last executing test programs: 5.185619697s ago: executing program 1 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20008844) 5.157771247s ago: executing program 1 (id=188): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) socket(0x2, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x2040000) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x30, 0x3) 4.818410322s ago: executing program 1 (id=195): r0 = socket(0x2, 0x80805, 0x0) set_mempolicy(0x6, 0x0, 0xe0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x10008}}, './file0\x00'}) syz_io_uring_setup(0x681c, &(0x7f0000000200)={0x0, 0x3, 0x4000, 0x3, 0x21a, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800100080003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 3.898695523s ago: executing program 1 (id=206): socketpair(0x2b, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfb, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x10, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xa, 0xce}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x5, 0xf8, 0x2, 0x20, 0x6}, 0x69, &(0x7f00000001c0)={0x5, 0xf, 0x69, 0x4, [@generic={0x32, 0x10, 0xb, "895ec4ae50451440e21fed76a35e7ef75b41edcc569587bc25e898c465ad2c1fe1720185e10ba03c681f7bf7733636"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "da8aa616a09bf36ebfab9f28df339382"}, @generic={0x13, 0x10, 0x2, "517a5b833f61b6489b96d723ef4acf99"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0xc, 0x7, 0xf}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x457}}, {0x9d, &(0x7f00000002c0)=@string={0x9d, 0x3, "314ecb3f2dab7287eb55f65c12ea375cef3fba54d1f6cc968e388f0baca216c3deef38969b05397256b293905213c84c16bb6b2d29b5d552a523a55bb5916a1f09e66db0e310eaae0ae4c98b5dc23aafb5dc29d00afdde09ac918be0c3ab37d3f1ad97010a93a0c4bb3481cea35927e0509d90e89fbf7b0f61e7501da81dc4d9fe76e0e789ac356381a82e927e05eb6d9c19d348ddbd91ea526e86"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3409}}, {0x86, &(0x7f0000000480)=@string={0x86, 0x3, "89838d3447622faf9e5bdf4fa248e77f6bd11bb45ee4db95eed5b03c30ba9adfdc32d4ea4c45e86c3e7db5361811f106d565b3611e9bfa461f2cc66f6247731f3f58ec23f1ca9d782bd9d12122f792c11a08df30d232a176a0a493eebebafb7d05edbfa6ab53b01b0c0a67b1f9a704c075940ca3b5c561fbd7413f1a49135ef056ca6fff"}}, {0x15, &(0x7f0000000540)=@string={0x15, 0x3, "43933983d8a99d63b19cd513a26ed5e9e811ea"}}]}) syz_usb_disconnect(r4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000640)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000680)={{0x1, 0xc}, 'port0\x00', 0x1, 0x1000, 0x8, 0xa79d, 0x200, 0xddd, 0x0, 0x0, 0x4, 0x4}) syz_usb_connect$uac1(0x0, 0xdf, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x49, 0x10, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x0, "eca9d4188b13"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x1, 0x4, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x0, 0x1, "bb365b3d8377"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x1, 0x6, [0x5, 0x3, 0x1, 0x7, 0x5, 0x5], 0x9}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, "d6"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x8, '\"Y|'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0x1c, 0x3, 'Dtl', 'h'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x1, 0xff, 0x1, "", "2f13ac"}, @as_header={0x7, 0x24, 0x1, 0xcd, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x54, 0xc0, 0x1}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x2, 0x40, {0x7, 0x25, 0x1, 0x80, 0xfb, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0xfd, 0x1, {0x7, 0x25, 0x1, 0x2, 0x8, 0x8001}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x201, 0xfc, 0x4, 0x2, 0x8, 0x5}, 0x19, &(0x7f0000000880)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "39e73ca28f4a3446ad9b0be46fc3acad"}]}, 0x3, [{0xb4, &(0x7f00000008c0)=@string={0xb4, 0x3, "93f457ceab124f430d9b43e316b953eee5f10d2f920050c8040ab9927231475bcc138a5f710f3028ef105e23eea29dba2135aa186de4e4e4075087c068fd33f23c150ff2fea8ac9af29f24192bcf57feb14475abee43e8571f80927beaf2438c0f2ad5598165a91d26f1a26660ff33081101330128f99cbd2a489f3defb71a7980e3a49a26a48d1a78a4f79c1f48ebe74a113d296dfa6889153a49ddd0e4ee466a2f8b2645b7b780d3c2a1c7f02a483232ec"}}, {0x57, &(0x7f0000000980)=@string={0x57, 0x3, "28895227ff1944672196035164e93957470e700302a8ebe2b5184227a59b0307c9ca6845af16e3fbd150e4ec97b497293d5b6bf4554a09e5ffc52eed8f899d4604f09d4021d2d850fac269ae7a363eca26a4f1ab47"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x814}}]}) r5 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000a80), &(0x7f0000000ac0)=0x8) r6 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000000d40)={&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/78, 0x4e}, {&(0x7f0000000c00)=""/160, 0xa0}], 0x2, &(0x7f0000000d00)=""/45, 0x2d}, 0x12000) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000d80), 0x4) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x8, 0x10, 0xdc, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x6, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x100, 0x6}, @obex={0x5, 0x24, 0x15, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x7f, 0xd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0xfe, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x60, 0x1, 0x3a, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x7, 0xf3}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x200, 0x3, 0x34, 0x4, 0x40, 0x40}, 0x5, &(0x7f0000000e80)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x41d}}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000f80), 0x200000, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) lstat(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x324098, &(0x7f0000002140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@noxattr}, {@access_user}, {@version_L}, {@posixacl}, {@access_uid={'access', 0x3d, r8}}, {@debug={'debug', 0x3d, 0xff}}, {@cache_none}], [{@measure}]}}) r9 = open$dir(&(0x7f0000002240)='./file0\x00', 0x240, 0xa1) mkdirat(r9, &(0x7f0000002280)='./file1\x00', 0x119) r10 = syz_io_uring_setup(0x6a8a, &(0x7f00000022c0)={0x0, 0xc2b9, 0x231eefe497513df1, 0x0, 0x1fe, 0x0, r3}, &(0x7f0000002340), &(0x7f0000002380)) io_uring_register$IORING_REGISTER_FILES2(r10, 0xd, &(0x7f0000002500)={0x1, 0x1, 0x0, &(0x7f0000002480)=[{&(0x7f00000023c0)=""/138, 0x8a}], &(0x7f00000024c0)=[0xd, 0x9, 0x5, 0x2, 0x2, 0x5]}, 0x20) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000002540)) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000002580)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x13, &(0x7f00000025c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x95}, @jmp={0x5, 0x1, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa}, @exit], &(0x7f0000002680)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x53, '\x00', r11, 0x0, r1, 0x8, &(0x7f0000002700)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002740)=[r3], &(0x7f0000002780)=[{0x3, 0x4, 0x10}, {0x0, 0x1, 0x0, 0xc}, {0x3, 0x2, 0x7, 0x8}], 0x10, 0x6, @void, @value}, 0x94) 2.053713615s ago: executing program 2 (id=245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), 0x0}, 0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.410859883s ago: executing program 4 (id=254): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf5, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) 1.345567884s ago: executing program 4 (id=255): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f00000007c0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYRESOCT=r2, @ANYRES8=r1, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a94d926c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000d80)={0x0, 0x2, 0xfa00, {0x3, &(0x7f0000000d40), 0x111, 0x8}}, 0x20) syz_io_uring_setup(0x7b58, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x2}, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.269713965s ago: executing program 3 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5\x00\x00\x00\x00\x00\x00\x00\x80\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x86<\a\xf5\xdcJ\xbd\x18\xa3\x06b\xc2\xf3\x9e\xf1\x00>\xfb\x91>!\x9fY\xc23\x90\x96\x9d\xf2F\xda\x99W\xa9?[\xe8\xe4*e}\x18\x89TLZl6qf\xdec\xd0\xa4\xa8\xb95\xe9\x10\xd5\x8e\xe1k\x8d\xa1\xc85p\xe9\f\x91K\x946B\x19\xfd\x92\'\x10\xab\xf2\x95\xdd@\b\xfb\x13|\xda\xa2%\xeb/\x1d\xd1HD\x9fjI\xc4MT_v\xe8W\xf7R\x03\x10^Vr\xb7\b7\x00\\n\x91\xc8\xde\xaa;$\xeb\x87\x9f\xb52\xc8_\xcd\x9a\xbc\xe73(\x94\x80\x9b\x01\xf0\x05\x00\x00\x00\x00\x00\x00\x00\xb2Qw\x1b\x04\x96\x84\xbf\x13\xae\x83yk\x8c\xd3\x9e\xbe\xcc\r\x9da9\v\xd4\x91\x9aW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\xd7\x1d\x9e\xd4\xf5L\x88\xff\x11\x93~d\xc1\x86rO\x8e4\xd5\b\xd9\x8fb\x96\x9atOpC}{\xc7\xcf\x94\xd2S\x8a\x1f\xecc\xc1= %^p\x91P\x9c\xee\x8ev^\x85\x15&\xc5L?j[K\xeb\xaa\xef\x02\xe5\x82*\b\xcc\"\x89w\x92\x17\xe8\x94=\xe6Q\xa7\x9d^\xb8\xee\xe5\x8aN3\x05\xeaH\xfe\x16\x06f\nW\xb0A\xc1G\x14\xcf\xe0\x9dw\xc1\xddr]N', 0x2) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300c4a88c010505270900000000008500000083000000bf0900000000000055090100000000009500824b36925b58e3b084422ac5000000000000bf91000000000000b702000001000000850000006423efa9a814df8c56d4f43db3f09820178fc1a826e3070f200eafd1f4808921b700a204cc0deebcc28d45144687fbc298c6ed509a8e35a485f4420d705c"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0', [{0x20, ')$'}], 0xa, "b22fafc8489c41a9875eaa643fabacacf561ee0881d421072fbcd9372539c3bd4b2755d3756f58849eebf497fb793d7004e81bba86fc3205378a4c7b93ec6b33f2a7ea3050038ce2d74d382d57b6cf3054204b2eb4c9597fbd381ae439f73e02a48570e384fd6c251490a3459a36e1737ea7026656b2cfcb3b36df1ba36e1ef435256c47bbd2c5151c2264ce16bb4f86c4987a7dfe420c7dc25629673ea7f2fe8681d9b4c38e0f4e003506b61478595ee48f7855acc3000d9c423f01f516abb73645558e277d313ec44a"}, 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0900008002060500000000000000000006000000"], 0x14}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008e0267e0658a1517300028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000500005e159e70f3c014718e5c1ae6c6033147694c6fdee8c516e4d1d547dbd64b605c26e6eef4b166fe0ea0ec9231885201ed55ebd5c971da5390c503ca16ab7522399ac898b244d741bf97be3b5e7bc423710ea2a18240c552a55e840c7d560f451445585d9f4e"], 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) move_pages(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000140)=[0xc, 0x5d], &(0x7f0000000540), 0x4) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x2, 0x38025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0xc, 0x8000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r9, r8, 0x0, 0x20000023893) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) (async) alarm(0x9) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.244870885s ago: executing program 2 (id=258): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000001800)="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", 0x56e}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x507}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) inotify_init1(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") 1.197632926s ago: executing program 3 (id=259): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/166, 0xa6}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/201, 0xc9}], 0x3, 0x1, 0x7) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1cb5, 0xb9}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x10, "389ef898b2d46060376d5524aa97e004"}, &(0x7f0000000340)=0x18) close_range(r0, r0, 0x2) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f00000022c0)=[{{&(0x7f0000000d80)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x5c, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x6c, 0xb, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0xe, 0x1, [0x8, 0x4, 0x5, 0x3]}}, @enc_lim={0x4, 0x1, 0x14}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @pad1, @ra={0x5, 