last executing test programs: 45.063573163s ago: executing program 0 (id=24): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa, 0x2}, 0xe) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/115, 0x73}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x4014}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read(0xffffffffffffffff, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sync() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00 \x00$\x00'], 0x50) 44.690868733s ago: executing program 0 (id=28): recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000600)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000280)=""/29, 0x1d}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000580)=""/123, 0x7b}], 0x7, &(0x7f0000000680)=""/184, 0xb8}, 0x2100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0xa0000001}) epoll_wait(r6, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r3, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000780)) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map, 0xffffffffffffffff, 0x7, 0x201c}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f00000007c0)='9\v\xd0\a\xe8\xb5\x95\xf6\xc1\xcbc\r\x02iq\xd3k\xf0\xcb\x98\x1a\x1c\x8c\xcb\xf8r\"N>\xd6\x8el\x94\xaeZe\xb6\x0f\xec|R\x0e\xc3\xf0\xdaFR\xc0k\x7fj]l|\xdc\x9e\xeb.\xf4\xe7\x9b,\x014\xb0J\xa2d\xc1\xa0\x00\x00\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000"], 0x122}}, 0x8010) 44.448145503s ago: executing program 0 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001240)={@multicast2, @remote, r3}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x40810, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000840)={@rand_addr, @dev}, &(0x7f0000000880)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x14) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r9, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x8e, 0xff, 0x1ff, 0x20, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x700, 0x8, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x2, 0xfff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x7, 0xfc6, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x7, 0x2, @private1, @rand_addr=' \x01\x00', 0x7, 0x8000, 0xa, 0x80000001}}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 44.283525646s ago: executing program 0 (id=33): modify_ldt$read(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat(r5, 0x0, 0x640, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 43.961027321s ago: executing program 0 (id=35): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000001880)=[{0x8, 0xc, 0x5, 0x1}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000d40)='sit0\x00') add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r4) socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) cachestat(r5, &(0x7f0000000380)={0x9, 0x1}, &(0x7f00000003c0), 0x0) 43.663227636s ago: executing program 0 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', 0x0) r1 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000001600)=ANY=[@ANYBLOB="050010000000050378802758549f767917a511fcb95a6811c89a9f938f6cf26e7819264e754f6926491e65d5bb1ca3266a6f910bb5b1e593e3a2def1e13049f1986b50e948b41ac142acf5c3cf0b6ff8783fcf95340b1d4c44dec7e1d04b44b97ec847be69f7dca7d273c4e59043dd12f9c5121bec2bdcb48aca8ba9c7df3307e0214f9f171def296cd993dbd586d6f628e09b3a5d0c975c139ee587540dd4b1575035121ed3e2c39c70fc0408e942ea37b31cb97bf8bd28fa32cb77d9b53e6e0ffc98766e680b1b343b9091260069dc31cd3e8d4c824057e0941b24dd81db232343f09df2d37c6ce1e958788b8524cae29d2c44f37643b99b874261920bdbf07c5b5657b8c5a074ba16618c6b542dc70f151208e439ac1e0944816c2df39760c8521324da15a53bd1391d39e97bd3540d36edb4caad4f44b7fcff09ecc660d2d07d24a20e6268e4635dc1cd5135626df36a971f736ba3dca2506a836af680f601b6d5fd1c9bf16ab29fcbef46d483440444fcba2caf4193accf1f2d96f5f38b2d9b381af5c9772715e0f0baae7acf39ecb0a8d990e7969f31eada123df3f95cf3d718310780016fa7933e13d2d552991d4d9d36b6c03b46da6511382fa17a4cd78d8d87ac8c8c0f0a190463671d2ef879fc9434051f8493cf58c712dba038151a959601dd5cee5533a488ff8dd78f9f84af12c8027af72bfa71eff13685642be63d70e87b4b263dbb0aa74fa0ca10a5b475d8059fa0740716d12c3bc6092f3a006a0e837e1267acf9c4df38e728a9f632cb2b1e3ff5be15ab9d62aa39d7725304126e906c1b8f9a7a5c189e5ad9e5385827371df09ce5ece4a28d1e19ffa0f63ae831d74a419ae35cc9a8be23e16f989b12b28f5885acb90551335a5c3843fc5d2a93720996d58ab211a4db493a1c5dfbbfa6edccda5c5bcaf3d2d2eaf76b68a53d9af08daba8d84b26aea91dadec729cc26d4c3d24cc464e6e750e5e178fd161640c072d93680eb99f4aa27b0cb37312eaa879b3884116d995c3cc42df17d0d16b4197965e3f55e5119b240f19c89bab52f548f06d6334a199b29761f6b6cff40e75b901f3182cdd0c6189e6efbac2319ce43e939bf775f7da796f9bde02f7ece13874216f86818004df381fa14deb476eabbba842a663523c2fe661083ff75b05be6a474114e9bcbac24ccc3a23681ef2bc62a0ff0415ee2f5ea255f131566206b0d42b21bdbeaba935c96193af7ef0e291119f03452ef97347c6af0c4df01511f75fa328de35d5b2ba4238eb"], 0x381, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000001a0000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) getpriority(0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 43.662824756s ago: executing program 32 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', 0x0) r1 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x381, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000001a0000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) getpriority(0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 3.708468401s ago: executing program 4 (id=258): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYBLOB="6e77f9b6b8276c49d817228a240ed20603b709a0c6f07830fa8eb4e8938fc3655e7f5074921f7fd162", @ANYRES16=0x0], 0x0, 0x28, 0x0, 0x5, 0x5}, 0x28) r1 = msgget$private(0x0, 0x790) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000bb93c555eb00d350012800e00c90069703665727370616e00800400120005001100010000000500100009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) dup3(r5, r4, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.777720276s ago: executing program 2 (id=262): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00:'], 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x1, 0x8, 0x0, 0x2, 0x20, 0x4}, @ldst={0x0, 0x3, 0x4, 0x9, 0xe, 0x6, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000440)=[r2, r1, r2], &(0x7f0000000480)=[{0x2, 0x4, 0x9, 0x5}, {0x3, 0x4, 0x7, 0xb}, {0x5, 0x3, 0x8, 0x9}, {0x0, 0x3, 0x4, 0x4}, {0x2, 0x1, 0x7, 0x2}, {0x0, 0x3, 0x3, 0x7}, {0x5, 0x3, 0x7, 0x1}, {0x5, 0x5, 0x8, 0x9}, {0x4, 0x2, 0xc, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=""/29, 0x1d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r3, &(0x7f0000000080)=""/22, 0x16, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x43403d0e, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2.771044957s ago: executing program 4 (id=263): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1de) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000002172b4ce359280e2004d0200"/54], 0x78) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000140)=0xc) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x6, "e4639997"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x168}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000040), 0x1) 2.48083795s ago: executing program 4 (id=266): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80800) close_range(r1, 0xffffffffffffffff, 0x0) 2.402340546s ago: executing program 5 (id=267): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, 0x0, 0x78) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x9100, 0x3) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(0xffffffffffffffff) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[], 0x7c8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) 2.200049052s ago: executing program 5 (id=269): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x202, 0x7b5, 0x7, r3}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 1.968589331s ago: executing program 5 (id=270): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8000480) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000003c0)={0x12, 0x6e, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.967647991s ago: executing program 2 (id=271): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000014001680100001800c00090009000000060000001400030062617461"], 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="182aad6835d0ed00aebba5d500000000000000000000000000000018011d002020702500000000002039203b1af8ff00000000bfa10000000000010000f8ffffffb732a7dd8f000000b70300009e56"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcgss_createauth\x00', r0}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xff, 0x4, 0x8, 0xa9, 0x0, 0x3, 0x10942, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x400, 0x7, 0x0, 0x5, 0x4d4b, 0xfffffff8, 0x45, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, r1, 0x9) inotify_init1(0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r5 = syz_open_pts(r4, 0x40000) dup3(r5, r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x1d69, 0x4b5d, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x1) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x80}}, {@dots}, {@fat=@quiet}, {@fat=@usefree}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@dots}, {@fat=@nfs_stale_rw}, {@nodots}, {@nodots}, {@dots}, {@fat=@errors_continue}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}]}, 0x0, 0x262, &(0x7f0000001100)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) syz_usbip_server_init(0x1) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001c80)) recvfrom$inet_nvme(r6, &(0x7f0000000180)=""/8, 0x8, 0x40010010, 0x0, 0x0) 1.933957044s ago: executing program 1 (id=272): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x800, &(0x7f0000000340)={[{@delalloc}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x9}}, {@abort}, {@data_err_ignore}]}, 0x2, 0x48e, &(0x7f0000000ec0)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBQavE2PjS0oLKwYtGEw8YTfSA8WJtCyEUamhNhBCpxuDFxJDoWT2a+Bd482LUk4lXvRsSolxATzUzO1N2l267hWW3tJ9Pst3n2Xlmn+e7M8/OM/NMN4ANazD7k0Rsi4jfI6K/mq0vMFh9un71/MQ/V89PJLGw8MZfSV7u2tXzE2XRcr2tRWYojUg/SYpK6s2ePXdyfHp66kyRH5k79d7I7NlzT584NX586vjU6bHDhw8dHH3u2bFn2hJnFte1PR/O7N39yluXXp04eundn7/L2rutWF4bR4NNDc8tG8wC/3sht/hiWn16bNURrG3ba9JJTxcbwqpUIiLbXL15/++PStzYeP3x8sddbRxwR2XHpmUObPMLwDqWxKpX2Vd8cQB3tfJAn53/lo9Wxg1vt2f40XVXXqieAGVxXy8e1SU95al6fm60/Q7VPxgRR+f//Sp7xPLXIQAA2uKziS+PxFNLjf/SuK+m3I5iDmUgIv4fETsj4p6I2BUR90bkZe+PiAdWrjKtzTRODd08/kkv33JwLcjGf88Xc1v147/FZg5Uitz2PP7e5NiJ6akDxWcyFL2bsvzoMnX88NJvnzdbVjv+yx5Z/eVYsGjH5Z6GC3ST43Pj+aC0Da58FLGnZ6n4k8WZgCQidkfEntW99Y4yceKJb/c2K7Ry/MtowzzTwjcRj1e3/3w0xF9Klp+fHPlfTE8dGCn3ipv98uvF15vVf1vxt0G2/bfU7/+NRQaS2vna2dXXcfGPT5ue09zq/t+XvJmv21e89sH43NyZ0Yi+5Eier3t97Ma6Zb4sn8U/tH/p/r+zWCeL/8GIyHbifRHxUEQ8XLT9kYh4NCL2LxP/Ty82X1Yf/+Zt3dj+kw3ff5vzJYv7f8P2X32icvLH75eu/et3Wtv+h/LUUPFK/v23glYbeJsfHwAAANwV0vwe+CQdXkyn6fBw9R7+XbElnZ6ZnXvy2Mz7pyer98oPRG9aXunqr7keOprMF+9YzY8V14rL5QeL68ZfVDbn+eGJmenJLscOG93WJv0/82el260D7ril5tHG+rrQEKDjGvt/Wp+98FonGwN0VNP7aLZ0th1A561wH13aqXYAndfyfbR+2QXWnaV69YWGvLkAWJ8c1WHj0v9h49L/YePS/2FDWumf5Cs3lSl/eORWfw1AooVEpYu1J60VjnQtfFBrIZH1iLa8Yd+aCKdIrPDFYT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4S/wXAAD//9RO4sM=") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ptrace(0x10, r0) 1.620710289s ago: executing program 4 (id=274): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001740)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x84, 0x7fffffff}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/129, 0x81}, 0x7}], 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x53a, &(0x7f0000000c80)="$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") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x779}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000340)='GPL\x00', 0x2, 0xb5, &(0x7f0000000540)=""/181, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x6, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r1, r1], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) close(r7) 1.48836517s ago: executing program 4 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2f, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioprio_get$pid(0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d667363616368"]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYBLOB="f700006f"], 0x8) chdir(&(0x7f0000000300)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2c0000, 0x28) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 1.4874101s ago: executing program 3 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) r6 = memfd_create(&(0x7f0000000f80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%o\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aOg\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x01\x80\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3Wt`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\bx\xd2x\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb0\xbd\xd8,\xea\xeaT\xa6\x12\x1d\x1b6\xcf\xd3\x84-Z\xb4\xc1hh\x81*\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000180)="e502", 0x2) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000140)={0xa0002000}) sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='\b', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r9, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 1.322281633s ago: executing program 5 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid\x00') sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9965}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 1.321774613s ago: executing program 3 (id=279): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800e8fffff5000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f0000000040)) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) shmget(0x0, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.165320226s ago: executing program 3 (id=280): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, 0x0, 0x78) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x9100, 0x3) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(0xffffffffffffffff) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[], 0x7c8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) 1.164312336s ago: executing program 5 (id=281): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="6e77f9b6b8276c49d817228a240ed20603b709a0c6f07830fa8eb4e8938fc3655e7f5074921f7fd162", @ANYRES16=0x0], 0x0, 0x28, 0x0, 0x1, 0x5}, 0x28) r3 = msgget$private(0x0, 0x790) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000280)={0x6, &(0x7f0000000100)=[{0x1, 0x4, 0x9, 0x2}, {0x20, 0x2, 0xd1, 0xbe}, {0x80, 0x2, 0xd, 0x3}, {0xfffd, 0x7, 0x9, 0x7d}, {0x2, 0x3, 0xff, 0x4}, {0x196, 0xc7, 0xfd, 0xf}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000f9ff00"/31], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14}, 0x94) 1.075761103s ago: executing program 1 (id=282): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) fadvise64(0xffffffffffffffff, 0x2, 0x7d962850, 0x0) r5 = dup3(r1, r0, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) stat(&(0x7f0000000240)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x5, 0xffffffffffffffff, &(0x7f0000000340)=0x3, 0xd, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./file3\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x8000000000000000}}, {@timeout={'timeout', 0x3d, 0xf}}, {@rq={'rq', 0x3d, 0x200}}, {@common=@dfltuid}, {@timeout={'timeout', 0x3d, 0x7fffffffffffffff}}, {@sq={'sq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x6f537f6a}}], [{@euid_eq}, {@uid_lt}, {@fowner_lt}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_type={'obj_type', 0x3d, '(\'-&)'}}, {@pcr={'pcr', 0x3d, 0x20}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee01}}]}}) 972.658911ms ago: executing program 3 (id=283): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0xfffffffe, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='svcsock_tcp_state\x00', r9, 0x0, 0x1}, 0x18) unshare(0x2c060000) unshare(0x2c020400) 934.599774ms ago: executing program 3 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80800) close_range(r1, 0xffffffffffffffff, 0x0) 601.788471ms ago: executing program 4 (id=285): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000000000a504000000000000000000000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000007c0)=""/175}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000280), &(0x7f0000000300)=r2}, 0x20) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00'}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0xa, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) 590.168672ms ago: executing program 2 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20c80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) openat(0xffffffffffffffff, &(0x7f0000004400)='./bus\x00', 0x181202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x7fffffff, 0x2, 0x1, 0x0, r3, 0xe, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x3d, 0x1, 0x0, 0xfffff014}]}) 545.510636ms ago: executing program 1 (id=287): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0xfffffffe, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='svcsock_tcp_state\x00', r9, 0x0, 0x1}, 0x18) unshare(0x2c060000) unshare(0x2c020400) 355.826631ms ago: executing program 1 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@nobarrier}, {@jqfmt_vfsv0}, {@delalloc, 0x2e}, {@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc3c}}], [], 0x22}, 0x85, 0x464, &(0x7f0000000ac0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000140)="a8cf8999c10e66cec1d6e5f5652678794bac0ee9789eaabd", &(0x7f0000000280)=""/227, &(0x7f0000000f40)="1f873c384f1e0f8233001769caeaaf4adb7e8d83e76dc5ac3773102d1bc5949b1a0766fcb3cc8acd3e345b13109120dafa062732ac3a709d4deb0a3aead1a3fe488c5e98f1eed7aa8cc89a3d5c3e6b1d76166ba9e54744437f956863c993283aa3724ac100c0d815ebe20df72097e31f79c0924ed1ef633b9baf0f41f4295ffc2a33f41504123513f54b3d5b5875cff386bf64073f7a4f06f6740dfe1182f3d3479cb75676307d2571d386d6d13cdfc791fe558e5b37981e4298d5dcdcd3aeae505af50e4d99e36b8fa333954cbf9c21b7f8efcf0873fca2eef560a6e80425ba627175a20da48cf116c21ff64efec5b587bc32ef939efc6c41d07932ab0f1a5d9ebfc08612be3dadb3169169bb2239b552f4ce339d291b9f06f0834a9fb06998321a70d0b8cb29a81ecd41e16666e8064aa94394dd35b61094a8390c5b43f2ccd376a3da5a47467ed0c334348ae444fed8536122f32ea9b9c77e977bbcd8fe1d3ff51331c8e9d94d13cd18223c5c4c57bf85252988f2394142fd8ee04d7ff1b1a4560688e6b4fafe3c052e0cedf5a12daa0884509e6cb85426daa946e4242dddbbd61d70396bc954997df8e6a73777d660a12d1b580320f05fe88ed4f0265ae9795de8828d71eb52e7dc7d84bd465246b686e7bf03c77c2c1256d2f52c9739e2947f771e8dc1631d6b4776033bd323bcd142db2c7437f43e6048d1ff63afe7a361fca77d600b46101bd34f918813e4a17b298df762df5caf45ed859a1eeb26f67ade55918bfdd034eb4b51df3c6e00cc6ce5cef2b9de7f4287eb84a7110163df1ff279cd2d9f431dde567f1e02c1696a451e23b1c4d2e5f03b6ba217a7b15b6385148cb04003b1dcbadee761666b23d99bcd79fb9e8e9511c024fa33e7d0f8675f2582d9f613bf78759d119e716e59ecb7cb89b2c2575248ea473f19dd91f3eab909a0763f7517441cc01805854f42a4f4278003b87daf48e901e0c27acf711a49ab622edc30190cd26ddfaf6bd445d3aa0bacb972f1ac8701f71e72ad1d427c79ab9cecd239da72774fb22b6afc8bc0a2f887b699ddc75a91784588862ea76a588999515df15c6612e61fa33c437678a2b68b03b5f82a88a8f0af2b6537c135fb7037db90464aeb537883d259ba0cddef6aae5e0487a0bf294bf23ae36129633ee187dc9646d09504a6e2d3a5d7b7eb9b51e20d6c290b85ed58892a2d1d1e082a05a53570017f9907cdd45d39e066ad5753482ada5ca2b7cc3e298711cf0455f30c9e31c6c836b3df02066199