ T3307] veth0_vlan: entered promiscuous mode [ 38.209965][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.220113][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.231272][ T3309] veth1_vlan: entered promiscuous mode [ 38.239605][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.249525][ T3307] veth1_vlan: entered promiscuous mode [ 38.255804][ T3314] veth1_vlan: entered promiscuous mode [ 38.265072][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.283600][ T3309] veth0_macvtap: entered promiscuous mode [ 38.291796][ T3309] veth1_macvtap: entered promiscuous mode [ 38.300025][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318844][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.337565][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.346614][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357733][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.365186][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.376875][ T3314] veth0_macvtap: entered promiscuous mode [ 38.384296][ T3314] veth1_macvtap: entered promiscuous mode [ 38.395530][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.417375][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.427126][ T3307] veth0_macvtap: entered promiscuous mode [ 38.442102][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.454051][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.469551][ T3307] veth1_macvtap: entered promiscuous mode [ 38.476125][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 38.476139][ T29] audit: type=1400 audit(1757589175.689:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.482963][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.506377][ T29] audit: type=1400 audit(1757589175.689:91): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.525742][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.551270][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.559331][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.588487][ T29] audit: type=1400 audit(1757589175.759:92): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.590928][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.613986][ T29] audit: type=1400 audit(1757589175.789:93): avc: denied { create } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.614017][ T29] audit: type=1400 audit(1757589175.789:94): avc: denied { prog_load } for pid=3476 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.614107][ T29] audit: type=1400 audit(1757589175.789:95): avc: denied { bpf } for pid=3476 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.708198][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.740763][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.760872][ T29] audit: type=1400 audit(1757589175.829:96): avc: denied { create } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.777584][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.781268][ T29] audit: type=1400 audit(1757589175.829:97): avc: denied { perfmon } for pid=3477 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.808888][ T29] audit: type=1400 audit(1757589175.829:98): avc: denied { read write } for pid=3477 comm="syz.2.3" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.832915][ T29] audit: type=1400 audit(1757589175.829:99): avc: denied { open } for pid=3477 comm="syz.2.3" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.843181][ T3483] process 'syz.2.6' launched './file1' with NULL argv: empty string added [ 38.868120][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.894138][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.904540][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.970103][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.005198][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.015297][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.026959][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.033470][ T3494] loop3: detected capacity change from 0 to 512 [ 39.036796][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066838][ T3494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.080041][ T3494] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.116040][ T3494] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4: invalid indirect mapped block 4294967295 (level 0) [ 39.132553][ T3494] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4: invalid indirect mapped block 4294967295 (level 1) [ 39.134318][ T3500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 39.157857][ T3494] EXT4-fs (loop3): 1 orphan inode deleted [ 39.163856][ T3494] EXT4-fs (loop3): 1 truncate cleaned up [ 39.169815][ T3500] loop2: detected capacity change from 0 to 1024 [ 39.177123][ T3500] EXT4-fs: Ignoring removed bh option [ 39.180534][ T3494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.204206][ T3500] EXT4-fs: inline encryption not supported [ 39.211928][ T3500] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.225141][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.226241][ T3500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.244277][ T3500] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.9: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.261034][ T3500] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.9: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.284446][ T3500] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.9: Failed to acquire dquot type 0 [ 39.298119][ T3500] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 39.309121][ T3500] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.9: mark_inode_dirty error [ 39.321876][ T3500] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.333475][ T3500] EXT4-fs (loop2): 1 orphan inode deleted [ 39.340267][ T3500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.353252][ T85] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.368415][ T85] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 39.370801][ T3506] loop3: detected capacity change from 0 to 2048 [ 39.407154][ T3500] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.9: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.425295][ T3504] loop4: detected capacity change from 0 to 128 [ 39.459976][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.470418][ T3506] loop3: p1 < > p4 [ 39.479925][ T3506] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.548845][ T2994] loop3: p1 < > p4 [ 39.558297][ T2994] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.567722][ T3515] usb usb1: usbfs: process 3515 (syz.2.13) did not claim interface 4 before use [ 39.632174][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.633825][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.702702][ T3528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.712145][ T3528] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.862528][ T3534] usb usb1: usbfs: process 3534 (syz.0.17) did not claim interface 4 before use [ 39.983120][ T3539] loop3: detected capacity change from 0 to 512 [ 40.045599][ T3539] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.15: error while reading EA inode 32 err=-116 [ 40.066073][ T3539] EXT4-fs (loop3): Remounting filesystem read-only [ 40.072659][ T3539] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.085938][ T3539] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 40.096103][ T3539] EXT4-fs (loop3): 1 orphan inode deleted [ 40.102834][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.119048][ T3539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.235059][ T3544] loop1: detected capacity change from 0 to 128 [ 40.287047][ T3543] loop2: detected capacity change from 0 to 1024 [ 40.316653][ T3543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.364286][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.377542][ T3544] syzkaller1: entered promiscuous mode [ 40.383060][ T3544] syzkaller1: entered allmulticast mode [ 40.413032][ T3550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 40.534377][ T3528] syz.4.16 (3528) used greatest stack depth: 10664 bytes left [ 40.695970][ T3562] SELinux: failed to load policy [ 40.714742][ C1] hrtimer: interrupt took 32769 ns [ 40.721153][ T3569] loop3: detected capacity change from 0 to 512 [ 40.729315][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 40.740285][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.747759][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.765538][ T3569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.766081][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.782948][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.804676][ T3569] EXT4-fs (loop3): 1 truncate cleaned up [ 40.824857][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.846699][ T3574] loop4: detected capacity change from 0 to 164 [ 40.874213][ T3574] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 40.876858][ T3569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.972830][ T3569] mmap: syz.3.26 (3569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.989199][ T3576] FAULT_INJECTION: forcing a failure. [ 40.989199][ T3576] name failslab, interval 1, probability 0, space 0, times 1 [ 41.001895][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.001934][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.002024][ T3576] Call Trace: [ 41.002032][ T3576] [ 41.002041][ T3576] __dump_stack+0x1d/0x30 [ 41.002118][ T3576] dump_stack_lvl+0xe8/0x140 [ 41.002143][ T3576] dump_stack+0x15/0x1b [ 41.002247][ T3576] should_fail_ex+0x265/0x280 [ 41.002278][ T3576] should_failslab+0x8c/0xb0 [ 41.002307][ T3576] kmem_cache_alloc_node_noprof+0x57/0x320 [ 41.002337][ T3576] ? __alloc_skb+0x101/0x320 [ 41.002434][ T3576] ? __rtnl_unlock+0x95/0xb0 [ 41.002457][ T3576] __alloc_skb+0x101/0x320 [ 41.002483][ T3576] netlink_ack+0xfd/0x500 [ 41.002578][ T3576] netlink_rcv_skb+0x192/0x220 [ 41.002601][ T3576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 41.002656][ T3576] rtnetlink_rcv+0x1c/0x30 [ 41.002721][ T3576] netlink_unicast+0x5bd/0x690 [ 41.002751][ T3576] netlink_sendmsg+0x58b/0x6b0 [ 41.002832][ T3576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.002859][ T3576] __sock_sendmsg+0x142/0x180 [ 41.002893][ T3576] ____sys_sendmsg+0x31e/0x4e0 [ 41.002950][ T3576] ___sys_sendmsg+0x17b/0x1d0 [ 41.003025][ T3576] __x64_sys_sendmsg+0xd4/0x160 [ 41.003056][ T3576] x64_sys_call+0x191e/0x2ff0 [ 41.003149][ T3576] do_syscall_64+0xd2/0x200 [ 41.003181][ T3576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.003205][ T3576] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.003263][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.003351][ T3576] RIP: 0033:0x7faa84d8eba9 [ 41.003365][ T3576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.003382][ T3576] RSP: 002b:00007faa837f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.003400][ T3576] RAX: ffffffffffffffda RBX: 00007faa84fd5fa0 RCX: 00007faa84d8eba9 [ 41.003412][ T3576] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 41.003449][ T3576] RBP: 00007faa837f7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.003461][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.003472][ T3576] R13: 00007faa84fd6038 R14: 00007faa84fd5fa0 R15: 00007ffd9192d908 [ 41.003491][ T3576] [ 41.261958][ T3580] loop4: detected capacity change from 0 to 1024 [ 41.274092][ T3580] ======================================================= [ 