0x2, 0x81}, @jumbo]}}}], 0xb0}}, {{&(0x7f0000000ec0)={0xa, 0x4e21, 0x0, @loopback, 0x1}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000000f00)="5f90d0e772c078f637fcde052f825162077151417998fe", 0x17}, {&(0x7f0000000f40)="8bbe47b643e27573a9b38ded460058ba6736902681be8d79a8d026399f4d8bc4674d94a2d3abe740efa57e70b64613f06d9021b52f508bab3926a836cdbd6e2d76007a1bcc2cfb129a55b4593205870562d13c5f28ad267b944286118a990ea7f860410876d02d912a198c8e499dd561f961a360a1b62ef9c374c9e27e7f87c773e1978506f51da70cc235b0ece510f4ba6e93046606e6d66c9f797da0ece26b5528", 0xa2}, {&(0x7f0000001000)="36ba9e76592bc85a99b0e4e30779ff51d1769ae977386df6f536ad038dd443905830ce1aa4eac48e07480be3136004652aedafe752296080a7a93547662f5edd1c8e32056cdfd63a874b00e8f66c65174681a4879872cf8c1e804e55ec43deb6bd45f733e947c15199ecef7bea3a1e84c7ce2f82ef6c02cbf499e0871b747ba28c47399b581317912c321712dc9f6e653933c58d9bf8f331985b620b94e0839828815661375261847ec5c31b3e672cde6faa4103d3ebcb3a38e4b2d484cc257626054f5e9146634d8cbf380adb1aa6a239b7fed85f2e2121c238d5a90412a64e5e78176216293b044f2fd8661140baf70f69b80d6b93be75", 0xf8}, {&(0x7f0000001100)="aa08d47527127af5f8dc77b2c5aa5150d31b6567bcfe58105660bc59c1760b861c29ba7514c6e5b118f39a06c372da7ad64eaae829467f875bfbe43238ce6bcc741f511b43ea43f769d11898e9a270dd6d3a4753ede7780b3e7b823818a8a9ae3469e3aaea0653d692b2a79521e437bcdd512cb9f8ec9b184cd02d1d57", 0x7d}, {&(0x7f0000001180)="f006a80c25035b5e7b42a07b692ba04a7a708412d6e46b923960c0a20ba2f6ddb82d62b586c5ca04adff5b70e968943a683a1631e59f9ad298dad050598b2050", 0x40}, {&(0x7f00000011c0)="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", 0x1000}], 0x6, &(0x7f0000002240)=[@dstopts_2292={{0x40, 0x29, 0x4, {0xc, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xa}, @enc_lim, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff3}}], 0x80}}], 0x2, 0x0) 1.193980395s ago: executing program 3 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mount$bind(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 1.163985276s ago: executing program 2 (id=262): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x80000001, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r4}, 0x10) cachestat(r4, &(0x7f0000000340)={0x7, 0x4}, &(0x7f0000000380), 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000000)=0x930e, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000002100)=""/4096, 0x1000, 0x0, &(0x7f0000000240)=""/153, 0x99}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r10, 0xc, 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4083, 0xff3}], 0x1, 0x31, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) close(r11) 1.093351337s ago: executing program 4 (id=264): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair(0xb, 0x0, 0xc6, &(0x7f0000000280)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) 987.860308ms ago: executing program 2 (id=266): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x4004000) 869.615839ms ago: executing program 3 (id=267): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x600e7180, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x8}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x3, 0x1000, [0x9, 0x5, 0x5000000, 0x0, 0x2, 0x17b1], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a40)=""/4096}, &(0x7f00000001c0)=0x78) chdir(&(0x7f0000000100)='./file0\x00') close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5, 0xffffffffffffffff}, 0x4) fremovexattr(r1, &(0x7f00000002c0)=@random={'trusted.', 'broute\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r6, 0x0}, 0x20) setsockopt$sock_attach_bpf(r3, 0x84, 0x22, &(0x7f0000000000), 0x10) 840.408219ms ago: executing program 1 (id=268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 831.0045ms ago: executing program 0 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000089140000000000006d07bc4b00000401fc020000000000000000000000000001fc02000000000000000000978800"/58], 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x1, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 704.564231ms ago: executing program 0 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f00000004c0)='./file1\x00', 0x130) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 565.737603ms ago: executing program 0 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x4e, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kyber_adjust\x00', r1}, 0x18) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$tty20(0xc, 0x4, 0x1) 539.620373ms ago: executing program 0 (id=272): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000001800)="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", 0x56e}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x507}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) inotify_init1(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") 454.180914ms ago: executing program 1 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r4 = io_uring_setup(0x280d, &(0x7f0000001280)={0x0, 0x6d5a, 0x400, 0xfffffffc}) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1d5015689c6fca64000000000000001811000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x104082, 0x1, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = gettid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000001540)=""/70, 0x46}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000040)=""/120, 0x78}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r5, &(0x7f0000000040), 0x8) 449.114915ms ago: executing program 2 (id=274): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000240c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4723d39c10780000000000000000", 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24004014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb804, 0x0) r7 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r7, @ANYRESHEX=r6, @ANYRES16=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r8) inotify_init1(0x800) fcntl$setstatus(r8, 0x4, 0x2c00) epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0xfffffe38) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0xa0000001}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf2531000000080001002c0000000c009900070000001f0000004000000031000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc0840) 329.623976ms ago: executing program 3 (id=275): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000014, &(0x7f0000000580)={[{@mb_optimize_scan}, {@noload}, {@oldalloc}, {@lazytime}]}, 0xfe, 0x25f, &(0x7f0000000640)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r5, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x4004000) 320.322466ms ago: executing program 4 (id=276): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/166, 0xa6}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/201, 0xc9}], 0x3, 0x1, 0x7) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1cb5, 0xb9}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x10, "389ef898b2d46060376d5524aa97e004"}, &(0x7f0000000340)=0x18) close_range(r0, r0, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f00000022c0)=[{{&(0x7f0000000d80)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x5c, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x6c, 0xb, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0xe, 0x1, [0x8, 0x4, 0x5, 0x3]}}, @enc_lim={0x4, 0x1, 0x14}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @pad1, @ra={0x5, 0x2, 0x81}, @jumbo]}}}], 0xb0}}, {{&(0x7f0000000ec0)={0xa, 0x4e21, 0x0, @loopback, 0x1}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000000f00)="5f90d0e772c078f637fcde052f825162077151417998fe", 0x17}, {&(0x7f0000000f40)="8bbe47b643e27573a9b38ded460058ba6736902681be8d79a8d026399f4d8bc4674d94a2d3abe740efa57e70b64613f06d9021b52f508bab3926a836cdbd6e2d76007a1bcc2cfb129a55b4593205870562d13c5f28ad267b944286118a990ea7f860410876d02d912a198c8e499dd561f961a360a1b62ef9c374c9e27e7f87c773e1978506f51da70cc235b0ece510f4ba6e93046606e6d66c9f797da0ece26b5528", 0xa2}, {&(0x7f0000001000)="36ba9e76592bc85a99b0e4e30779ff51d1769ae977386df6f536ad038dd443905830ce1aa4eac48e07480be3136004652aedafe752296080a7a93547662f5edd1c8e32056cdfd63a874b00e8f66c65174681a4879872cf8c1e804e55ec43deb6bd45f733e947c15199ecef7bea3a1e84c7ce2f82ef6c02cbf499e0871b747ba28c47399b581317912c321712dc9f6e653933c58d9bf8f331985b620b94e0839828815661375261847ec5c31b3e672cde6faa4103d3ebcb3a38e4b2d484cc257626054f5e9146634d8cbf380adb1aa6a239b7fed85f2e2121c238d5a90412a64e5e78176216293b044f2fd8661140baf70f69b80d6b93be75", 0xf8}, {&(0x7f0000001100)="aa08d47527127af5f8dc77b2c5aa5150d31b6567bcfe58105660bc59c1760b861c29ba7514c6e5b118f39a06c372da7ad64eaae829467f875bfbe43238ce6bcc741f511b43ea43f769d11898e9a270dd6d3a4753ede7780b3e7b823818a8a9ae3469e3aaea0653d692b2a79521e437bcdd512cb9f8ec9b184cd02d1d57", 0x7d}, {&(0x7f0000001180)="f006a80c25035b5e7b42a07b692ba04a7a708412d6e46b923960c0a20ba2f6ddb82d62b586c5ca04adff5b70e968943a683a1631e59f9ad298dad050598b2050", 0x40}, {&(0x7f00000011c0)="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", 0x1000}], 0x6, &(0x7f0000002240)=[@dstopts_2292={{0x40, 0x29, 0x4, {0xc, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xa}, @enc_lim, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff3}}], 0x80}}], 0x2, 0x0) 160.840628ms ago: executing program 0 (id=277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './bus'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x89}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x2a, 0x9}}, 0x20) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x7) syz_emit_ethernet(0x2f, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a80f0081002e400805005ff1c79e010001000000000095ec07694e4426d9d16c47b7"], 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, r6, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtclass={0x5c, 0x28, 0x1, 0x70bd2c, 0x25ffdbfb, {0x0, 0x0, 0x0, r2, {0xfff2}, {0xe, 0xffff}, {0xfff3, 0xfff1}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xec, 0x80}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x5c}}, 0x0) 109.350249ms ago: executing program 4 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 89.092989ms ago: executing program 3 (id=279): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) r1 = io_uring_setup(0x1920, &(0x7f0000000100)={0x0, 0xd0eb, 0x8}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0xfffffffffffffdce) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 14.06205ms ago: executing program 4 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20008844) 13.46489ms ago: executing program 0 (id=281): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x44}}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000b40)={@empty, @broadcast, 0x0}, &(0x7f0000000b80)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1e0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x804) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000700)=0x1, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f0000000640)={0x20000, &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340), {0x6}, &(0x7f00000004c0)=""/210, 0xd2, &(0x7f0000000380)=""/41, &(0x7f00000005c0)=[r2, r3], 0x2, {r9}}, 0x58) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000200)=""/166}, 0x20) r12 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 0s ago: executing program 2 (id=282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='d'], 0x64}}, 0x4040800) sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, &(0x7f0000000200)) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r12 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000030000000800000000000000", @ANYRES32=r12, @ANYBLOB="1e00"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0500"/15], 0x50) sendfile(r12, r12, 0x0, 0x1000000201005) kernel console output (not intermixed with test programs): [ 21.388089][ T29] audit: type=1400 audit(1746250313.700:81): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 26.231664][ T29] audit: type=1400 audit(1746250318.540:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.232688][ T3291] cgroup: Unknown subsys name 'net' [ 26.254405][ T29] audit: type=1400 audit(1746250318.540:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.282170][ T29] audit: type=1400 audit(1746250318.570:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.444137][ T3291] cgroup: Unknown subsys name 'cpuset' [ 26.450411][ T3291] cgroup: Unknown subsys name 'rlimit' [ 26.561727][ T29] audit: type=1400 audit(1746250318.870:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.585018][ T29] audit: type=1400 audit(1746250318.870:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.605513][ T29] audit: type=1400 audit(1746250318.870:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.617847][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.625896][ T29] audit: type=1400 audit(1746250318.880:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.654751][ T29] audit: type=1400 audit(1746250318.880:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.659812][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.679554][ T29] audit: type=1400 audit(1746250318.880:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.711492][ T29] audit: type=1400 audit(1746250318.950:91): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.824029][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.849817][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.871020][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.997168][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.004391][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.011662][ T3301] bridge_slave_0: entered allmulticast mode [ 28.018265][ T3301] bridge_slave_0: entered promiscuous mode [ 28.024843][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.033715][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.040856][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.048055][ T3302] bridge_slave_0: entered allmulticast mode [ 28.054697][ T3302] bridge_slave_0: entered promiscuous mode [ 28.073470][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.080726][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.088131][ T3301] bridge_slave_1: entered allmulticast mode [ 28.094465][ T3301] bridge_slave_1: entered promiscuous mode [ 28.103249][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.110344][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.117599][ T3302] bridge_slave_1: entered allmulticast mode [ 28.124045][ T3302] bridge_slave_1: entered promiscuous mode [ 28.141730][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.148895][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.156307][ T3310] bridge_slave_0: entered allmulticast mode [ 28.162739][ T3310] bridge_slave_0: entered promiscuous mode [ 28.181477][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.191354][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.203384][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.210717][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.218005][ T3310] bridge_slave_1: entered allmulticast mode [ 28.224465][ T3310] bridge_slave_1: entered promiscuous mode [ 28.236666][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.249392][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.276505][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.290959][ T3302] team0: Port device team_slave_0 added [ 28.297456][ T3302] team0: Port device team_slave_1 added [ 28.311025][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.332775][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.375422][ T3301] team0: Port device team_slave_0 added [ 28.383617][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.390627][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.416581][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.437976][ T3301] team0: Port device team_slave_1 added [ 28.453529][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.460501][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.486566][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.497985][ T3310] team0: Port device team_slave_0 added [ 28.503833][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.510929][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.518232][ T3305] bridge_slave_0: entered allmulticast mode [ 28.524661][ T3305] bridge_slave_0: entered promiscuous mode [ 28.544513][ T3310] team0: Port device team_slave_1 added [ 28.551056][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.558198][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.565423][ T3305] bridge_slave_1: entered allmulticast mode [ 28.571828][ T3305] bridge_slave_1: entered promiscuous mode [ 28.578240][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.585221][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.611195][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.622032][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.629161][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.636929][ T3308] bridge_slave_0: entered allmulticast mode [ 28.643354][ T3308] bridge_slave_0: entered promiscuous mode [ 28.670321][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.677353][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.703396][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.714120][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.721259][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.728632][ T3308] bridge_slave_1: entered allmulticast mode [ 28.735148][ T3308] bridge_slave_1: entered promiscuous mode [ 28.756933][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.769180][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.784155][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.793639][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.800596][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.826539][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.839243][ T3302] hsr_slave_0: entered promiscuous mode [ 28.845394][ T3302] hsr_slave_1: entered promiscuous mode [ 28.862915][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.883654][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.890622][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.916648][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.946668][ T3305] team0: Port device team_slave_0 added [ 28.957852][ T3308] team0: Port device team_slave_0 added [ 28.969526][ T3305] team0: Port device team_slave_1 added [ 28.982614][ T3301] hsr_slave_0: entered promiscuous mode [ 28.988723][ T3301] hsr_slave_1: entered promiscuous mode [ 28.994727][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.002288][ T3301] Cannot create hsr debugfs directory [ 29.013718][ T3308] team0: Port device team_slave_1 added [ 29.029399][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.036588][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.062696][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.093352][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.100351][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.126315][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.139308][ T3310] hsr_slave_0: entered promiscuous mode [ 29.145418][ T3310] hsr_slave_1: entered promiscuous mode [ 29.151296][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.158904][ T3310] Cannot create hsr debugfs directory [ 29.164753][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.171709][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.197765][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.209162][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.216167][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.242080][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.314166][ T3305] hsr_slave_0: entered promiscuous mode [ 29.320377][ T3305] hsr_slave_1: entered promiscuous mode [ 29.326303][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.333891][ T3305] Cannot create hsr debugfs directory [ 29.368114][ T3308] hsr_slave_0: entered promiscuous mode [ 29.374218][ T3308] hsr_slave_1: entered promiscuous mode [ 29.380648][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.388277][ T3308] Cannot create hsr debugfs directory [ 29.509977][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.518769][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.534199][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.547060][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.573828][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.587523][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.598369][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.607393][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.648190][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.659219][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.675293][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.688534][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.697471][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.706132][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.715047][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.724358][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.745611][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.774532][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.784139][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.794149][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.802112][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.810979][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.826644][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.833790][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.857738][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.864893][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.875252][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.930017][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.949212][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.965769][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.972840][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.982791][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.989918][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.019512][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.028340][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.047601][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.054798][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.080277][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.087397][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.101014][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.115531][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.134563][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.145725][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.158916][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.169403][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.197905][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.205158][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.216850][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.224006][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.243290][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.250441][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.259918][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.267104][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.309336][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.321766][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.428526][ T3302] veth0_vlan: entered promiscuous mode [ 30.449846][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.460150][ T3301] veth0_vlan: entered promiscuous mode [ 30.471184][ T3301] veth1_vlan: entered promiscuous mode [ 30.486178][ T3302] veth1_vlan: entered promiscuous mode [ 30.501269][ T3305] veth0_vlan: entered promiscuous mode [ 30.509776][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.525144][ T3301] veth0_macvtap: entered promiscuous mode [ 30.538961][ T3305] veth1_vlan: entered promiscuous mode [ 30.547021][ T3301] veth1_macvtap: entered promiscuous mode [ 30.560429][ T3302] veth0_macvtap: entered promiscuous mode [ 30.582687][ T3302] veth1_macvtap: entered promiscuous mode [ 30.592974][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.601327][ T3305] veth0_macvtap: entered promiscuous mode [ 30.615331][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.629724][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.638674][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.647435][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.656200][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.666848][ T3305] veth1_macvtap: entered promiscuous mode [ 30.692888][ T3310] veth0_vlan: entered promiscuous mode [ 30.699568][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710075][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.721563][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.732844][ T3310] veth1_vlan: entered promiscuous mode [ 30.744947][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.755476][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.765393][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.775902][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.786839][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.795421][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.806046][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.817911][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.818132][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.845349][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.855946][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.865856][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.876299][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.887012][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.900705][ T3308] veth0_vlan: entered promiscuous mode [ 30.907821][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.916631][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.925442][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.934240][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.960228][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.969126][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.977890][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.986747][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.003190][ T3442] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 31.011086][ T3442] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 31.020851][ T3443] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.022331][ T3308] veth1_vlan: entered promiscuous mode [ 31.064110][ T3310] veth0_macvtap: entered promiscuous mode [ 31.078464][ T3442] syz.1.2 (3442) used greatest stack depth: 10728 bytes left [ 31.096408][ T3308] veth0_macvtap: entered promiscuous mode [ 31.102996][ T3310] veth1_macvtap: entered promiscuous mode [ 31.112688][ T3308] veth1_macvtap: entered promiscuous mode [ 31.141734][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.152289][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.162311][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.172790][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.182657][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.193174][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.197019][ T3451] siw: device registration error -23 [ 31.205221][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.222056][ T3451] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.233399][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 31.233414][ T29] audit: type=1400 audit(1746250323.530:150): avc: denied { read } for pid=3450 comm="syz.0.1" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.248745][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.260349][ T29] audit: type=1400 audit(1746250323.530:151): avc: denied { open } for pid=3450 comm="syz.0.1" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.270802][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.293644][ T29] audit: type=1400 audit(1746250323.530:152): avc: denied { create } for pid=3448 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.303439][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.303456][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.303469][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.322607][ T29] audit: type=1400 audit(1746250323.530:153): avc: denied { write } for pid=3448 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.333008][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.333022][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.393601][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.427727][ T3455] process 'syz.0.8' launched '/dev/fd/3' with NULL argv: empty string added [ 31.437427][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.446837][ T29] audit: type=1400 audit(1746250323.670:154): avc: denied { open } for pid=3452 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.449919][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.465775][ T29] audit: type=1400 audit(1746250323.670:155): avc: denied { kernel } for pid=3452 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.476177][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.476192][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.476210][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.495247][ T29] audit: type=1400 audit(1746250323.670:156): avc: denied { tracepoint } for pid=3452 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.505160][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.515468][ T29] audit: type=1400 audit(1746250323.740:157): avc: denied { watch watch_reads } for pid=3454 comm="syz.0.8" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.525396][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.544662][ T29] audit: type=1400 audit(1746250323.740:158): avc: denied { execute } for pid=3454 comm="syz.0.8" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.600791][ C1] hrtimer: interrupt took 38037 ns [ 31.607838][ T29] audit: type=1400 audit(1746250323.750:159): avc: denied { execute_no_trans } for pid=3454 comm="syz.0.8" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.646390][ T3459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 31.657103][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.695918][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.704759][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.704793][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.704901][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726426][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.747109][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.756962][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.767547][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.777392][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.788011][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.798166][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.808623][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.819986][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.825370][ T3462] SELinux: Context system_u:object_r:dhcpd_ is not valid (left unmapped). [ 31.859123][ T3461] gretap1: entered allmulticast mode [ 31.870282][ T3465] loop4: detected capacity change from 0 to 512 [ 31.879005][ T3461] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 31.891066][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.899858][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.908689][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.909392][ T3465] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.917559][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.941348][ T3465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.996378][ T3465] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.11: corrupted inode contents [ 32.015065][ T3462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 32.056652][ T3465] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.11: mark_inode_dirty error [ 32.086738][ T3476] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 32.094664][ T3476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 32.115966][ T3465] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.11: corrupted inode contents [ 32.126426][ T3476] dummy0: entered promiscuous mode [ 32.133277][ T3476] bridge0: port 3(dummy0) entered blocking state [ 32.139839][ T3476] bridge0: port 3(dummy0) entered disabled state [ 32.148032][ T3476] dummy0: entered allmulticast mode [ 32.154711][ T3476] bridge0: port 3(dummy0) entered blocking state [ 32.161144][ T3476] bridge0: port 3(dummy0) entered forwarding state [ 32.212608][ T3485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.221386][ T3485] tipc: Failed to obtain node identity [ 32.226946][ T3485] tipc: Enabling of bearer rejected, failed to enable media [ 32.296989][ T3489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.325300][ T3465] syz.4.11 (3465) used greatest stack depth: 10448 bytes left [ 32.359872][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.489190][ T3500] loop2: detected capacity change from 0 to 512 [ 32.511962][ T3500] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.552981][ T3504] loop0: detected capacity change from 0 to 512 [ 32.557234][ T3500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.559753][ T3504] ======================================================= [ 32.559753][ T3504] WARNING: The mand mount option has been deprecated and [ 32.559753][ T3504] and is ignored by this kernel. Remove the mand [ 32.559753][ T3504] option from the mount to silence this warning. [ 32.559753][ T3504] ======================================================= [ 32.616373][ T3504] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 32.629796][ T3500] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.18: corrupted inode contents [ 32.647091][ T3500] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.18: mark_inode_dirty error [ 32.659371][ T3500] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.18: corrupted inode contents [ 32.671406][ T3504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 32.680456][ T3504] System zones: 1-12 [ 32.685639][ T3504] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.692732][ T3504] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.20: bg 0: block 361: padding at end of block bitmap is not set [ 32.720760][ T3504] EXT4-fs (loop0): Remounting filesystem read-only [ 32.745678][ T3504] EXT4-fs (loop0): 1 truncate cleaned up [ 32.767070][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 32.782883][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.791672][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.806698][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.817374][ T3504] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 32.901249][ T3519] loop3: detected capacity change from 0 to 512 [ 32.923687][ T3519] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.938607][ T3523] siw: device registration error -23 [ 32.946882][ T3519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.960017][ T3519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.003742][ T3527] loop0: detected capacity change from 0 to 128 [ 33.015331][ T3530] batman_adv: batadv0: Adding interface: dummy0 [ 33.021648][ T3530] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.027107][ T3532] loop4: detected capacity change from 0 to 512 [ 33.046972][ T3530] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 33.073627][ T3519] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.094016][ T3519] EXT4-fs (loop3): 1 truncate cleaned up [ 33.101494][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.103881][ T3527] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.151210][ T3527] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.160625][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.171602][ T3527] netlink: 172 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.200224][ T3532] EXT4-fs (loop4): 1 orphan inode deleted [ 33.215798][ T3319] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 33.230417][ T3542] loop2: detected capacity change from 0 to 512 [ 33.239340][ T3542] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.251728][ T3532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.264717][ T3532] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.277300][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.291349][ T3542] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.33: corrupted inode contents [ 33.304847][ T3542] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.33: mark_inode_dirty error [ 33.317006][ T3542] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.33: corrupted inode contents [ 33.395335][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.415038][ T3556] siw: device registration error -23 [ 33.422947][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.467119][ T3564] siw: device registration error -23 [ 33.602404][ T3582] loop2: detected capacity change from 0 to 512 [ 33.611943][ T3582] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.645518][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.659670][ T3582] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.49: corrupted inode contents [ 33.671947][ T3582] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.49: mark_inode_dirty error [ 33.684351][ T3582] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.49: corrupted inode contents [ 33.764755][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.822714][ T3591] netlink: 248 bytes leftover after parsing attributes in process `syz.2.51'. [ 33.854852][ T3593] veth3: entered promiscuous mode [ 33.860205][ T3593] veth3: entered allmulticast mode [ 33.891131][ T3595] FAULT_INJECTION: forcing a failure. [ 33.891131][ T3595] name failslab, interval 1, probability 0, space 0, times 0 [ 33.903912][ T3595] CPU: 1 UID: 0 PID: 3595 Comm: syz.2.53 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 33.903939][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 33.903954][ T3595] Call Trace: [ 33.903962][ T3595] [ 33.903971][ T3595] __dump_stack+0x1d/0x30 [ 33.903994][ T3595] dump_stack_lvl+0xe8/0x140 [ 33.904024][ T3595] dump_stack+0x15/0x1b [ 33.904044][ T3595] should_fail_ex+0x265/0x280 [ 33.904083][ T3595] should_failslab+0x8c/0xb0 [ 33.904119][ T3595] kmem_cache_alloc_node_noprof+0x57/0x320 [ 33.904282][ T3595] ? __alloc_skb+0x101/0x320 [ 33.904343][ T3595] __alloc_skb+0x101/0x320 [ 33.904376][ T3595] ? audit_log_start+0x365/0x6c0 [ 33.904414][ T3595] audit_log_start+0x380/0x6c0 [ 33.904451][ T3595] audit_seccomp+0x48/0x100 [ 33.904544][ T3595] ? __seccomp_filter+0x68c/0x10d0 [ 33.904569][ T3595] __seccomp_filter+0x69d/0x10d0 [ 33.904645][ T3595] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 33.904674][ T3595] ? vfs_write+0x75e/0x8d0 [ 33.904697][ T3595] ? __rcu_read_unlock+0x4f/0x70 [ 33.904716][ T3595] ? __fget_files+0x184/0x1c0 [ 33.904780][ T3595] __secure_computing+0x82/0x150 [ 33.904803][ T3595] syscall_trace_enter+0xcf/0x1e0 [ 33.904824][ T3595] do_syscall_64+0xaa/0x1a0 [ 33.904848][ T3595] ? clear_bhb_loop+0x25/0x80 [ 33.904876][ T3595] ? clear_bhb_loop+0x25/0x80 [ 33.904902][ T3595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.904927][ T3595] RIP: 0033:0x7f3c38f0e969 [ 33.904950][ T3595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.904973][ T3595] RSP: 002b:00007f3c37577038 EFLAGS: 00000246 ORIG_RAX: 000000000000008c [ 33.904997][ T3595] RAX: ffffffffffffffda RBX: 00007f3c39135fa0 RCX: 00007f3c38f0e969 [ 33.905007][ T3595] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000001 [ 33.905017][ T3595] RBP: 00007f3c37577090 R08: 0000000000000000 R09: 0000000000000000 [ 33.905027][ T3595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.905037][ T3595] R13: 0000000000000000 R14: 00007f3c39135fa0 R15: 00007ffdaa550858 [ 33.905053][ T3595] [ 34.154992][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.194777][ T3602] netlink: 'syz.0.55': attribute type 6 has an invalid length. [ 34.257093][ T3610] vhci_hcd: default hub control req: 2316 v0008 i0005 l0 [ 34.275686][ T3612] loop2: detected capacity change from 0 to 1024 [ 34.286471][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.313462][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.396257][ T3622] Cannot find add_set index 0 as target [ 34.466753][ T3624] vhci_hcd: invalid port number 96 [ 34.471946][ T3624] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 34.508878][ T3624] loop3: detected capacity change from 0 to 2048 [ 34.522514][ T3632] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 34.564427][ T3624] loop3: p1 < > p4 [ 34.569221][ T3624] loop3: p4 size 8388608 extends beyond EOD, truncated [ 34.629744][ T3636] FAULT_INJECTION: forcing a failure. [ 34.629744][ T3636] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.642986][ T3636] CPU: 0 UID: 0 PID: 3636 Comm: syz.3.71 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 34.643122][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.643135][ T3636] Call Trace: [ 34.643141][ T3636] [ 34.643222][ T3636] __dump_stack+0x1d/0x30 [ 34.643242][ T3636] dump_stack_lvl+0xe8/0x140 [ 34.643262][ T3636] dump_stack+0x15/0x1b [ 34.643336][ T3636] should_fail_ex+0x265/0x280 [ 34.643369][ T3636] should_fail+0xb/0x20 [ 34.643404][ T3636] should_fail_usercopy+0x1a/0x20 [ 34.643422][ T3636] _copy_to_user+0x20/0xa0 [ 34.643443][ T3636] simple_read_from_buffer+0xb5/0x130 [ 34.643467][ T3636] proc_fail_nth_read+0x100/0x140 [ 34.643562][ T3636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 34.643658][ T3636] vfs_read+0x19d/0x6f0 [ 34.643712][ T3636] ? __rcu_read_unlock+0x4f/0x70 [ 34.643731][ T3636] ? __rcu_read_unlock+0x4f/0x70 [ 34.643831][ T3636] ? __fget_files+0x184/0x1c0 [ 34.643889][ T3636] ksys_read+0xda/0x1a0 [ 34.643914][ T3636] __x64_sys_read+0x40/0x50 [ 34.643939][ T3636] x64_sys_call+0x2d77/0x2fb0 [ 34.643960][ T3636] do_syscall_64+0xd0/0x1a0 [ 34.644058][ T3636] ? clear_bhb_loop+0x25/0x80 [ 34.644136][ T3636] ? clear_bhb_loop+0x25/0x80 [ 34.644195][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.644216][ T3636] RIP: 0033:0x7f9a214fd37c [ 34.644230][ T3636] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 34.644248][ T3636] RSP: 002b:00007f9a1fb67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.644318][ T3636] RAX: ffffffffffffffda RBX: 00007f9a21725fa0 RCX: 00007f9a214fd37c [ 34.644330][ T3636] RDX: 000000000000000f RSI: 00007f9a1fb670a0 RDI: 0000000000000006 [ 34.644342][ T3636] RBP: 00007f9a1fb67090 R08: 0000000000000000 R09: 0000000000000000 [ 34.644354][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.644365][ T3636] R13: 0000000000000000 R14: 00007f9a21725fa0 R15: 00007fff28067928 [ 34.644384][ T3636] [ 34.857183][ T3638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.879393][ T3640] loop2: detected capacity change from 0 to 1024 [ 34.910850][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.946031][ T3646] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 34.952602][ T3646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.960259][ T3646] vhci_hcd vhci_hcd.0: Device attached [ 34.970710][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.992351][ T3646] SELinux: syz.4.74 (3646) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 35.010826][ T3647] vhci_hcd: connection closed [ 35.011163][ T37] vhci_hcd: stop threads [ 35.020385][ T37] vhci_hcd: release socket [ 35.024940][ T37] vhci_hcd: disconnect device [ 35.165463][ T3669] 9pnet_fd: Insufficient options for proto=fd [ 35.208056][ T3677] FAULT_INJECTION: forcing a failure. [ 35.208056][ T3677] name failslab, interval 1, probability 0, space 0, times 0 [ 35.220805][ T3677] CPU: 1 UID: 0 PID: 3677 Comm: syz.2.85 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 35.220891][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.220901][ T3677] Call Trace: [ 35.220907][ T3677] [ 35.220914][ T3677] __dump_stack+0x1d/0x30 [ 35.220931][ T3677] dump_stack_lvl+0xe8/0x140 [ 35.221015][ T3677] dump_stack+0x15/0x1b [ 35.221034][ T3677] should_fail_ex+0x265/0x280 [ 35.221131][ T3677] ? genl_start+0x117/0x390 [ 35.221156][ T3677] should_failslab+0x8c/0xb0 [ 35.221184][ T3677] __kmalloc_cache_noprof+0x4c/0x320 [ 35.221204][ T3677] genl_start+0x117/0x390 [ 35.221240][ T3677] __netlink_dump_start+0x331/0x520 [ 35.221269][ T3677] genl_family_rcv_msg_dumpit+0x115/0x180 [ 35.221291][ T3677] ? __pfx_genl_start+0x10/0x10 [ 35.221309][ T3677] ? __pfx_genl_dumpit+0x10/0x10 [ 35.221397][ T3677] ? __pfx_genl_done+0x10/0x10 [ 35.221422][ T3677] genl_rcv_msg+0x3f0/0x460 [ 35.221443][ T3677] ? __pfx_ethnl_default_start+0x10/0x10 [ 35.221472][ T3677] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 35.221549][ T3677] ? __pfx_ethnl_default_done+0x10/0x10 [ 35.221580][ T3677] netlink_rcv_skb+0x120/0x220 [ 35.221607][ T3677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 35.221633][ T3677] genl_rcv+0x28/0x40 [ 35.221650][ T3677] netlink_unicast+0x59e/0x670 [ 35.221677][ T3677] netlink_sendmsg+0x58b/0x6b0 [ 35.221729][ T3677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.221760][ T3677] __sock_sendmsg+0x142/0x180 [ 35.221831][ T3677] ____sys_sendmsg+0x31e/0x4e0 [ 35.221850][ T3677] ___sys_sendmsg+0x17b/0x1d0 [ 35.221880][ T3677] __x64_sys_sendmsg+0xd4/0x160 [ 35.221901][ T3677] x64_sys_call+0x2999/0x2fb0 [ 35.221955][ T3677] do_syscall_64+0xd0/0x1a0 [ 35.221974][ T3677] ? clear_bhb_loop+0x25/0x80 [ 35.221992][ T3677] ? clear_bhb_loop+0x25/0x80 [ 35.222010][ T3677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.222053][ T3677] RIP: 0033:0x7f3c38f0e969 [ 35.222173][ T3677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.222316][ T3677] RSP: 002b:00007f3c37577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.222400][ T3677] RAX: ffffffffffffffda RBX: 00007f3c39135fa0 RCX: 00007f3c38f0e969 [ 35.222410][ T3677] RDX: 0000000024040804 RSI: 0000200000000b40 RDI: 0000000000000003 [ 35.222420][ T3677] RBP: 00007f3c37577090 R08: 0000000000000000 R09: 0000000000000000 [ 35.222430][ T3677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.222439][ T3677] R13: 0000000000000000 R14: 00007f3c39135fa0 R15: 00007ffdaa550858 [ 35.222492][ T3677] [ 35.513806][ T3679] loop2: detected capacity change from 0 to 1024 [ 35.535110][ T3679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.572805][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.597228][ T3685] loop2: detected capacity change from 0 to 512 [ 35.606239][ T3685] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.637177][ T3685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.654021][ T3685] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.88: corrupted inode contents [ 35.667587][ T3685] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.88: mark_inode_dirty error [ 35.689429][ T3685] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.88: corrupted inode contents [ 35.783685][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.821356][ T3701] loop1: detected capacity change from 0 to 1024 [ 35.848426][ T3701] ext4: Bad value for 'max_dir_size_kb' [ 35.918474][ T3712] FAULT_INJECTION: forcing a failure. [ 35.918474][ T3712] name failslab, interval 1, probability 0, space 0, times 0 [ 35.931601][ T3712] CPU: 0 UID: 0 PID: 3712 Comm: syz.3.98 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 35.931628][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.931641][ T3712] Call Trace: [ 35.931648][ T3712] [ 35.931656][ T3712] __dump_stack+0x1d/0x30 [ 35.931757][ T3712] dump_stack_lvl+0xe8/0x140 [ 35.931827][ T3712] dump_stack+0x15/0x1b [ 35.931846][ T3712] should_fail_ex+0x265/0x280 [ 35.931938][ T3712] should_failslab+0x8c/0xb0 [ 35.931967][ T3712] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 35.931988][ T3712] ? sidtab_sid2str_get+0xa0/0x130 [ 35.932096][ T3712] kmemdup_noprof+0x2b/0x70 [ 35.932117][ T3712] sidtab_sid2str_get+0xa0/0x130 [ 35.932151][ T3712] security_sid_to_context_core+0x1eb/0x2e0 [ 35.932194][ T3712] security_sid_to_context+0x27/0x40 [ 35.932225][ T3712] selinux_lsmprop_to_secctx+0x67/0xf0 [ 35.932253][ T3712] security_lsmprop_to_secctx+0x43/0x80 [ 35.932279][ T3712] audit_log_task_context+0x77/0x190 [ 35.932369][ T3712] audit_log_task+0xf4/0x250 [ 35.932401][ T3712] audit_seccomp+0x61/0x100 [ 35.932430][ T3712] ? __seccomp_filter+0x68c/0x10d0 [ 35.932450][ T3712] __seccomp_filter+0x69d/0x10d0 [ 35.932491][ T3712] ? avc_has_perm+0xd3/0x150 [ 35.932541][ T3712] __secure_computing+0x82/0x150 [ 35.932566][ T3712] syscall_trace_enter+0xcf/0x1e0 [ 35.932592][ T3712] do_syscall_64+0xaa/0x1a0 [ 35.932649][ T3712] ? clear_bhb_loop+0x25/0x80 [ 35.932755][ T3712] ? clear_bhb_loop+0x25/0x80 [ 35.932782][ T3712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.932802][ T3712] RIP: 0033:0x7f9a214fd37c [ 35.932816][ T3712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 35.932865][ T3712] RSP: 002b:00007f9a1fb67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.932886][ T3712] RAX: ffffffffffffffda RBX: 00007f9a21725fa0 RCX: 00007f9a214fd37c [ 35.932901][ T3712] RDX: 000000000000000f RSI: 00007f9a1fb670a0 RDI: 0000000000000003 [ 35.932914][ T3712] RBP: 00007f9a1fb67090 R08: 0000000000000000 R09: 0000000000000000 [ 35.932929][ T3712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.932943][ T3712] R13: 0000000000000000 R14: 00007f9a21725fa0 R15: 00007fff28067928 [ 35.932965][ T3712] [ 36.387180][ T3717] __nla_validate_parse: 12 callbacks suppressed [ 36.387195][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 36.440045][ T3724] loop4: detected capacity change from 0 to 1024 [ 36.453853][ T3724] EXT4-fs: inline encryption not supported [ 36.467854][ T3726] loop0: detected capacity change from 0 to 1024 [ 36.487993][ T3724] EXT4-fs: Ignoring removed i_version option [ 36.511131][ T3726] EXT4-fs: Ignoring removed nobh option [ 36.516867][ T3726] EXT4-fs: Ignoring removed bh option [ 36.540089][ T3724] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.548477][ T3710] Set syz1 is full, maxelem 65536 reached [ 36.602846][ T3724] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.102: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.605641][ T3731] siw: device registration error -23 [ 36.619198][ T3726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.645944][ T3724] __quota_error: 763 callbacks suppressed [ 36.645958][ T3724] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 36.662323][ T29] audit: type=1400 audit(1746250328.970:919): avc: denied { read write } for pid=3725 comm="syz.0.103" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.684875][ T29] audit: type=1400 audit(1746250328.970:920): avc: denied { open } for pid=3725 comm="syz.0.103" path="/15/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.708009][ T3726] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.103: Allocating blocks 385-513 which overlap fs metadata [ 36.708625][ T3731] netlink: 388 bytes leftover after parsing attributes in process `syz.3.105'. [ 36.745322][ T3724] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.102: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.760396][ T3724] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 36.769294][ T3724] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.102: Failed to acquire dquot type 0 [ 36.777423][ T3726] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.103: Allocating blocks 385-513 which overlap fs metadata [ 36.782925][ T3724] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 36.805876][ T3724] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.102: mark_inode_dirty error [ 36.814524][ T3737] loop3: detected capacity change from 0 to 128 [ 36.817283][ T3724] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 36.835279][ T3724] EXT4-fs (loop4): 1 orphan inode deleted [ 36.841488][ T3724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.845760][ T3737] vfat: Unknown parameter '׹e{lr' [ 36.853879][ T3411] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.876268][ T3735] EXT4-fs (loop0): pa ffff8881065f1000: logic 16, phys. 129, len 24 [ 36.884677][ T3735] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 36.898460][ T3411] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 36.906966][ T3411] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 36.921130][ T3737] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.935039][ T3735] syz.0.103 (3735) used greatest stack depth: 9592 bytes left [ 36.949637][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 36.951116][ T3724] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 16: comm syz.4.102: lblock 0 mapped to illegal pblock 16 (length 1) [ 36.975063][ T3741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.990134][ T29] audit: type=1400 audit(1746250329.300:921): avc: denied { bind } for pid=3723 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.010301][ T29] audit: type=1400 audit(1746250329.300:922): avc: denied { setopt } for pid=3723 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.010525][ T3737] loop3: detected capacity change from 0 to 512 [ 37.033075][ T29] audit: type=1326 audit(1746250329.300:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a214fe969 code=0x7ffc0000 [ 37.060456][ T29] audit: type=1326 audit(1746250329.300:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a214fe969 code=0x7ffc0000 [ 37.066468][ T3746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3746 comm=syz.4.102 [ 37.084083][ T29] audit: type=1326 audit(1746250329.310:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a214fe969 code=0x7ffc0000 [ 37.096129][ T3746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3746 comm=syz.4.102 [ 37.136234][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.146320][ T3737] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.158111][ T3737] EXT4-fs (loop3): 1 truncate cleaned up [ 37.164900][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.172650][ T3724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.194229][ T3741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.220306][ T3757] loop1: detected capacity change from 0 to 1024 [ 37.230721][ T3724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.256572][ T3757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.271646][ T3741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.288296][ T3757] netlink: 180 bytes leftover after parsing attributes in process `syz.1.111'. [ 37.301876][ T3724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.331196][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.347589][ T3741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.396240][ T3724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.450697][ T3741] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.462462][ T3741] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.478749][ T3741] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.496120][ T3741] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.505914][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 37.528541][ T3724] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.543987][ T3724] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.562458][ T3724] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.584160][ T3724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.631782][ T3780] loop0: detected capacity change from 0 to 1024 [ 37.632892][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.649375][ T3302] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.674395][ T3780] EXT4-fs: Ignoring removed oldalloc option [ 37.680505][ T3780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.688746][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.697823][ T3302] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 37.700524][ T3302] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 37.734890][ T3782] loop2: detected capacity change from 0 to 1024 [ 37.753001][ T3780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c018, mo2=0002] [ 37.785339][ T3780] System zones: 0-1, 3-12 [ 37.790209][ T3780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.827881][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.519875][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.542599][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.870037][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 38.894313][ T3807] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.996538][ T3807] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.040051][ T3818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 39.071677][ T3820] loop0: detected capacity change from 0 to 164 [ 39.097589][ T3820] syz.0.132: attempt to access beyond end of device [ 39.097589][ T3820] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.117791][ T3807] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.120847][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 39.141497][ T3822] loop4: detected capacity change from 0 to 164 [ 39.149774][ T3820] syz.0.132: attempt to access beyond end of device [ 39.149774][ T3820] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.177865][ T3825] siw: device registration error -23 [ 39.185376][ T3807] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.200220][ T3825] netlink: 388 bytes leftover after parsing attributes in process `syz.3.134'. [ 39.252563][ T3830] loop3: detected capacity change from 0 to 512 [ 39.262591][ T3830] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 39.279842][ T3830] EXT4-fs (loop3): 1 truncate cleaned up [ 39.286355][ T3830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.295890][ T3833] netlink: 84 bytes leftover after parsing attributes in process `syz.1.137'. [ 39.312750][ T3830] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 39.333437][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.474552][ T3848] loop4: detected capacity change from 0 to 1024 [ 39.486386][ T3848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.503621][ T3852] x_tables: duplicate underflow at hook 2 [ 39.530377][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.530992][ T3854] xt_l2tp: wrong L2TP version: 0 [ 39.562337][ T3858] siw: device registration error -23 [ 39.576393][ T3854] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 39.588545][ T3854] loop1: detected capacity change from 0 to 512 [ 39.596881][ T3854] EXT4-fs: Ignoring removed nobh option [ 39.606106][ T3854] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 39.615087][ T3854] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 39.680429][ T3866] FAULT_INJECTION: forcing a failure. [ 39.680429][ T3866] name failslab, interval 1, probability 0, space 0, times 0 [ 39.693195][ T3866] CPU: 0 UID: 0 PID: 3866 Comm: syz.1.150 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 39.693230][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.693295][ T3866] Call Trace: [ 39.693308][ T3866] [ 39.693317][ T3866] __dump_stack+0x1d/0x30 [ 39.693342][ T3866] dump_stack_lvl+0xe8/0x140 [ 39.693367][ T3866] dump_stack+0x15/0x1b [ 39.693410][ T3866] should_fail_ex+0x265/0x280 [ 39.693513][ T3866] should_failslab+0x8c/0xb0 [ 39.693548][ T3866] __kmalloc_noprof+0xa5/0x3e0 [ 39.693571][ T3866] ? security_prepare_creds+0x52/0x120 [ 39.693677][ T3866] security_prepare_creds+0x52/0x120 [ 39.693736][ T3866] prepare_creds+0x34a/0x4c0 [ 39.693764][ T3866] join_session_keyring+0x19/0x2a0 [ 39.693790][ T3866] lookup_user_key+0x399/0xd10 [ 39.693894][ T3866] ? bpf_trace_run2+0x124/0x1c0 [ 39.693917][ T3866] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 39.693983][ T3866] __se_sys_add_key+0x263/0x350 [ 39.694024][ T3866] __x64_sys_add_key+0x67/0x80 [ 39.694060][ T3866] x64_sys_call+0x1d0d/0x2fb0 [ 39.694087][ T3866] do_syscall_64+0xd0/0x1a0 [ 39.694158][ T3866] ? clear_bhb_loop+0x25/0x80 [ 39.694252][ T3866] ? clear_bhb_loop+0x25/0x80 [ 39.694316][ T3866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.694340][ T3866] RIP: 0033:0x7f5cfa23e969 [ 39.694358][ T3866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.694461][ T3866] RSP: 002b:00007f5cf88a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 39.694479][ T3866] RAX: ffffffffffffffda RBX: 00007f5cfa465fa0 RCX: 00007f5cfa23e969 [ 39.694491][ T3866] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000000 [ 39.694527][ T3866] RBP: 00007f5cf88a7090 R08: fffffffffffffffd R09: 0000000000000000 [ 39.694542][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.694629][ T3866] R13: 0000000000000000 R14: 00007f5cfa465fa0 R15: 00007fff4e4f5188 [ 39.694654][ T3866] [ 39.708944][ T3868] loop4: detected capacity change from 0 to 128 [ 39.991319][ T3877] loop4: detected capacity change from 0 to 2048 [ 40.007055][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.028868][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.053090][ T3883] loop4: detected capacity change from 0 to 1024 [ 40.060228][ T3883] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 40.071159][ T3883] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 40.080996][ T3883] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.091197][ T3883] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 40.123981][ T3885] loop4: detected capacity change from 0 to 1024 [ 40.136110][ T3885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.162991][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.224250][ T3893] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 40.418690][ T3908] syzkaller0: entered promiscuous mode [ 40.424455][ T3908] syzkaller0: entered allmulticast mode [ 40.436779][ T3909] pimreg: entered allmulticast mode [ 40.451094][ T3908] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 40.571996][ T3911] ------------[ cut here ]------------ [ 40.577573][ T3911] WARNING: CPU: 0 PID: 3911 at mm/page_alloc.c:4946 __alloc_frozen_pages_noprof+0x218/0x360 [ 40.587983][ T3911] Modules linked in: [ 40.591918][ T3911] CPU: 0 UID: 0 PID: 3911 Comm: syz.3.165 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 40.604353][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.614661][ T3911] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 40.621414][ T3911] Code: 83 3d 63 b5 50 05 02 72 0e 48 83 b8 a0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 52 b2 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 40.641153][ T3911] RSP: 0018:ffffc90001a17a40 EFLAGS: 00010246 [ 40.647414][ T3911] RAX: db7ac439baf41600 RBX: 000000000000000e RCX: 0000000000000000 [ 40.655463][ T3911] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 40.663571][ T3911] RBP: 0000000000000dc0 R08: ffff8881020ecc98 R09: 0000000000000000 [ 40.671568][ T3911] R10: ffff88811b5254e8 R11: 000188811b5254e8 R12: ffffc90001a17d38 [ 40.679738][ T3911] R13: 000000000000fed8 R14: 0000000000040dc0 R15: 0000000000000000 [ 40.687878][ T3911] FS: 00007f9a1fb676c0(0000) GS:ffff8882aee50000(0000) knlGS:0000000000000000 [ 40.697049][ T3911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.703906][ T3911] CR2: 000020000000f000 CR3: 0000000115bf6000 CR4: 00000000003506f0 [ 40.711975][ T3911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.720010][ T3911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.728108][ T3911] Call Trace: [ 40.731405][ T3911] [ 40.734444][ T3911] __alloc_pages_noprof+0x9/0x20 [ 40.739558][ T3911] ___kmalloc_large_node+0x73/0x130 [ 40.744935][ T3911] __kmalloc_large_node_noprof+0x16/0xa0 [ 40.750666][ T3911] __kmalloc_noprof+0x2ab/0x3e0 [ 40.755578][ T3911] ? hashtab_init+0x9b/0xe0 [ 40.760153][ T3911] ? common_read+0x3f/0x300 [ 40.764693][ T3911] hashtab_init+0x9b/0xe0 [ 40.769052][ T3911] symtab_init+0x2c/0x40 [ 40.773345][ T3911] common_read+0x10b/0x300 [ 40.777797][ T3911] ? __pfx_common_read+0x10/0x10 [ 40.782797][ T3911] policydb_read+0x64f/0x1330 [ 40.787598][ T3911] ? security_load_policy+0x90/0x890 [ 40.792971][ T3911] security_load_policy+0xba/0x890 [ 40.798262][ T3911] ? rep_movs_alternative+0x4a/0x90 [ 40.803594][ T3911] sel_write_load+0x1d4/0x380 [ 40.808353][ T3911] ? __pfx_sel_write_load+0x10/0x10 [ 40.813613][ T3911] vfs_write+0x266/0x8d0 [ 40.817974][ T3911] ? __rcu_read_unlock+0x4f/0x70 [ 40.823066][ T3911] ? __fget_files+0x184/0x1c0 [ 40.827953][ T3911] ksys_write+0xda/0x1a0 [ 40.832313][ T3911] __x64_sys_write+0x40/0x50 [ 40.836984][ T3911] x64_sys_call+0x2cdd/0x2fb0 [ 40.841842][ T3911] do_syscall_64+0xd0/0x1a0 [ 40.846507][ T3911] ? clear_bhb_loop+0x25/0x80 [ 40.851229][ T3911] ? clear_bhb_loop+0x25/0x80 [ 40.856152][ T3911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.862084][ T3911] RIP: 0033:0x7f9a214fe969 [ 40.866564][ T3911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.886414][ T3911] RSP: 002b:00007f9a1fb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.894954][ T3911] RAX: ffffffffffffffda RBX: 00007f9a21725fa0 RCX: 00007f9a214fe969 [ 40.903038][ T3911] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000005 [ 40.911149][ T3911] RBP: 00007f9a21580ab1 R08: 0000000000000000 R09: 0000000000000000 [ 40.916385][ T3919] xt_hashlimit: max too large, truncated to 1048576 [ 40.919145][ T3911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.919159][ T3911] R13: 0000000000000000 R14: 00007f9a21725fa0 R15: 00007fff28067928 [ 40.941905][ T3911] [ 40.945046][ T3911] ---[ end trace 0000000000000000 ]--- [ 40.950620][ T3911] SELinux: failed to load policy [ 40.974081][ T3922] loop0: detected capacity change from 0 to 1024 [ 40.986877][ T3922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.996018][ T3926] loop3: detected capacity change from 0 to 512 [ 41.009250][ T3926] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.030052][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.038694][ T3926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.060813][ T3926] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.169: corrupted inode contents [ 41.086753][ T3926] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.169: mark_inode_dirty error [ 41.111990][ T3926] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.169: corrupted inode contents [ 41.232745][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.361040][ T3950] infiniband syz!: set active [ 41.365835][ T3950] infiniband syz!: added team_slave_0 [ 41.392854][ T3950] RDS/IB: syz!: added [ 41.413381][ T3950] smc: adding ib device syz! with port count 1 [ 41.419660][ T3950] smc: ib device syz! port 1 has pnetid [ 41.507285][ T3961] netlink: 'syz.4.180': attribute type 30 has an invalid length. [ 41.678505][ T29] kauditd_printk_skb: 805 callbacks suppressed [ 41.678560][ T29] audit: type=1326 audit(1746250333.990:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.708222][ T29] audit: type=1326 audit(1746250333.990:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.731545][ T29] audit: type=1326 audit(1746250333.990:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.754918][ T29] audit: type=1326 audit(1746250333.990:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.778276][ T29] audit: type=1326 audit(1746250333.990:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.801665][ T29] audit: type=1326 audit(1746250333.990:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.853875][ T29] audit: type=1326 audit(1746250334.150:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.877384][ T29] audit: type=1326 audit(1746250334.150:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.900884][ T29] audit: type=1326 audit(1746250334.160:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 41.931539][ T29] audit: type=1400 audit(1746250334.160:1740): avc: denied { bind } for pid=3964 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.984227][ T3970] loop1: detected capacity change from 0 to 512 [ 41.991236][ T3970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.002701][ T3970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 42.023136][ T3970] System zones: 1-12 [ 42.027889][ T3970] EXT4-fs (loop1): 1 truncate cleaned up [ 42.035692][ T3970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.069387][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.214998][ T3807] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.227952][ T3807] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.257520][ T3807] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.283664][ T3807] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.426342][ T3986] loop1: detected capacity change from 0 to 2048 [ 42.474543][ T3986] loop1: p1 < > p4 [ 42.480747][ T3986] loop1: p4 size 8388608 extends beyond EOD, truncated [ 42.526638][ T4000] loop4: detected capacity change from 0 to 1024 [ 42.542328][ T4002] loop2: detected capacity change from 0 to 2048 [ 42.558786][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.587639][ T4000] __nla_validate_parse: 7 callbacks suppressed [ 42.587659][ T4000] netlink: 180 bytes leftover after parsing attributes in process `syz.4.193'. [ 42.600081][ T4002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.615529][ T4002] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.637783][ T4002] bridge0: port 3(gretap0) entered blocking state [ 42.644455][ T4002] bridge0: port 3(gretap0) entered disabled state [ 42.651257][ T4002] gretap0: entered allmulticast mode [ 42.657455][ T4002] gretap0: entered promiscuous mode [ 42.659138][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.663073][ T4002] bridge0: port 3(gretap0) entered blocking state [ 42.678191][ T4002] bridge0: port 3(gretap0) entered forwarding state [ 42.713784][ T4015] netlink: 664 bytes leftover after parsing attributes in process `syz.0.196'. [ 42.768936][ T4020] loop0: detected capacity change from 0 to 512 [ 42.778060][ T4020] EXT4-fs: inline encryption not supported [ 42.787891][ T4020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.801277][ T4020] EXT4-fs (loop0): 1 truncate cleaned up [ 42.807666][ T4020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.830209][ T4020] Invalid ELF header len 6 [ 42.864059][ T3319] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 42.892538][ T4020] netlink: 156 bytes leftover after parsing