d0d74211a2b95f0eac235420afaa6ce2633a2d635ba6e3f909d6230b1e7bcafe218fcb3e1b2b94a5e82fdec2b33cd4de836d8199085849ec92cbc31601241d1ec72731a06ed4eb2016725c0a614d2d2e5c86ea29b093936e6cf0e98c30030b674f4bec84fdfc3a588a8d004d2096964f98da4797c069c022623161d78a5fecbffd04070b86a4f1557ee2bc4ea1ba10c9972cefd68a391874a14a116526756d71b77d78bbe32f3ba30d725c42266eaf6a929da05d66893b1f68a50b06a04f2d0d061dfba51a0efb138b8530ded6a645828c7b19e743ce4219b23a27583ce9123e12be9931b8fd0815ccb1c5868c67f34860d7e18bade5d427ab908e031e1d65f6129c703ac2fe5710450abd9f64aa1863fcb0f6348b70e6fe52ca01aba0cdac2d4bce804c860d6ab6dffa118eae35237b598515e0cbcc6c9756c5eabdaa14a240015c094e1303f7d782a38ce711350bed162e86562247cafee08ee8fa1b00be9b88493db5b26256eac1b4da30cc4ae19c5b3a05f625733cb06fcea9c165261be6913cce6f17c3213ed1ab1b62b84cd9bc31184eb26eb581226f8ab5292e5026e40f6ad6fa8244ab0a21284c098398228ab434f72458cf02747d7fe9acf451d9abf5524099e41d2218e7c237844c28d55bb47176843f6b6bed6ff19717fe79e389f8041dcf7246833b433be31808684e4aff47ba0a69938d4e5fb7043e0a5ec0ad553dc74c3a0bea5cc86abadaf55801c62075db51c29e959ee0db0f6481384fef1ae74c471798dd100ad7b75a35cafbc94c54f885f1bb7d6c367801de630b6f03e207dd6929f5a6c83a0e9228e631267244565015ec44c9c00d35838fed72cedcc55940290f8255772235af97a488e222d5b5ac995b965c5fc1e4c0f8ac9648032c27782021ba1825e04e905dfe39049e5312d6d6c860b0b30995c11d86d56ba0e362b8bc8759d69795cb9416765b7e836af994878e15b217fa0ab57d0c8f0071d6a0b9f52193288c027ecc0a428aa072853de90002a540844a489ac1e339e8d360bc7cfc2931c0e9cf2c4038d20e437bb6e8dba7098bbb248655a0098d75da06c778039e3aa4379bc0bcf92aacb9c8534bf59b2dd5752b5301d3705a29236608e41b1bf560beb2202310bae50bc7badc6b33cf8f1559b2904a312ff44447080d88e685b083f9d0491dfbff8e455754cfdbc4938b4efd1c5259c911b1464b28380fb591121344540fcbcbd4e83905d5cb8cbb8dcb99f680a84124e14f6550b52ef0550132a6c64c3c5ad2736e2ecf12a188410743ec8e526feaca0b3b71a17906fb5c61e9d9c0373257967cd25292c382cf69b9db045258b6267dc5b01734f706cca8ae46e9e40073ccd53b82c7ed2c5cacdb96de695d44985aab4032315e7132ae54ac01c424e3122f65ab520ebcf51aebae6eeab2ab532f7484556f89f8f352e58ce25debb496dc4dd25e23a2af008e3abf9c5b6d3c18b41aaa69ee7c8665bea58c8e804bf88e13153957bd83fe7f1b795ba05b61cbac2212bb27b85fef50b3e1880341d69994f5cb2d4a375c9391085442f1ee4410473001223909ec0605a90da210cd97395ae5bc13a3070a471248adea0754b1a8e234eada2f562088f5f0b2d802a56476068b7ff97e1619611a0282e9dbf2ee243282b45bb1d77a9dd3f5a966ab313993578d7e7cf3f26d9713be5d4c724d2da3804567db256a45206f88db0f92c85d5aca7aecd5156a38fa57cdbc78420add4644c1588ccde8180ff0588325fbb899818224e6eb093e6b36fdc445852a756274d8eda7f1823227795cd97da46bf6448842e9fb099bcbcb077b5e4b791471729ecc91e702506bb3a321d62ef3b4beef96c81a33e7b5ac791df8ebfb8f8d91258b7cd85cb0fa3bf66cd2dfd7f658c98c22b57b4e53f3fac7a26a069bbc300ccd91bd1a4b6b37d7ad3799598157e02b937bab08edfb4de6c3b559509fa8d0e642c38c5cb82d6ecc2b7050f763c9e0671363c90645a5c03a1ddb646024826818fe160651bcaeeec35e226fa2e8089a5fecbe6d507eb4e9f72ecf6cafb93cf1f92e56e5b0568f2d3a3e95d02373ef5f859281b24c103cc45e6f1bebfb4369da2cbfde020c9fcd247bbbed284823bdabe8d12a829e94cbfafbb72bb1799a8b69e847ebf16deef2267adfe53cf921a66e04359aa6308323c4d4c5eafb2c4336806f489c3f6866c1b9b200c20e4807fac0fd567212986623841759dfffcdb1c5d21d1b332e23c67319e60aea4fa73fa89151b6099dac3d070209f7eb86bd8d46e10a74e0522900a3c27df2bbf54f937e191bc1646e0bedaa8fda86aec5d4181eb34e68ac30c6b356e9c96c2874ffdc2d281bded0d6a29510eaf1cbaa8bc95203244132bf85dbc16c5d1f296e8f46e928c33eb1930cd27f06e64a56ef2bc4e4d9f7de6f33ef6f73b7bed6fd33787951c9098833893ba2c3f997378150dd7e0e7a43102e75b69d264092e4e7650c9ed4450e3ea3c66981051de33eddd5f0ab32ffb0990d04ad37fa45a275998a205ae045bca27c9e786feae2e49312f3a49a4593f49ca8b6df0e0ca88d09f53473d73bd6ffddca13172b3d7c2bf1ad578fcac149059e449a346a24340b9d274a3782f3ad7e6b9f9e57150fcfb2851d08af942c6a1df3c58ff6449ec03a2a8254c50462f93d2592b7c94d329c6f8d846e1940c9a7ef8cba8df5560e3d15427da885f4c8cddca2e431c763ae680263e66513708f6abf4ea75ba93252904be05d9e8963bfaacdb064e83bd32eb56725c293742b02193591d06fae573db6de9481f049ac1cc5058a5a1b3cdc6ac09e818c5683172222b04b4cbfe5f3cf31c6c2a8d2484147eee15674f77bfb42e77ab0c04cc630203c5e0d55aa172630f3e042614c77d9b3cc5e9c587a542bebe33cd144063ad996d13febf8624fceff181c2229e2161789a419871e5a02ef4ad007fd24e130b6401502bebccc1fb6f962f8e7dfd6a0b2886c32d6c8c639c8351f30c2c9d9c4d20e5c96c656900b4507364a926b5a01d13b9b6e538d6cbf7a686294ff157e80083ae26986c2d2202f0fec4f6f5093b7213b8aa546fecc265c7993556f217c7637ba9aeaf7d513548dd7c84f0d4d360c531920bb76574408e63a559943cce45c17a9a1b54290b6123b77f1325ae0b7e308a91b35f6f53e7a9c01cd91654247c462cacf136d368ae2ef33548a0ba9015560454a3e8e1c22627a04ba23926c349b9a456b301415f9d33c68a007a41e5092af59e47a10a0627c962d173e37328c115cb3ababcdd047eac8e3aaba3a04bc808ba39f5a7274330412c897509e7307612492ccb448fcd4f8292fddb4ee63307f04fc4e54a685254e25d4dda0d5bccf81d2b138053fda75fd330dd894c94de933a417cafe1264cf00f527ecca5d860ff44664303817096d7acb23f56b8a348855bbde39c03399dafd5dac3bddfcc7df5d786a4028e9e132364b9084307db959ff69e4380689952c28645d8a4d6d15fdcb39bd371481054e89a6a774801c9892e8be10e6c747f9590345d7e67fb6c8faf8acaf99a7ef84eb9589da17100e0dc73b8c2fa672f89efdee905835b77170bd71e4ca0598e5e9c554b40a509b8130f6975b45131c94fc50cd02f1cfc6c938937b94c88e764a804fbaba4d0babc0277b382d21b83505e90c245488812b469188d4a2ae53eba6325927d4448f59f870bb48a8137323293f77cf3b10aa8d753a2961a0405a5baa509c4b7f19b51f012234a8359e0fd55dba2fa0e9174aa9d9d087c3ca7657b5f674b49eff0d440ff3409d277dea7eb756720c5cc49c2af3906b643e95d1e1f87cffb891f7c0a422bcd26792e5e59d17f0b01afb6c6ac147f9567d2b0dc57aff5c1aa172309aa81cb9c717ce06d42c8aa1edc5c9f1093c73959a189a23a1796d891a198912312656cf49801b333655e0a6bcaa470e1c2f86328b84fef527199e470bf38bc559a74305a87d108a05867bf02af2ac8e0aa49468668c0d41fcfa55ad4b0f8c45f32329a6811c9b25b0fe856b89fbecbc87de70ed07ebde03fd35266c90ccfb57a8138cd548e6e91aedece208c994d42c8e6821c62c0b568e144488392213b438db184facc5ccd9bb84bb6bfc0ccd33789657ec518e33905ce049dda5a5a4f78493d285ae965013676ad0c92a2a78c766965de282faa1c2b94a9fc6b32b6a358ca2511856c1eb693be426887ea24dde65d4617adf8b543a441eeaddf266ae4e0845ff8b95e38a2242d8c48d642c1b969a1c6505a3c9bb5d33370c43940e6790ece775c6a71ef0d4795d62ac06641777354e0e231dafa7f886745f3fc1d9f2f5d7934dac408b8aede32e2da334743457e94fa614580273b6cec11907803fb49853038ac02cfa4e4b1e28c3424f064f54642b72daf2a179c94bbf58ed09561e84c6d398ed7db543780daa6f2dc5697e5d538c6085fd93b9cbb41f86d2cccd1d49df7c29ea52bcc4679ba130d9858af015a507a2e288404161a14afa06", &(0x7f0000000800)="878184411814cdc761b214164fc7b1c9f98005bf1916366af2c1bb5677fc84514c0bf5f056523e4349d52c6ec8062bfba546372fc65380238ba9963fd0d91aedccf71bf3639c133489d954f348972107986653efd85b1da75498998eba0118ca1aa4de2b584640f03948b1ee63b5a06b2c2d17da05310c5d86a65b56dfacbff50f37da70caf585418ddd238c4fefdcd45f6099db4703beb698b35e2d89bed5e764f2916c60dc6fd07a8bfa4cbbf54508a5a28f76205b459572ed98954d5c689061858b814124", 0x0, r0}, 0x38) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x20, r3, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}}, 0x20}}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) r5 = open(0x0, 0x145142, 0x0) ftruncate(r5, 0x2007ffb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) rt_sigqueueinfo(r6, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) ptrace$peeksig(0x4209, r6, &(0x7f00000005c0)={0x0, 0x1, 0x1}, &(0x7f0000000200)=[{}]) capget(&(0x7f0000000040)={0x20080522, r6}, &(0x7f0000000100)={0x8, 0x0, 0x4ef, 0x0, 0xa6, 0x3}) io_destroy(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 256.473469ms ago: executing program 2 (id=289): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0, 0x3, 0x0, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000001180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd640de71a00442f01ff020000770000000000000000000001fe8000000000000000000000000000aa0c21880b0000000008000800090086dd080088be000000011806d70b0100000000000004080022eb000000012010e10d02000000000000040081100f0800655800000000"], 0x0) unlink(&(0x7f0000000180)='./file1\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) cachestat(r7, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 255.270589ms ago: executing program 1 (id=299): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 26.901137ms ago: executing program 2 (id=290): socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(0x0) r0 = socket(0x840000000002, 0x3, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x401, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000017190101000000000000000007000009"], 0x14}, 0x1, 0x0, 0x0, 0x40802}, 0x4040054) connect$inet(r0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 26.484138ms ago: executing program 3 (id=291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x40, 0x8, 0xe, 0x4c0, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @private=0xa010101}}}}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fcntl$setstatus(r2, 0x4, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) move_pages(r10, 0x5, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000280)=[0x6, 0x8000, 0x0, 0x205e, 0x400, 0x4, 0x6, 0xaa1f], &(0x7f00000002c0), 0x0) listen(r3, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000640)={[{@grpjquota, 0x4a}, {@debug}, {@nodelalloc}, {@i_version}, {@init_itable_val={'init_itable', 0x3d, 0x7f}}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") 26.177348ms ago: executing program 5 (id=292): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) sendmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="d7921b9e26b6b4ad941e8a2f2fb63db984d78962c4727739d3bbcc270eb4e65b3e7bbeb55b65397ebb74c76a31a03957a50a51ea5eb66f21cfaa01e9328cd01abb07a3c712", 0x45}], 0x1, &(0x7f0000000c00)=ANY=[], 0xe0}}], 0x400000000000184, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1f, 0x1a, 