41.274092][ T3580] WARNING: The mand mount option has been deprecated and [ 41.274092][ T3580] and is ignored by this kernel. Remove the mand [ 41.274092][ T3580] option from the mount to silence this warning. [ 41.274092][ T3580] ======================================================= [ 41.325843][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.344222][ T3580] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.31: Allocating blocks 497-513 which overlap fs metadata [ 41.359924][ T3580] EXT4-fs (loop4): pa ffff8881071fa070: logic 256, phys. 369, len 9 [ 41.368082][ T3580] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 41.378301][ T3580] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 41.457093][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.533525][ T3589] loop4: detected capacity change from 0 to 512 [ 41.557655][ T3589] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.35: Failed to acquire dquot type 1 [ 41.576050][ T3593] program syz.0.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.588856][ T3589] EXT4-fs (loop4): 1 truncate cleaned up [ 41.596546][ T3589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.610192][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 41.622359][ T3589] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.679806][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.738782][ T3605] loop0: detected capacity change from 0 to 1024 [ 41.761246][ T3605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.854816][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.955120][ T3603] FAULT_INJECTION: forcing a failure. [ 41.955120][ T3603] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.968421][ T3603] CPU: 1 UID: 0 PID: 3603 Comm: syz.4.39 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.968451][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.968494][ T3603] Call Trace: [ 41.968500][ T3603] [ 41.968507][ T3603] __dump_stack+0x1d/0x30 [ 41.968528][ T3603] dump_stack_lvl+0xe8/0x140 [ 41.968563][ T3603] dump_stack+0x15/0x1b [ 41.968579][ T3603] should_fail_ex+0x265/0x280 [ 41.968683][ T3603] should_fail_alloc_page+0xf2/0x100 [ 41.968715][ T3603] __alloc_frozen_pages_noprof+0xff/0x360 [ 41.968761][ T3603] alloc_pages_mpol+0xb3/0x250 [ 41.968828][ T3603] folio_alloc_mpol_noprof+0x39/0x80 [ 41.968945][ T3603] shmem_get_folio_gfp+0x3cf/0xd60 [ 41.968997][ T3603] shmem_fault+0xf6/0x250 [ 41.969021][ T3603] __do_fault+0xbc/0x200 [ 41.969056][ T3603] handle_mm_fault+0xf78/0x2c20 [ 41.969090][ T3603] do_user_addr_fault+0x3fe/0x1090 [ 41.969185][ T3603] ? alloc_pages_mpol+0x201/0x250 [ 41.969272][ T3603] exc_page_fault+0x62/0xa0 [ 41.969304][ T3603] asm_exc_page_fault+0x26/0x30 [ 41.969360][ T3603] RIP: 0010:iovec_from_user+0xf5/0x210 [ 41.969458][ T3603] Code: 4c 89 f7 4c 89 e6 e8 da ee 6a ff 4d 39 e6 0f 82 d0 00 00 00 4d 39 ee 0f 87 c7 00 00 00 0f 01 cb 0f ae e8 49 ff cf 4c 8b 34 24 <49> 8b 6c 24 08 4d 8b 2c 24 31 ff 48 89 ee e8 28 f1 6a ff 48 85 ed [ 41.969476][ T3603] RSP: 0018:ffffc9000290bc10 EFLAGS: 00050296 [ 41.969491][ T3603] RAX: ffffffff81ed0eb7 RBX: ffffc9000290bd00 RCX: ffff88811a86d280 [ 41.969506][ T3603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811a968ff8 [ 41.969579][ T3603] RBP: 0000000000000000 R08: 000188811a968fff R09: 0000000000000000 [ 41.969593][ T3603] R10: 0000000000000006 R11: 0000000000000000 R12: 0000200000122000 [ 41.969608][ T3603] R13: ffff88811a969000 R14: ffff88811a969000 R15: 0000000000000139 [ 41.969628][ T3603] ? iovec_from_user+0x137/0x210 [ 41.969673][ T3603] process_vm_rw+0x15b/0x960 [ 41.969718][ T3603] ? _parse_integer+0x27/0x40 [ 41.969745][ T3603] ? kstrtoull+0x111/0x140 [ 41.969780][ T3603] ? __fget_files+0x184/0x1c0 [ 41.969864][ T3603] ? fput+0x8f/0xc0 [ 41.969899][ T3603] __x64_sys_process_vm_writev+0x78/0x90 [ 41.969953][ T3603] x64_sys_call+0x2a7c/0x2ff0 [ 41.970000][ T3603] do_syscall_64+0xd2/0x200 [ 41.970035][ T3603] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.970124][ T3603] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.970155][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.970176][ T3603] RIP: 0033:0x7faa84d8eba9 [ 41.970191][ T3603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.970239][ T3603] RSP: 002b:00007faa837f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 41.970269][ T3603] RAX: ffffffffffffffda RBX: 00007faa84fd5fa0 RCX: 00007faa84d8eba9 [ 41.970340][ T3603] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000001f [ 41.970351][ T3603] RBP: 00007faa837f7090 R08: 000000000000023a R09: 0000000000000000 [ 41.970403][ T3603] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 41.970415][ T3603] R13: 00007faa84fd6038 R14: 00007faa84fd5fa0 R15: 00007ffd9192d908 [ 41.970457][ T3603] [ 42.354139][ T3633] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 42.417710][ T3638] loop4: detected capacity change from 0 to 1024 [ 42.457293][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.515766][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 42.519432][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.563392][ T3657] netlink: 52 bytes leftover after parsing attributes in process `syz.4.50'. [ 42.713154][ T3668] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 42.732855][ T1035] IPVS: starting estimator thread 0... [ 42.806302][ T3680] FAULT_INJECTION: forcing a failure. [ 42.806302][ T3680] name failslab, interval 1, probability 0, space 0, times 0 [ 42.819000][ T3680] CPU: 0 UID: 0 PID: 3680 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.819031][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.819046][ T3680] Call Trace: [ 42.819054][ T3680] [ 