attributes in process `syz.0.199'. [ 42.922670][ T3319] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 410 with error 117 [ 42.935348][ T3319] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.935348][ T3319] [ 42.953935][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 42.980174][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.374012][ T4038] loop0: detected capacity change from 0 to 2048 [ 43.423695][ T3292] loop0: p1 < > p4 [ 43.428269][ T3292] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.440843][ T4038] loop0: p1 < > p4 [ 43.446163][ T4038] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.459797][ T3004] loop0: p1 < > p4 [ 43.464294][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.515809][ T4042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.539836][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 43.540614][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 43.556909][ T4042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.591390][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 43.591610][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 43.654045][ T4024] syz.2.194 (4024) used greatest stack depth: 9496 bytes left [ 43.708749][ T4052] loop0: detected capacity change from 0 to 1024 [ 43.729378][ T4002] syz.2.194 (4002) used greatest stack depth: 4968 bytes left [ 43.738615][ T4052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.758045][ T4052] netlink: 180 bytes leftover after parsing attributes in process `syz.0.210'. [ 43.772504][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.786747][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.796929][ T4042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.805855][ T4042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.843032][ T4064] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 43.859014][ T4064] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 43.870155][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.879777][ T4067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'. [ 43.889918][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.904387][ T4067] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.912737][ T4067] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.921086][ T4067] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.929313][ T4067] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.958021][ T4070] loop4: detected capacity change from 0 to 1024 [ 44.006050][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.057423][ T4067] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.216: Allocating blocks 497-513 which overlap fs metadata [ 44.073383][ T4067] EXT4-fs (loop4): pa ffff888106633700: logic 256, phys. 369, len 9 [ 44.081491][ T4067] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 44.083057][ T4080] Zero length message leads to an empty skb [ 44.118858][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 44.176833][ T4069] loop3: detected capacity change from 0 to 2048 [ 44.243907][ T4069] loop3: p1 < > p4 [ 44.249339][ T4069] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.258757][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.271647][ T3004] loop3: p1 < > p4 [ 44.281553][ T4088] loop4: detected capacity change from 0 to 1024 [ 44.288421][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.316604][ T4088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.340717][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 44.351074][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.377098][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.387371][ T4088] netlink: 180 bytes leftover after parsing attributes in process `syz.4.224'. [ 44.410516][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.432887][ T4098] FAULT_INJECTION: forcing a failure. [ 44.432887][ T4098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.446153][ T4098] CPU: 0 UID: 0 PID: 4098 Comm: syz.4.228 Tainted: G W 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 44.446193][ T4098] Tainted: [W]=WARN [ 44.446200][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.446273][ T4098] Call Trace: [ 44.446281][ T4098] [ 44.446288][ T4098] __dump_stack+0x1d/0x30 [ 44.446376][ T4098] dump_stack_lvl+0xe8/0x140 [ 44.446401][ T4098] dump_stack+0x15/0x1b [ 44.446478][ T4098] should_fail_ex+0x265/0x280 [ 44.446582][ T4098] should_fail+0xb/0x20 [ 44.446615][ T4098] should_fail_usercopy+0x1a/0x20 [ 44.446636][ T4098] strncpy_from_user+0x25/0x230 [ 44.446661][ T4098] ? kmem_cache_alloc_noprof+0x186/0x310 [ 44.446707][ T4098] ? getname_flags+0x80/0x3b0 [ 44.446745][ T4098] getname_flags+0xae/0x3b0 [ 44.446833][ T4098] __x64_sys_rename+0x33/0x70 [ 44.446866][ T4098] x64_sys_call+0x2aee/0x2fb0 [ 44.446964][ T4098] do_syscall_64+0xd0/0x1a0 [ 44.446995][ T4098] ? clear_bhb_loop+0x25/0x80 [ 44.447020][ T4098] ? clear_bhb_loop+0x25/0x80 [ 44.447047][ T4098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.447105][ T4098] RIP: 0033:0x7f5b428fe969 [ 44.447124][ T4098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.447144][ T4098] RSP: 002b:00007f5b40f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 44.447161][ T4098] RAX: ffffffffffffffda RBX: 00007f5b42b25fa0 RCX: 00007f5b428fe969 [ 44.447173][ T4098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.447256][ T4098] RBP: 00007f5b40f67090 R08: 0000000000000000 R09: 0000000000000000 [ 44.447271][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.447285][ T4098] R13: 0000000000000000 R14: 00007f5b42b25fa0 R15: 00007fffaed88e18 [ 44.447353][ T4098] [ 44.654326][ T4100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 44.778149][ T4106] siw: device registration error -23 [ 44.784899][ T4106] netlink: 388 bytes leftover after parsing attributes in process `syz.4.232'. [ 44.824749][ T4110] SELinux: security_context_str_to_sid () failed with errno=-22 [ 44.886358][ T4113] loop0: detected capacity change from 0 to 1024 [ 44.917687][ T4113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.960796][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.216159][ T4139] netlink: 'syz.3.241': attribute type 13 has an invalid length. [ 45.254638][ T4139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.270413][ T4138] Cannot find add_set index 0 as target [ 45.287853][ T4138] loop3: detected capacity change from 0 to 2048 [ 45.305878][ T4138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.319004][ T4138] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.880115][ T4149] loop0: detected capacity change from 0 to 1024 [ 45.908918][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.919246][ T4149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.971416][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.997059][ T4163] loop3: detected capacity change from 0 to 1024 [ 46.014893][ T4165] loop4: detected capacity change from 0 to 512 [ 46.027414][ T4163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.053528][ T4165] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.078772][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.109917][ T4165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.154157][ T4165] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 46.178328][ T4165] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.255: mark_inode_dirty error [ 46.203970][ T4165] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.255: corrupted inode contents [ 46.271609][ T4192] loop0: detected capacity change from 0 to 1024 [ 46.304647][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.326275][ T4192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.376991][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.437719][ T4204] loop2: detected capacity change from 0 to 1024 [ 46.718296][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 46.718310][ T29] audit: type=1400 audit(1746250339.030:2312): avc: denied { write } for pid=4214 comm="syz.0.270" path="socket:[8302]" dev="sockfs" ino=8302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.883239][ T4204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.954622][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.954751][ T29] audit: type=1326 audit(1746250339.260:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 46.987241][ T29] audit: type=1326 audit(1746250339.270:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b428fe969 code=0x7ffc0000 [ 47.046905][ T4227] loop3: detected capacity change from 0 to 1024 [ 47.084223][ T4225] Falling back ldisc for ttyS3. [ 47.089443][ T29] audit: type=1326 audit(1746250339.320:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.112874][ T29] audit: type=1326 audit(1746250339.320:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.136430][ T29] audit: type=1326 audit(1746250339.320:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.159870][ T29] audit: type=1326 audit(1746250339.320:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.183281][ T29] audit: type=1326 audit(1746250339.320:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.206850][ T29] audit: type=1326 audit(1746250339.320:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.230409][ T29] audit: type=1326 audit(1746250339.320:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5cfa23e969 code=0x7ffc0000 [ 47.245288][ T4230] sd 0:0:1:0: device reset [ 47.269471][ T4227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.294685][ T4230] syz.2.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.306004][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.346899][ T4242] loop3: detected capacity change from 0 to 2048 [ 47.367725][ T4242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.383574][ T4242] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.395757][ T3004] ================================================================== [ 47.403890][ T3004] BUG: KCSAN: data-race in d_delete / lookup_fast [ 47.410328][ T3004] [ 47.412654][ T3004] read-write to 0xffff888106793b40 of 4 bytes by task 3295 on cpu 1: [ 47.420809][ T3004] d_delete+0x15a/0x180 [ 47.424975][ T3004] d_delete_notify+0x32/0x100 [ 47.429667][ T3004] vfs_unlink+0x30b/0x420 [ 47.434009][ T3004] do_unlinkat+0x28e/0x4c0 [ 47.438607][ T3004] __x64_sys_unlink+0x2e/0x40 [ 47.443294][ T3004] x64_sys_call+0x22a6/0x2fb0 [ 47.447985][ T3004] do_syscall_64+0xd0/0x1a0 [ 47.452500][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.458399][ T3004] [ 47.460726][ T3004] read to 0xffff888106793b40 of 4 bytes by task 3004 on cpu 0: [ 47.468270][ T3004] lookup_fast+0xf0/0x320 [ 47.472617][ T3004] walk_component+0x3f/0x220 [ 47.477234][ T3004] path_lookupat+0xfe/0x2a0 [ 47.481780][ T3004] filename_lookup+0x147/0x340 [ 47.486564][ T3004] do_readlinkat+0x7d/0x320 [ 47.491074][ T3004] __x64_sys_readlink+0x47/0x60 [ 47.495944][ T3004] x64_sys_call+0x2cf3/0x2fb0 [ 47.500626][ T3004] do_syscall_64+0xd0/0x1a0 [ 47.505136][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.511035][ T3004] [ 47.513357][ T3004] value changed: 0x00300108 -> 0x00004008 [ 47.519073][ T3004] [ 47.521396][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 47.527551][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Tainted: G W 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 47.541100][ T3004] Tainted: [W]=WARN [ 47.544900][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.554958][ T3004] ================================================================== [ 47.573627][ T4242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.279: bg 0: block 345: padding at end of block bitmap is not set [ 47.599584][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.708588][ T4250] hub 2-0:1.0: USB hub found [ 47.713401][ T4250] hub 2-0:1.0: 8 ports detected