0xdc, &(0x7f0000001440)="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"}) splice(r4, 0x0, r0, 0x0, 0x7ffff000, 0x6) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 19.970168ms ago: executing program 1 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x40, 0x3, 0x1000034e}, &(0x7f0000000040), &(0x7f0000000580)) socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0xf4}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x2, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x43683bb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x80}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510, 0xfffffffc}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200, 0x9}, {}, {}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x1, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x20, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1, 0x8}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0xffffffff, 0x1010000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/148, 0x94}, {0x0}], 0x2}, 0x4}], 0x1, 0x10000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 2 (id=294): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0xfffffffe, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='svcsock_tcp_state\x00', r9, 0x0, 0x1}, 0x18) unshare(0x2c060000) unshare(0x2c020400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 35.869125][ T29] audit: type=1400 audit(1755705024.971:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.870452][ T3292] cgroup: Unknown subsys name 'net' [ 35.892504][ T29] audit: type=1400 audit(1755705024.971:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.921021][ T29] audit: type=1400 audit(1755705025.011:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.040687][ T3292] cgroup: Unknown subsys name 'cpuset' [ 36.047586][ T3292] cgroup: Unknown subsys name 'rlimit' [ 36.218154][ T29] audit: type=1400 audit(1755705025.321:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.244204][ T29] audit: type=1400 audit(1755705025.321:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.265220][ T29] audit: type=1400 audit(1755705025.321:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.285878][ T29] audit: type=1400 audit(1755705025.331:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.295477][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.306373][ T29] audit: type=1400 audit(1755705025.331:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.341040][ T29] audit: type=1400 audit(1755705025.331:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.365012][ T29] audit: type=1400 audit(1755705025.431:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.430760][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.634840][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 37.729238][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.736530][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.743954][ T3303] bridge_slave_0: entered allmulticast mode [ 37.750702][ T3303] bridge_slave_0: entered promiscuous mode [ 37.766105][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.773291][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.780955][ T3303] bridge_slave_1: entered allmulticast mode [ 37.787574][ T3303] bridge_slave_1: entered promiscuous mode [ 37.794404][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.803435][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 37.857262][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.866692][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 37.886872][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.930210][ T3303] team0: Port device team_slave_0 added [ 37.939823][ T3303] team0: Port device team_slave_1 added [ 37.958798][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.965992][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.973497][ T3302] bridge_slave_0: entered allmulticast mode [ 37.980314][ T3302] bridge_slave_0: entered promiscuous mode [ 38.002315][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 38.011318][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.018498][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.025784][ T3302] bridge_slave_1: entered allmulticast mode [ 38.032636][ T3302] bridge_slave_1: entered promiscuous mode [ 38.046888][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.053972][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.080775][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.092038][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.099313][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.106604][ T3314] bridge_slave_0: entered allmulticast mode [ 38.113181][ T3314] bridge_slave_0: entered promiscuous mode [ 38.120205][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.127516][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.134890][ T3314] bridge_slave_1: entered allmulticast mode [ 38.141514][ T3314] bridge_slave_1: entered promiscuous mode [ 38.162943][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.170168][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.197025][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.234221][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.244906][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.255471][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.285500][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.295253][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.302458][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.309805][ T3310] bridge_slave_0: entered allmulticast mode [ 38.316414][ T3310] bridge_slave_0: entered promiscuous mode [ 38.323680][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.331008][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.338197][ T3310] bridge_slave_1: entered allmulticast mode [ 38.345142][ T3310] bridge_slave_1: entered promiscuous mode [ 38.380175][ T3314] team0: Port device team_slave_0 added [ 38.392134][ T3302] team0: Port device team_slave_0 added [ 38.413813][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.421084][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.428369][ T3305] bridge_slave_0: entered allmulticast mode [ 38.435272][ T3305] bridge_slave_0: entered promiscuous mode [ 38.442573][ T3314] team0: Port device team_slave_1 added [ 38.449146][ T3302] team0: Port device team_slave_1 added [ 38.462496][ T3303] hsr_slave_0: entered promiscuous mode [ 38.469345][ T3303] hsr_slave_1: entered promiscuous mode [ 38.476790][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.492008][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.499304][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.506980][ T3305] bridge_slave_1: entered allmulticast mode [ 38.513502][ T3305] bridge_slave_1: entered promiscuous mode [ 38.536440][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.557932][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.573012][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.580234][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.607501][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.618841][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.625865][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.653063][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.664694][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.672153][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.699426][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.723586][ T3310] team0: Port device team_slave_0 added [ 38.731139][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.741450][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.748629][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.776136][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.796713][ T3310] team0: Port device team_slave_1 added [ 38.822170][ T3305] team0: Port device team_slave_0 added [ 38.831404][ T3305] team0: Port device team_slave_1 added [ 38.869677][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.877638][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.905380][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.919036][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.926784][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.953738][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.974049][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.981587][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.008085][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.029291][ T3302] hsr_slave_0: entered promiscuous mode [ 39.035602][ T3302] hsr_slave_1: entered promiscuous mode [ 39.041737][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 39.047650][ T3302] Cannot create hsr debugfs directory [ 39.056187][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.063590][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.090354][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.111317][ T3314] hsr_slave_0: entered promiscuous mode [ 39.117694][ T3314] hsr_slave_1: entered promiscuous mode [ 39.123811][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 39.129636][ T3314] Cannot create hsr debugfs directory [ 39.167038][ T3310] hsr_slave_0: entered promiscuous mode [ 39.173361][ T3310] hsr_slave_1: entered promiscuous mode [ 39.179176][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 39.185093][ T3310] Cannot create hsr debugfs directory [ 39.211394][ T3305] hsr_slave_0: entered promiscuous mode [ 39.217973][ T3305] hsr_slave_1: entered promiscuous mode [ 39.224152][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 39.229936][ T3305] Cannot create hsr debugfs directory [ 