42.819090][ T3680] __dump_stack+0x1d/0x30 [ 42.819119][ T3680] dump_stack_lvl+0xe8/0x140 [ 42.819138][ T3680] dump_stack+0x15/0x1b [ 42.819154][ T3680] should_fail_ex+0x265/0x280 [ 42.819178][ T3680] should_failslab+0x8c/0xb0 [ 42.819263][ T3680] __kmalloc_noprof+0xa5/0x3e0 [ 42.819319][ T3680] ? hash_netport4_add+0x74b/0x1700 [ 42.819358][ T3680] hash_netport4_add+0x74b/0x1700 [ 42.819493][ T3680] ? hash_netport4_add+0x66/0x1700 [ 42.819542][ T3680] ? ip_set_range_to_cidr+0xe6/0x100 [ 42.819644][ T3680] hash_netport4_uadt+0x862/0x970 [ 42.819679][ T3680] ? __pfx_hash_netport4_add+0x10/0x10 [ 42.819799][ T3680] call_ad+0xd9/0x630 [ 42.819837][ T3680] ? __nla_parse+0x40/0x60 [ 42.819882][ T3680] ip_set_ad+0x5c0/0x690 [ 42.819921][ T3680] ip_set_uadd+0x41/0x50 [ 42.819948][ T3680] nfnetlink_rcv_msg+0x4c3/0x590 [ 42.820014][ T3680] netlink_rcv_skb+0x123/0x220 [ 42.820043][ T3680] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 42.820075][ T3680] nfnetlink_rcv+0x16b/0x1690 [ 42.820120][ T3680] ? nlmon_xmit+0x4f/0x60 [ 42.820148][ T3680] ? consume_skb+0x49/0x150 [ 42.820214][ T3680] ? nlmon_xmit+0x4f/0x60 [ 42.820247][ T3680] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 42.820282][ T3680] ? __dev_queue_xmit+0x1200/0x2000 [ 42.820334][ T3680] ? __dev_queue_xmit+0x182/0x2000 [ 42.820381][ T3680] ? ref_tracker_free+0x37d/0x3e0 [ 42.820410][ T3680] ? __netlink_deliver_tap+0x4dc/0x500 [ 42.820500][ T3680] netlink_unicast+0x5bd/0x690 [ 42.820531][ T3680] netlink_sendmsg+0x58b/0x6b0 [ 42.820564][ T3680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.820687][ T3680] __sock_sendmsg+0x142/0x180 [ 42.820726][ T3680] ____sys_sendmsg+0x31e/0x4e0 [ 42.820754][ T3680] ___sys_sendmsg+0x17b/0x1d0 [ 42.820805][ T3680] __x64_sys_sendmsg+0xd4/0x160 [ 42.820903][ T3680] x64_sys_call+0x191e/0x2ff0 [ 42.820930][ T3680] do_syscall_64+0xd2/0x200 [ 42.820964][ T3680] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.820987][ T3680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.821086][ T3680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.821127][ T3680] RIP: 0033:0x7faa84d8eba9 [ 42.821150][ T3680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.821218][ T3680] RSP: 002b:00007faa837f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.821236][ T3680] RAX: ffffffffffffffda RBX: 00007faa84fd5fa0 RCX: 00007faa84d8eba9 [ 42.821249][ T3680] RDX: 00000000000000c4 RSI: 0000200000000280 RDI: 0000000000000008 [ 42.821261][ T3680] RBP: 00007faa837f7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.821272][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.821283][ T3680] R13: 00007faa84fd6038 R14: 00007faa84fd5fa0 R15: 00007ffd9192d908 [ 42.821336][ T3680] [ 43.120749][ T3670] IPVS: using max 2016 ests per chain, 100800 per kthread [ 43.144805][ T3680] syz.4.58 (3680) used greatest stack depth: 9544 bytes left [ 43.177838][ T3685] FAULT_INJECTION: forcing a failure. [ 43.177838][ T3685] name failslab, interval 1, probability 0, space 0, times 0 [ 43.190539][ T3685] CPU: 0 UID: 0 PID: 3685 Comm: syz.4.60 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.190570][ T3685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.190593][ T3685] Call Trace: [ 43.190599][ T3685] [ 43.190606][ T3685] __dump_stack+0x1d/0x30 [ 43.190626][ T3685] dump_stack_lvl+0xe8/0x140 [ 43.190645][ T3685] dump_stack+0x15/0x1b [ 43.190666][ T3685] should_fail_ex+0x265/0x280 [ 43.190696][ T3685] should_failslab+0x8c/0xb0 [ 43.190726][ T3685] kmem_cache_alloc_noprof+0x50/0x310 [ 43.190761][ T3685] ? mas_alloc_nodes+0x265/0x520 [ 43.190803][ T3685] mas_alloc_nodes+0x265/0x520 [ 43.190849][ T3685] mas_preallocate+0x33e/0x520 [ 43.190893][ T3685] __split_vma+0x240/0x650 [ 43.190926][ T3685] ? mas_find+0x5d5/0x700 [ 43.190983][ T3685] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 43.191020][ T3685] mmap_region+0x53f/0x1630 [ 43.191055][ T3685] ? mntput_no_expire+0x6f/0x460 [ 43.191097][ T3685] ? mntput+0x4b/0x80 [ 43.191153][ T3685] do_mmap+0x9b3/0xbe0 [ 43.191195][ T3685] vm_mmap_pgoff+0x17a/0x2e0 [ 43.191227][ T3685] ksys_mmap_pgoff+0xc2/0x310 [ 43.191243][ T3685] ? __x64_sys_mmap+0x49/0x70 [ 43.191265][ T3685] x64_sys_call+0x14a3/0x2ff0 [ 43.191291][ T3685] do_syscall_64+0xd2/0x200 [ 43.191327][ T3685] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.191356][ T3685] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.191385][ T3685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.191406][ T3685] RIP: 0033:0x7faa84d8eba9 [ 43.191425][ T3685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.191447][ T3685] RSP: 002b:00007faa837f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 43.191469][ T3685] RAX: ffffffffffffffda RBX: 00007faa84fd5fa0 RCX: 00007faa84d8eba9 [ 43.191482][ T3685] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 43.191496][ T3685] RBP: 00007faa837f7090 R08: ffffffffffffffff R09: 0000000000000000 [ 43.191509][ T3685] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001 [ 43.191522][ T3685] R13: 00007faa84fd6038 R14: 00007faa84fd5fa0 R15: 00007ffd9192d908 [ 43.191540][ T3685] [ 43.423518][ T3688] loop2: detected capacity change from 0 to 1024 [ 43.453850][ T3688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.485688][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.522048][ T3694] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.535974][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 43.535991][ T29] audit: type=1400 audit(1757589180.749:696): avc: denied { bind } for pid=3682 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.561699][ T29] audit: type=1400 audit(1757589180.749:697): avc: denied { name_bind } for pid=3682 