39.322330][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.345593][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.369973][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.397394][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.474818][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.488108][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.497583][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.511330][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.537860][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.548350][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.558533][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.576896][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.603200][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.615333][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.655522][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.663101][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.673140][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.702742][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.718065][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.727621][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.736813][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.745863][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.755265][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.768387][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.785596][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.795151][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.802746][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.826802][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.834219][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.844452][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.851631][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.880994][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.888183][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.912875][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.943624][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.951311][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.961094][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.968292][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.991502][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.011750][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.023206][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.038815][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.072827][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.080106][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.097855][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.105444][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.127872][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.138573][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.153745][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.180687][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.187786][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.213543][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.220731][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.254250][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.278598][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.292444][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.316477][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.423075][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.449572][ T3314] veth0_vlan: entered promiscuous mode [ 40.475069][ T3314] veth1_vlan: entered promiscuous mode [ 40.498503][ T3302] veth0_vlan: entered promiscuous mode [ 40.524074][ T3302] veth1_vlan: entered promiscuous mode [ 40.544770][ T3314] veth0_macvtap: entered promiscuous mode [ 40.555594][ T3314] veth1_macvtap: entered promiscuous mode [ 40.571725][ T3310] veth0_vlan: entered promiscuous mode [ 40.585150][ T3302] veth0_macvtap: entered promiscuous mode [ 40.614420][ T3302] veth1_macvtap: entered promiscuous mode [ 40.622727][ T3310] veth1_vlan: entered promiscuous mode [ 40.630654][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.646901][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.661274][ T3303] veth0_vlan: entered promiscuous mode [ 40.675413][ T3305] veth0_vlan: entered promiscuous mode [ 40.684939][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.695052][ T3310] veth0_macvtap: entered promiscuous mode [ 40.706218][ T3310] veth1_macvtap: entered promiscuous mode [ 40.712897][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.727867][ T3305] veth1_vlan: entered promiscuous mode [ 40.737078][ T3303] veth1_vlan: entered promiscuous mode [ 40.744331][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.756460][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.772470][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.787545][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.802792][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816948][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.817386][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.828228][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.852733][ T3305] veth0_macvtap: entered promiscuous mode [ 40.865408][ T3303] veth0_macvtap: entered promiscuous mode [ 40.878368][ T3305] veth1_macvtap: entered promiscuous mode [ 40.885128][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.900874][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 40.900888][ T29] audit: type=1400 audit(1755705030.011:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.931621][ T29] audit: type=1400 audit(1755705030.011:91): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.957017][ T29] audit: type=1400 audit(1755705030.011:92): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.984161][ T29] audit: type=1400 audit(1755705030.051:93): avc: denied { create } for pid=3470 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.004087][ T3472] loop3: detected capacity change from 0 to 512 [ 41.008871][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.020927][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.028449][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.039114][ T3303] veth1_macvtap: entered promiscuous mode [ 41.045825][ T29] audit: type=1400 audit(1755705030.151:94): avc: denied { mounton } for pid=3470 comm="syz.3.4" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.069078][ T3472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.072965][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.082698][ T3472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.091999][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.112841][ T3472] EXT4-fs (loop3): 1 truncate cleaned up [ 41.117800][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.129872][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.142488][ T29] audit: type=1400 audit(1755705030.251:95): avc: denied { mount } for pid=3470 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.145468][ T3472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.177051][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.193741][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.239610][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.291442][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.310795][ T29] audit: type=1400 audit(1755705030.401:96): avc: denied { map_create } for pid=3478 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.330343][ T29] audit: type=1400 audit(1755705030.401:97): avc: denied { prog_load } for pid=3478 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.330376][ T29] audit: type=1400 audit(1755705030.401:98): avc: denied { bpf } for pid=3478 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.330433][ T29] audit: type=1400 audit(1755705030.401:99): avc: denied { perfmon } for pid=3478 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.345366][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345450][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345487][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345518][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345579][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345631][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345669][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345709][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.444087][ T3488] loop4: detected capacity change from 0 to 512 [ 41.449406][ T3488] EXT4-fs: Ignoring removed nobh option [ 41.455884][ T3490] syz.1.