comm="syz.0.59" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 43.582817][ T29] audit: type=1400 audit(1757589180.749:698): avc: denied { node_bind } for pid=3682 comm="syz.0.59" saddr=fe88::101 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.605101][ T29] audit: type=1400 audit(1757589180.749:699): avc: denied { getopt } for pid=3682 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.624535][ T29] audit: type=1400 audit(1757589180.779:700): avc: denied { write } for pid=3682 comm="syz.0.59" path="socket:[5247]" dev="sockfs" ino=5247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.665875][ T3698] loop2: detected capacity change from 0 to 128 [ 43.742921][ T29] audit: type=1400 audit(1757589180.949:701): avc: denied { ioctl } for pid=3703 comm="syz.3.66" path="socket:[4092]" dev="sockfs" ino=4092 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.778506][ T29] audit: type=1400 audit(1757589180.989:702): avc: denied { firmware_load } for pid=3703 comm="syz.3.66" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 43.783952][ T3709] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 43.831575][ T3704] openvswitch: netlink: Message has 6 unknown bytes. [ 43.899459][ T3717] loop3: detected capacity change from 0 to 1024 [ 43.935114][ T3717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.950395][ T29] audit: type=1400 audit(1757589181.169:703): avc: denied { read write } for pid=3716 comm="syz.3.72" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.952065][ T3717] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.72: Allocating blocks 385-513 which overlap fs metadata [ 43.973259][ T29] audit: type=1400 audit(1757589181.169:704): avc: denied { open } for pid=3716 comm="syz.3.72" path="/13/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.973431][ T29] audit: type=1400 audit(1757589181.169:705): avc: denied { map } for pid=3716 comm="syz.3.72" path="/13/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.051873][ T3717] EXT4-fs (loop3): pa ffff8881071fa0e0: logic 16, phys. 129, len 24 [ 44.059981][ T3717] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 44.082683][ T3717] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 44.095165][ T3717] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.095165][ T3717] [ 44.105017][ T3717] EXT4-fs (loop3): Total free blocks count 0 [ 44.111036][ T3717] EXT4-fs (loop3): Free/Dirty block details [ 44.114724][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 44.117108][ T3717] EXT4-fs (loop3): free_blocks=128 [ 44.131018][ T3717] EXT4-fs (loop3): dirty_blocks=0 [ 44.132037][ T3709] netlink: 96 bytes leftover after parsing attributes in process `syz.2.70'. [ 44.136148][ T3717] EXT4-fs (loop3): Block reservation details [ 44.151022][ T3717] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 44.167209][ T3723] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.200264][ T3717] syz.3.72 (3717) used greatest stack depth: 9128 bytes left [ 44.208426][ T3709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17688 sclass=netlink_route_socket pid=3709 comm=syz.2.70 [ 44.212580][ T3725] netlink: 'syz.4.75': attribute type 3 has an invalid length. [ 44.228660][ T3725] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.75'. [ 44.403954][ T3743] loop0: detected capacity change from 0 to 1024 [ 44.426398][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.468571][ T3743] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.78: Allocating blocks 497-513 which overlap fs metadata [ 44.495386][ T3743] EXT4-fs (loop0): pa ffff88810725f070: logic 256, phys. 369, len 9 [ 44.503531][ T3743] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 44.515357][ T3743] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 44.682927][ T3762] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.704503][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.754202][ T3766] Zero length message leads to an empty skb [ 44.776856][ T3768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 44.839298][ T3779] loop0: detected capacity change from 0 to 512 [ 44.865143][ T3779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.878998][ T3779] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.933742][ T3786] loop4: detected capacity change from 0 to 128 [ 45.014642][ T3786] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.028004][ T3786] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.287311][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.294549][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.328345][ T3797] loop2: detected capacity change from 0 to 1024 [ 45.424440][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.444167][ T3791] bridge0: entered allmulticast mode [ 45.620099][ T3797] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.96: Allocating blocks 497-513 which overlap fs metadata [ 45.734764][ T3806] FAULT_INJECTION: forcing a failure. [ 45.734764][ T3806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.747953][ T3806] CPU: 1 UID: 0 PID: 3806 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.748000][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.748011][ T3806] Call Trace: [ 45.748016][ T3806] [ 45.748025][ T3806] __dump_stack+0x1d/0x30 [ 45.748110][ T3806] dump_stack_lvl+0xe8/0x140 [ 45.748128][ T3806] dump_stack+0x15/0x1b [ 45.748147][ T3806] should_fail_ex+0x265/0x280 [ 45.748174][ T3806] should_fail+0xb/0x20 [ 45.748259][ T3806] should_fail_usercopy+0x1a/0x20 [ 45.748290][ T3806] _copy_from_user+0x1c/0xb0 [ 45.748327][ T3806] __sys_bind+0x106/0x2a0 [ 45.748351][ T3806] __x64_sys_bind+0x3f/0x50 [ 45.748369][ T3806] x64_sys_call+0x2b6e/0x2ff0 [ 45.748460][ T3806] do_syscall_64+0xd2/0x200 [ 45.748514][ T3806] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.748545][ T3806] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.748586][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.748610][ T3806] RIP: 0033:0x7fbcfd09eba9 [ 45.748624][ T3806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.748640][ T3806] RSP: 002b:00007fbcfbb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 45.748660][ T3806] RAX: ffffffffffffffda RBX: 00007fbcfd2e5fa0 RCX: 00007fbcfd09eba9 [ 45.748675][ T3806] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000008 [ 45.748690][ T3806] RBP: 00007fbcfbb07090 R08: 0000000000000000 R09: 0000000000000000 [ 45.748711][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.748726][ T3806] R13: 00007fbcfd2e6038 R14: 00007fbcfd2e5fa0 R15: 00007fff0b9d4b38 [ 45.748767][ T3806] [ 45.960530][ T3797] EXT4-fs (loop2): pa ffff88810725f0e0: logic 256, phys. 369, len 9 [ 45.968643][ T3797] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 45.980268][ T3797] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 46.069660][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.281819][ T3820] loop3: detected capacity change from 0 to 1024 [ 46.309970][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.454536][ T3824] loop1: detected capacity change from 0 to 128 [ 46.595146][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.605495][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.625261][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.675675][ T3827] netlink: 'syz.0.103': attribute type 13 has an invalid length. [ 46.692838][ T3827] gretap0: refused to change device tx_queue_len [ 46.708827][ T3827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 47.096299][ T3853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 47.225718][ T3853] loop0: detected capacity change from 0 to 512 [ 47.287380][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 47.352639][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.370733][ T3853] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.383838][ T3869] capability: warning: `syz.1.118' uses 32-bit capabilities (legacy support in use) [ 47.422121][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.488189][ T3874] loop2: detected capacity change from 0 to 128 [ 47.667011][ T3876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 47.673671][ T3876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.681294][ T3876] vhci_hcd vhci_hcd.0: Device attached [ 47.806919][ T3877] vhci_hcd: connection closed [ 47.807414][ T3428] vhci_hcd: stop threads [ 47.816451][ T3428] vhci_hcd: release socket [ 47.820907][ T3428] vhci_hcd: disconnect device [ 47.863737][ T23] vhci_hcd: vhci_device speed not set [ 47.911406][ T3886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.124'. [ 48.068436][ T3888] loop3: detected capacity change from 0 to 2048 [ 48.178561][ T3893] loop4: detected capacity change from 0 to 128 [ 48.261164][ T3893] syz.4.127: attempt to access beyond end of device [ 48.261164][ T3893] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 48.278258][ T3894] netlink: 'syz.4.127': attribute type 4 has an invalid length. [ 48.287076][ T3893] syz.4.127: attempt to access beyond end of device [ 48.287076][ T3893] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 48.318729][ T3893] syz.4.127: attempt to access beyond end of device [ 48.318729][ T3893] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 48.385865][ T3874] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.398811][ T3874] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.425603][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.504503][ T3893] syz.4.127: attempt to access beyond end of device [ 48.504503][ T3893] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 48.577820][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 48.577863][ T29] audit: type=1326 audit(1757589185.789:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94758eba9 code=0x7ffc0000 [ 48.607390][ T29] audit: type=1326 audit(1757589185.789:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94758eba9 code=0x7ffc0000 [ 48.630714][ T29] audit: type=1326 audit(1757589185.789:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb94758eba9 code=0x7ffc0000 [ 48.654044][ T29] audit: type=1326 audit(1757589185.789:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb94758ebe3 code=0x7ffc0000 [ 48.696806][ T3900] loop0: detected capacity change from 0 to 1024 [ 48.794474][ T3893] syz.4.127: attempt to access beyond end of device [ 48.794474][ T3893] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 48.855082][ T3893] syz.4.127: attempt to access beyond end of device [ 48.855082][ T3893] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 48.893414][ T3900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.968738][ T3900] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.128: Allocating blocks 497-513 which overlap fs metadata [ 48.984981][ T3893] syz.4.127: attempt to access beyond end of device [ 48.984981][ T3893] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 49.030388][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.056274][ T3900] EXT4-fs (loop0): pa ffff88810725f0e0: logic 256, phys. 369, len 9 [ 49.064460][ T3900] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 49.095322][ T3893] syz.4.127: attempt to access beyond end of device [ 49.095322][ T3893] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 49.115797][ T3917] netlink: 176 bytes leftover after parsing attributes in process `syz.1.134'. [ 49.126292][ T29] audit: type=1326 audit(1757589185.909:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb94758d65f code=0x7ffc0000 [ 49.142488][ T3900] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 49.149436][ T29] audit: type=1326 audit(1757589185.909:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb94758ec37 code=0x7ffc0000 [ 49.149463][ T29] audit: type=1326 audit(1757589185.909:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb94758d510 code=0x7ffc0000 [ 49.187227][ T3893] syz.4.127: attempt to access beyond end of device [ 49.187227][ T3893] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 49.210545][ T29] audit: type=1326 audit(1757589185.909:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb94758e7ab code=0x7ffc0000 [ 49.223886][ T3893] syz.4.127: attempt to access beyond end of device [ 49.223886][ T3893] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 49.247016][ T29] audit: type=1400 audit(1757589185.919:966): avc: denied { kexec_image_load } for pid=3887 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 49.280206][ T29] audit: type=1326 audit(1757589185.939:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb94758d80a code=0x7ffc0000 [ 49.322863][ T3920] loop3: detected capacity change from 0 to 1024 [ 49.331559][ T3920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.357557][ T3917] loop1: detected capacity change from 0 to 512 [ 49.372684][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.374655][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.397205][ T3925] loop4: detected capacity change from 0 to 1024 [ 49.429383][ T3917] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.452169][ T3930] loop0: detected capacity change from 0 to 512 [ 49.459698][ T3925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.472174][ T3930] EXT4-fs: Ignoring removed oldalloc option [ 49.478196][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.489287][ T3917] EXT4-fs (loop1): mount failed [ 49.516455][ T3930] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.137: Parent and EA inode have the same ino 15 [ 49.534730][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 49.551600][ T3925] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.136: Allocating blocks 497-513 which overlap fs metadata [ 49.560270][ T3930] EXT4-fs (loop0): 1 orphan inode deleted [ 49.573559][ T3925] EXT4-fs (loop4): pa ffff88810725f150: logic 256, phys. 369, len 9 [ 49.576949][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.581608][ T3925] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 49.613194][ T3936] loop3: detected capacity change from 0 to 512 [ 49.614211][ T3925] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 49.629445][ T3936] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.678505][ T3930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.716361][ T3941] loop1: detected capacity change from 0 to 2048 [ 49.751999][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.764504][ T3297] loop1: p1 < > p4 [ 49.775700][ T3297] loop1: p4 size 8388608 extends beyond EOD, truncated [ 49.801750][ T3941] loop1: p1 < > p4 [ 49.820822][ T3948] loop4: detected capacity change from 0 to 1024 [ 49.820859][ T3941] loop1: p4 size 8388608 extends beyond EOD, truncated [ 49.835785][ T3950] FAULT_INJECTION: forcing a failure. [ 49.835785][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 49.848624][ T3950] CPU: 1 UID: 0 PID: 3950 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.848688][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.848704][ T3950] Call Trace: [ 49.848712][ T3950] [ 49.848722][ T3950] __dump_stack+0x1d/0x30 [ 49.848797][ T3950] dump_stack_lvl+0xe8/0x140 [ 49.848815][ T3950] dump_stack+0x15/0x1b [ 49.848913][ T3950] should_fail_ex+0x265/0x280 [ 49.849023][ T3950] should_failslab+0x8c/0xb0 [ 49.849133][ T3950] kmem_cache_alloc_node_noprof+0x57/0x320 [ 49.849164][ T3950] ? dup_task_struct+0x70/0x6a0 [ 49.849196][ T3950] dup_task_struct+0x70/0x6a0 [ 49.849228][ T3950] ? try_charge_memcg+0x200/0x9e0 [ 49.849257][ T3950] copy_process+0x399/0x2000 [ 49.849318][ T3950] ? __account_obj_stock+0x211/0x350 [ 49.849348][ T3950] ? __account_obj_stock+0x211/0x350 [ 49.849447][ T3950] ? __pfx_io_wq_worker+0x10/0x10 [ 49.849475][ T3950] create_io_thread+0x93/0xc0 [ 49.849511][ T3950] ? __pfx_io_wq_worker+0x10/0x10 [ 49.849605][ T3950] create_io_worker+0xe0/0x370 [ 49.849635][ T3950] io_wq_enqueue+0x2c1/0x3a0 [ 49.849659][ T3950] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 49.849724][ T3950] io_queue_iowq+0x201/0x2e0 [ 49.849745][ T3950] io_queue_sqe_fallback+0xe6/0x140 [ 49.849774][ T3950] io_submit_sqes+0xc2e/0x1060 [ 49.849811][ T3950] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 49.849892][ T3950] ? 0xffffffff81000000 [ 49.849904][ T3950] ? __rcu_read_unlock+0x4f/0x70 [ 49.849931][ T3950] ? get_pid_task+0x96/0xd0 [ 49.850001][ T3950] ? proc_fail_nth_write+0x13b/0x160 [ 49.850034][ T3950] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.850122][ T3950] ? vfs_write+0x7e8/0x960 [ 49.850149][ T3950] ? __rcu_read_unlock+0x4f/0x70 [ 49.850171][ T3950] ? __fget_files+0x184/0x1c0 [ 49.850204][ T3950] ? fput+0x8f/0xc0 [ 49.850383][ T3950] __x64_sys_io_uring_enter+0x78/0x90 [ 49.850413][ T3950] x64_sys_call+0x2de1/0x2ff0 [ 49.850442][ T3950] do_syscall_64+0xd2/0x200 [ 49.850476][ T3950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.850558][ T3950] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.850647][ T3950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.850786][ T3950] RIP: 0033:0x7face9a3eba9 [ 49.850804][ T3950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.850822][ T3950] RSP: 002b:00007face84a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 49.850845][ T3950] RAX: ffffffffffffffda RBX: 00007face9c85fa0 RCX: 00007face9a3eba9 [ 49.850861][ T3950] RDX: 0000000000000600 RSI: 00000000000006e2 RDI: 0000000000000004 [ 49.850877][ T3950] RBP: 00007face84a7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.850893][ T3950] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 49.850909][ T3950] R13: 00007face9c86038 R14: 00007face9c85fa0 R15: 00007fff532691e8 [ 49.851010][ T3950] [ 50.139699][ T3941] netlink: 'syz.1.139': attribute type 4 has an invalid length. [ 50.187483][ T3948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.231670][ T3959] FAULT_INJECTION: forcing a failure. [ 50.231670][ T3959] name failslab, interval 1, probability 0, space 0, times 0 [ 50.244500][ T3959] CPU: 0 UID: 0 PID: 3959 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.244531][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.244544][ T3959] Call Trace: [ 50.244551][ T3959] [ 50.244559][ T3959] __dump_stack+0x1d/0x30 [ 50.244586][ T3959] dump_stack_lvl+0xe8/0x140 [ 50.244610][ T3959] dump_stack+0x15/0x1b [ 50.244631][ T3959] should_fail_ex+0x265/0x280 [ 50.244668][ T3959] should_failslab+0x8c/0xb0 [ 50.244772][ T3959] kmem_cache_alloc_node_noprof+0x57/0x320 [ 50.244809][ T3959] ? __alloc_skb+0x101/0x320 [ 50.244838][ T3959] __alloc_skb+0x101/0x320 [ 50.244866][ T3959] netlink_alloc_large_skb+0xba/0xf0 [ 50.244927][ T3959] netlink_sendmsg+0x3cf/0x6b0 [ 50.244991][ T3959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.245026][ T3959] __sock_sendmsg+0x142/0x180 [ 50.245075][ T3959] ____sys_sendmsg+0x31e/0x4e0 [ 50.245136][ T3959] ___sys_sendmsg+0x17b/0x1d0 [ 50.245253][ T3959] __x64_sys_sendmsg+0xd4/0x160 [ 50.245293][ T3959] x64_sys_call+0x191e/0x2ff0 [ 50.245318][ T3959] do_syscall_64+0xd2/0x200 [ 50.245361][ T3959] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.245388][ T3959] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.245424][ T3959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.245453][ T3959] RIP: 0033:0x7fd44207eba9 [ 50.245535][ T3959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.245554][ T3959] RSP: 002b:00007fd440adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.245576][ T3959] RAX: ffffffffffffffda RBX: 00007fd4422c5fa0 RCX: 00007fd44207eba9 [ 50.245617][ T3959] RDX: 00000000040000c0 RSI: 00002000000003c0 RDI: 0000000000000007 [ 50.245632][ T3959] RBP: 00007fd440adf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.245647][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.245661][ T3959] R13: 00007fd4422c6038 R14: 00007fd4422c5fa0 R15: 00007ffd82063ad8 [ 50.245679][ T3959] [ 50.246664][ T3948] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.142: Allocating blocks 497-513 which overlap fs metadata [ 50.327690][ T3963] loop2: detected capacity change from 0 to 1024 [ 50.399423][ T3948] EXT4-fs (loop4): pa ffff88810725f1c0: logic 256, phys. 369, len 9 [ 50.452023][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.464054][ T3948] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 50.464880][ T3948] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 50.543096][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.555528][ T3970] loop0: detected capacity change from 0 to 512 [ 50.596503][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.605530][ T3973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.614452][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.631672][ T3973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.640647][ T3973] netlink: 'syz.1.152': attribute type 6 has an invalid length. [ 50.659893][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.687683][ T3976] loop2: detected capacity change from 0 to 2048 [ 50.716678][ T3976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 50.810589][ T3428] ================================================================== [ 50.818743][ T3428] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 50.827308][ T3428] [ 50.829651][ T3428] write to 0xffff88811a967908 of 44 bytes by task 3999 on cpu 1: [ 50.837379][ T3428] tty_set_termios+0xc0/0x8c0 [ 50.842179][ T3428] set_termios+0x496/0x4e0 [ 50.846619][ T3428] tty_mode_ioctl+0x379/0x5c0 [ 50.851321][ T3428] n_tty_ioctl_helper+0x91/0x210 [ 50.856285][ T3428] n_tty_ioctl+0x101/0x200 [ 50.860721][ T3428] tty_ioctl+0x845/0xb80 [ 50.864975][ T3428] __se_sys_ioctl+0xce/0x140 [ 50.869584][ T3428] __x64_sys_ioctl+0x43/0x50 [ 50.874189][ T3428] x64_sys_call+0x1816/0x2ff0 [ 50.878879][ T3428] do_syscall_64+0xd2/0x200 [ 50.883403][ T3428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.889318][ T3428] [ 50.891643][ T3428] read to 0xffff88811a967921 of 1 bytes by task 3428 on cpu 0: [ 50.899187][ T3428] n_tty_receive_char_flow_ctrl+0x23/0x1a0 [ 50.905019][ T3428] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 50.910586][ T3428] tty_port_default_lookahead_buf+0x91/0xc0 [ 50.916493][ T3428] flush_to_ldisc+0x285/0x340 [ 50.921190][ T3428] process_scheduled_works+0x4cb/0x9d0 [ 50.926670][ T3428] worker_thread+0x582/0x770 [ 50.931282][ T3428] kthread+0x489/0x510 [ 50.935361][ T3428] ret_from_fork+0xda/0x150 [ 50.939872][ T3428] ret_from_fork_asm+0x1a/0x30 [ 50.944643][ T3428] [ 50.947003][ T3428] value changed: 0x11 -> 0x00 [ 50.951688][ T3428] [ 50.954013][ T3428] Reported by Kernel Concurrency Sanitizer on: [ 50.960196][ T3428] CPU: 0 UID: 0 PID: 3428 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.970108][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.980170][ T3428] Workqueue: events_unbound flush_to_ldisc [ 50.986000][ T3428] ================================================================== [ 51.107173][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.