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 41.456021][ T3490] CPU: 1 UID: 0 PID: 3490 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.456124][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.456140][ T3490] Call Trace: [ 41.456148][ T3490] [ 41.456157][ T3490] __dump_stack+0x1d/0x30 [ 41.456186][ T3490] dump_stack_lvl+0xe8/0x140 [ 41.456279][ T3490] dump_stack+0x15/0x1b [ 41.456302][ T3490] warn_alloc+0x12b/0x1a0 [ 41.456455][ T3490] ? audit_log_end+0x1d7/0x1f0 [ 41.456502][ T3490] ? audit_log_end+0x1d7/0x1f0 [ 41.456616][ T3490] __vmalloc_node_range_noprof+0x9c/0xe00 [ 41.456661][ T3490] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 41.456756][ T3490] ? slow_avc_audit+0x104/0x140 [ 41.456791][ T3490] ? should_fail_ex+0x30/0x280 [ 41.456815][ T3490] ? xskq_create+0x36/0xe0 [ 41.456859][ T3490] vmalloc_user_noprof+0x7d/0xb0 [ 41.456960][ T3490] ? xskq_create+0x80/0xe0 [ 41.457000][ T3490] xskq_create+0x80/0xe0 [ 41.457033][ T3490] xsk_init_queue+0x95/0xf0 [ 41.457062][ T3490] xsk_setsockopt+0x477/0x640 [ 41.457133][ T3490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 41.457172][ T3490] __sys_setsockopt+0x181/0x200 [ 41.457201][ T3490] __x64_sys_setsockopt+0x64/0x80 [ 41.457267][ T3490] x64_sys_call+0x20ec/0x2ff0 [ 41.457296][ T3490] do_syscall_64+0xd2/0x200 [ 41.457377][ T3490] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.457411][ T3490] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.457516][ T3490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.457546][ T3490] RIP: 0033:0x7f952dbbebe9 [ 41.457566][ T3490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.457668][ T3490] RSP: 002b:00007f952c606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 41.457693][ T3490] RAX: ffffffffffffffda RBX: 00007f952dde6090 RCX: 00007f952dbbebe9 [ 41.457736][ T3490] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 41.457748][ T3490] RBP: 00007f952dc41e19 R08: 0000000000000004 R09: 0000000000000000 [ 41.457759][ T3490] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 41.457771][ T3490] R13: 00007f952dde6128 R14: 00007f952dde6090 R15: 00007ffc70a8fac8 [ 41.457795][ T3490] [ 41.457812][ T3490] Mem-Info: [ 41.457820][ T3490] active_anon:6348 inactive_anon:0 isolated_anon:0 [ 41.457820][ T3490] active_file:7798 inactive_file:2175 isolated_file:0 [ 41.457820][ T3490] unevictable:0 dirty:1335 writeback:0 [ 41.457820][ T3490] slab_reclaimable:3004 slab_unreclaimable:13136 [ 41.457820][ T3490] mapped:29024 shmem:233 pagetables:990 [ 41.457820][ T3490] sec_pagetables:0 bounce:0 [ 41.457820][ T3490] kernel_misc_reclaimable:0 [ 41.457820][ T3490] free:1904770 free_pcp:9100 free_cma:0 [ 41.457905][ T3490] Node 0 active_anon:25392kB inactive_anon:0kB active_file:31192kB inactive_file:8700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116096kB dirty:5340kB writeback:0kB shmem:932kB kernel_stack:3328kB pagetables:3960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 41.457968][ T3490] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 41.458178][ T3490] lowmem_reserve[]: 0 2883 7862 7862 [ 41.458204][ T3490] Node 0 DMA32 free:2949208kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 41.458283][ T3490] lowmem_reserve[]: 0 0 4978 4978 [ 41.458319][ T3490] Node 0 Normal free:4654512kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25392kB inactive_anon:0kB active_file:31192kB inactive_file:8700kB unevictable:0kB writepending:5340kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32768kB local_pcp:3072kB free_cma:0kB [ 41.458455][ T3490] lowmem_reserve[]: 0 0 0 0 [ 41.458484][ T3490] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 41.458714][ T3490] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949208kB [ 41.459089][ T3490] Node 0 Normal: 1*4kB (E) 2*8kB (UE) 2*16kB (UM) 3*32kB (UME) 2*64kB (UM) 1*128kB (E) 2*256kB (UM) 1*512kB (M) 2*1024kB (ME) 3*2048kB (UME) 1134*4096kB (M) = 4654484kB [ 41.459329][ T3490] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 41.459352][ T3490] 10231 total pagecache pages [ 41.459428][ T3490] 0 pages in swap cache [ 41.459437][ T3490] Free swap = 124996kB [ 41.459453][ T3490] Total swap = 124996kB [ 41.459462][ T3490] 2097051 pages RAM [ 41.459470][ T3490] 0 pages HighMem/MovableOnly [ 41.459479][ T3490] 80441 pages reserved [ 41.529731][ C1] hrtimer: interrupt took 25887 ns [ 41.647606][ T3488] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5: iget: bad i_size value: 38620345925642 [ 41.650761][ T3488] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 41.655189][ T3488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.941873][ T3502] netlink: 'syz.2.7': attribute type 6 has an invalid length. [ 42.475226][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 42.480479][ T3508] openvswitch: netlink: Message has 6 unknown bytes. [ 42.497714][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.510296][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.510296][ T51] [ 42.520643][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 42.527081][ T51] EXT4-fs (loop4): Free/Dirty block details [ 42.533774][ T51] EXT4-fs (loop4): free_blocks=0 [ 42.539027][ T51] EXT4-fs (loop4): dirty_blocks=1 [ 42.544430][ T51] EXT4-fs (loop4): Block reservation details [ 42.550489][ T51] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 42.568412][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.631118][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 42.871282][ T3495] syz.0.6 (3495) used greatest stack depth: 10648 bytes left [ 43.001916][ T3533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.013115][ T3533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.179982][ T3536] loop0: detected capacity change from 0 to 512 [ 43.186901][ T3536] ======================================================= [ 43.186901][ T3536] WARNING: The mand mount option has been deprecated and [ 43.186901][ T3536] and is ignored by this kernel. Remove the mand [ 43.186901][ T3536] option from the mount to silence this warning. [ 43.186901][ T3536] ======================================================= [ 43.223020][ T3536] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.233803][ T3536] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 43.246747][ T3536] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.255398][ T3536] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.263422][ T3536] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.13: Invalid block bitmap block 0 in block_group 0 [ 43.278592][ T3536] EXT4-fs (loop0): Remounting filesystem read-only [ 43.286022][ T3536] EXT4-fs (loop0): 1 orphan inode deleted [ 43.494128][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.594079][ T3542] loop1: detected capacity change from 0 to 512 [ 43.606091][ T3542] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.618437][ T3542] EXT4-fs (loop1): 1 truncate cleaned up [ 43.625202][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.685963][ T3547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 43.696155][ T3551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 43.766200][ T3557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18'. [ 43.778065][ T3555] loop4: detected capacity change from 0 to 512 [ 43.793569][ T3555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.822563][ T3536] syz.0.13 (3536) used greatest stack depth: 9592 bytes left [ 43.825845][ T3555] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.17: corrupted xattr entries [ 43.842911][ T3555] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.850548][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.858152][ T3555] EXT4-fs (loop4): 1 truncate cleaned up [ 43.883934][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.905540][ T3561] bridge0: entered promiscuous mode [ 43.929589][ T3563] loop0: detected capacity change from 0 to 2048 [ 43.938303][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.939052][ T3561] bridge0: port 3(macsec1) entered blocking state [ 43.954852][ T3561] bridge0: port 3(macsec1) entered disabled state [ 43.963127][ T3561] macsec1: entered allmulticast mode [ 43.968535][ T3561] bridge0: entered allmulticast mode [ 43.977131][ T3561] macsec1: left allmulticast mode [ 43.979875][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.982446][ T3561] bridge0: left allmulticast mode [ 44.003790][ T3565] SELinux: Context @ is not valid (left unmapped). [ 44.024826][ T3561] bridge0: left promiscuous mode [ 44.028056][ T3293] Alternate GPT is invalid, using primary GPT. [ 44.036757][ T3293] loop0: p2 p3 p7 [ 44.055217][ T3568] loop4: detected capacity change from 0 to 1024 [ 44.062415][ T3568] EXT4-fs: Ignoring removed orlov option [ 44.071358][ T3568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.100669][ T3563] Alternate GPT is invalid, using primary GPT. [ 44.107421][ T3563] loop0: p2 p3 p7 [ 44.141216][ T2992] Alternate GPT is invalid, using primary GPT. [ 44.147799][ T2992] loop0: p2 p3 p7 [ 44.241918][ T3577] loop2: detected capacity change from 0 to 164 [ 44.282945][ T3577] ISOFS: unable to read i-node block [ 44.288525][ T3577] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 44.307764][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.320087][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 44.341968][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.356268][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 44.361495][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.385410][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 44.385528][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 44.400166][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.429068][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.454264][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.467128][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 44.533638][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.611043][ T3592] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.892681][ T3613] vxcan3: entered promiscuous mode [ 44.897863][ T3613] vxcan3: entered allmulticast mode [ 45.022959][ T3615] netlink: 'syz.2.29': attribute type 4 has an invalid length. [ 45.065877][ T3627] loop0: detected capacity change from 0 to 512 [ 45.096388][ T3592] random: crng reseeded on system resumption [ 45.122797][ T3627] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.186960][ T3627] atomic_op ffff88811a446928 conn xmit_atomic 0000000000000000 [ 45.235438][ T3619] wg2: entered promiscuous mode [ 45.240419][ T3619] wg2: entered allmulticast mode [ 45.258171][ T3627] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.33: Failed to acquire dquot type 0 [ 45.272534][ T3627] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 45.304670][ T3630] wg2: left promiscuous mode [ 45.309470][ T3630] wg2: left allmulticast mode [ 45.329223][ T3635] loop2: detected capacity change from 0 to 512 [ 45.336243][ T3305] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 45.336351][ T3635] EXT4-fs: Ignoring removed bh option [ 45.382158][ T3635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.390863][ T3635] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 45.429275][ T3637] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 45.435921][ T3637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.443522][ T3637] vhci_hcd vhci_hcd.0: Device attached [ 45.452697][ T3637] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 45.459706][ T3637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.467406][ T3637] vhci_hcd vhci_hcd.0: Device attached [ 45.486439][ T3637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.505054][ T3637] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 45.512033][ T3637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.519907][ T3637] vhci_hcd vhci_hcd.0: Device attached [ 45.542419][ T3637] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 45.549220][ T3637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.557392][ T3637] vhci_hcd vhci_hcd.0: Device attached [ 45.572136][ T3637] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19) [ 45.578973][ T3637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.586753][ T3637] vhci_hcd vhci_hcd.0: Device attached [ 45.598979][ T3637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.618745][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.628362][ T3651] loop2: detected capacity change from 0 to 2048 [ 45.634472][ T3648] vhci_hcd: connection closed [ 45.636070][ T172] vhci_hcd: stop threads [ 45.645362][ T172] vhci_hcd: release socket [ 45.647145][ T3646] vhci_hcd: connection closed [ 45.649912][ T172] vhci_hcd: disconnect device [ 45.661481][ T3642] vhci_hcd: connection closed [ 45.661653][ T3640] vhci_hcd: connection closed [ 45.663140][ T3638] vhci_hcd: connection closed [ 45.676491][ T172] vhci_hcd: stop threads [ 45.686026][ T172] vhci_hcd: release socket [ 45.690857][ T172] vhci_hcd: disconnect device [ 45.698678][ T3651] Alternate GPT is invalid, using primary GPT. [ 45.705211][ T3651] loop2: p1 p2 p3 [ 45.713144][ T172] vhci_hcd: stop threads [ 45.717462][ T172] vhci_hcd: release socket [ 45.721987][ T172] vhci_hcd: disconnect device [ 45.728084][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.738653][ T172] vhci_hcd: stop threads [ 45.743035][ T172] vhci_hcd: release socket [ 45.747531][ T172] vhci_hcd: disconnect device [ 45.755416][ T172] vhci_hcd: stop threads [ 45.759769][ T172] vhci_hcd: release socket [ 45.764229][ T172] vhci_hcd: disconnect device [ 45.786750][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.805496][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.873984][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.925276][ T3662] loop1: detected capacity change from 0 to 4096 [ 45.932276][ T3662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.939009][ T3662] EXT4-fs: Ignoring removed nobh option [ 45.947534][ T3662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.958874][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.975259][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 45.975275][ T29] audit: type=1400 audit(1755705035.091:415): avc: denied { write } for pid=3661 comm="syz.1.41" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.017439][ T3655] chnl_net:caif_netlink_parms(): no params data found [ 46.037790][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.067798][ T29] audit: type=1400 audit(1755705035.171:416): avc: denied { create } for pid=3671 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.088934][ T29] audit: type=1400 audit(1755705035.171:417): avc: denied { write } for pid=3671 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.137573][ T29] audit: type=1326 audit(1755705035.241:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.161556][ T29] audit: type=1326 audit(1755705035.241:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.186101][ T29] audit: type=1326 audit(1755705035.241:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.211354][ T29] audit: type=1326 audit(1755705035.241:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.235043][ T29] audit: type=1326 audit(1755705035.241:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.258609][ T29] audit: type=1326 audit(1755705035.241:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.283217][ T29] audit: type=1326 audit(1755705035.241:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 46.342155][ T36] bridge_slave_1: left allmulticast mode [ 46.347904][ T36] bridge_slave_1: left promiscuous mode [ 46.354115][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.365841][ T3679] loop1: detected capacity change from 0 to 1024 [ 46.375937][ T36] bridge_slave_0: left allmulticast mode [ 46.381986][ T36] bridge_slave_0: left promiscuous mode [ 46.387959][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.398320][ T3679] EXT4-fs: Ignoring removed orlov option [ 46.404708][ T3679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.444187][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.468591][ T3686] loop2: detected capacity change from 0 to 736 [ 46.485267][ T3679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 46.512580][ T3686] rock: directory entry would overflow storage [ 46.519524][ T3686] rock: sig=0x3b10, size=4, remaining=3 [ 46.601014][ T3686] Zero length message leads to an empty skb [ 46.625832][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.629887][ T3686] netlink: 'syz.2.45': attribute type 27 has an invalid length. [ 46.647169][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 46.762433][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.772532][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.784286][ T36] bond0 (unregistering): Released all slaves [ 46.828891][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.836907][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.845991][ T3655] bridge_slave_0: entered allmulticast mode [ 46.853449][ T3655] bridge_slave_0: entered promiscuous mode [ 46.900810][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.908895][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.964435][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.976689][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.024663][ T3703] IPVS: Error joining to the multicast group [ 47.032131][ T3708] syz_tun: entered allmulticast mode [ 47.053088][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.060795][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.071188][ T3655] bridge_slave_1: entered allmulticast mode [ 47.086049][ T3655] bridge_slave_1: entered promiscuous mode [ 47.110773][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.140637][ T36] hsr_slave_0: left promiscuous mode [ 47.170315][ T36] hsr_slave_1: left promiscuous mode [ 47.176316][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.183970][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.193647][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.201283][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.213370][ T36] veth1_macvtap: left promiscuous mode [ 47.219231][ T36] veth0_macvtap: left promiscuous mode [ 47.226817][ T36] veth1_vlan: left promiscuous mode [ 47.232376][ T36] veth0_vlan: left promiscuous mode [ 47.325264][ T36] team0 (unregistering): Port device team_slave_1 removed [ 47.338723][ T36] team0 (unregistering): Port device team_slave_0 removed [ 47.395570][ T85] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.420485][ T3683] syz_tun: left allmulticast mode [ 47.432988][ T85] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.443770][ T3655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.457703][ T85] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.485238][ T3655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.565073][ T3655] team0: Port device team_slave_0 added [ 47.588161][ T3655] team0: Port device team_slave_1 added [ 47.650602][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.657945][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.684401][ T3655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.768341][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.775635][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.802137][ T3655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.841699][ T3655] hsr_slave_0: entered promiscuous mode [ 47.856356][ T3655] hsr_slave_1: entered promiscuous mode [ 47.870371][ T3655] debugfs: 'hsr0' already exists in 'hsr' [ 47.876343][ T3655] Cannot create hsr debugfs directory [ 47.922023][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 48.078844][ T3746] serio: Serial port ptm0 [ 48.141463][ T3655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.168616][ T3655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.194079][ T3655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.213842][ T3655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.236241][ T3736] loop2: detected capacity change from 0 to 512 [ 48.281528][ T3736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.300013][ T3655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.328843][ T3655] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.343578][ T3736] EXT4-fs (loop2): 1 truncate cleaned up [ 48.350479][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.357697][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.375733][ T3736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.392823][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.400090][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.421024][ T3655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.441697][ T3736] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.562670][ T3655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.833298][ T3788] loop1: detected capacity change from 0 to 2048 [ 48.864714][ T3803] loop2: detected capacity change from 0 to 164 [ 48.893592][ T3803] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.913692][ T3803] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.960441][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.53'. [ 48.972919][ T3803] Symlink component flag not implemented [ 48.978694][ T3803] Symlink component flag not implemented [ 48.985339][ T3803] Symlink component flag not implemented (7) [ 48.991406][ T3803] Symlink component flag not implemented (116) [ 49.002127][ T3655] veth0_vlan: entered promiscuous mode [ 49.010115][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.019065][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.032388][ T3806] vlan2: entered promiscuous mode [ 49.037741][ T3806] bond0: entered promiscuous mode [ 49.043115][ T3806] bond_slave_0: entered promiscuous mode [ 49.049197][ T3806] bond_slave_1: entered promiscuous mode [ 49.073342][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.082477][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.093758][ T3819] bond1: entered promiscuous mode [ 49.098842][ T3819] bond1: entered allmulticast mode [ 49.106884][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.127623][ T3819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.137652][ T3819] bond1 (unregistering): Released all slaves [ 49.153724][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.163197][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.191164][ T3655] veth1_vlan: entered promiscuous mode [ 49.212070][ T3655] veth0_macvtap: entered promiscuous mode [ 49.229850][ T3655] veth1_macvtap: entered promiscuous mode [ 49.243643][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.254422][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.300731][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.316212][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.326335][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.338947][ T3827] pimreg: entered allmulticast mode [ 49.347771][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.358400][ T3827] pimreg: left allmulticast mode [ 49.579516][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.659287][ T3839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.682605][ T3839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.141377][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 51.141395][ T29] audit: type=1400 audit(1755705040.251:959): avc: denied { read write } for pid=3860 comm="syz.4.64" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.171464][ T29] audit: type=1400 audit(1755705040.251:960): avc: denied { open } for pid=3860 comm="syz.4.64" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.299650][ T3863] loop2: detected capacity change from 0 to 512 [ 51.579133][ T3855] loop5: detected capacity change from 0 to 512 [ 51.601691][ T3863] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.619895][ T3863] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.642520][ T29] audit: type=1400 audit(1755705040.741:961): avc: denied { execute } for pid=3867 comm="syz.1.65" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.669586][ T3863] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.63: corrupted inode contents [ 51.688705][ T3863] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.63: mark_inode_dirty error [ 51.701056][ T3863] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.63: corrupted inode contents [ 51.710415][ T3868] loop1: detected capacity change from 0 to 1024 [ 51.721522][ T3863] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.63: mark_inode_dirty error [ 51.721718][ T3855] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 51.754103][ T3863] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.63: corrupted inode contents [ 51.771820][ T3862] loop4: detected capacity change from 0 to 512 [ 51.778879][ T3863] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 51.787897][ T3855] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 51.794420][ T3863] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.63: corrupted inode contents [ 51.809027][ T3862] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.813855][ T3855] EXT4-fs (loop5): 1 truncate cleaned up [ 51.817016][ T3862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 51.823153][ T3855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.834161][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.857631][ T3862] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.864799][ T3863] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.63: mark_inode_dirty error [ 51.877578][ T3862] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.64: iget: bad i_size value: 12154761577498 [ 51.891516][ T3863] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 51.899964][ T3868] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.901583][ T3863] EXT4-fs (loop2): 1 truncate cleaned up [ 51.914722][ T3862] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.64: couldn't read orphan inode 13 (err -117) [ 51.923131][ T3851] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 4: comm syz.5.61: lblock 0 mapped to illegal pblock 4 (length 1) [ 51.929239][ T2162] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 51.943358][ T29] audit: type=1400 audit(1755705041.031:962): avc: denied { create } for pid=3850 comm="syz.5.61" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.953256][ T2162] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 51.964817][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.003503][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.008723][ T29] audit: type=1400 audit(1755705041.071:963): avc: denied { append } for pid=3867 comm="syz.1.65" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.047388][ T3855] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 52.062758][ T29] audit: type=1400 audit(1755705041.151:964): avc: denied { create } for pid=3850 comm="syz.5.61" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.091352][ T3863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.105332][ T29] audit: type=1400 audit(1755705041.211:965): avc: denied { watch watch_reads } for pid=3860 comm="syz.4.64" path="/12" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.111798][ T3876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 52.143496][ T3862] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.64: dx entry: limit 65535 != root limit 120 [ 52.155825][ T3862] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.64: Corrupt directory, running e2fsck is recommended [ 52.169910][ T3877] usb usb1: check_ctrlrecip: process 3877 (syz.1.65) requesting ep 01 but needs 81 [ 52.179269][ T3877] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 52.216450][ T3863] loop2: detected capacity change from 0 to 512 [ 52.250564][ T3879] syz.3.66 uses obsolete (PF_INET,SOCK_PACKET) [ 52.259273][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.259950][ T3863] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 52.281038][ T3863] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.299249][ T3863] EXT4-fs (loop2): mount failed [ 52.305849][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.309906][ T29] audit: type=1400 audit(1755705041.411:966): avc: denied { ioctl } for pid=3875 comm="syz.3.66" path="socket:[6503]" dev="sockfs" ino=6503 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.343690][ T3879] loop3: detected capacity change from 0 to 512 [ 52.352439][ T3879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.373033][ T3863] loop2: detected capacity change from 0 to 164 [ 52.374532][ T3879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.399839][ T3879] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.417696][ T3884] syzkaller1: entered promiscuous mode [ 52.423493][ T3884] syzkaller1: entered allmulticast mode [ 52.440173][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.463666][ T3876] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.66: corrupted xattr block 19: overlapping e_value [ 52.498052][ T3876] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 52.516001][ T3876] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.66: corrupted xattr block 19: overlapping e_value [ 52.545376][ T3876] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 52.720492][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 53.318528][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.334053][ T3898] netlink: 'syz.2.70': attribute type 21 has an invalid length. [ 53.342189][ T3898] netlink: 128 bytes leftover after parsing attributes in process `syz.2.70'. [ 53.354511][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.372802][ T3898] netlink: 'syz.2.70': attribute type 5 has an invalid length. [ 53.380820][ T3898] netlink: 3 bytes leftover after parsing attributes in process `syz.2.70'. [ 53.546828][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 54.312373][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.317400][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 54.444202][ T3909] loop4: detected capacity change from 0 to 1024 [ 54.462237][ T3911] loop5: detected capacity change from 0 to 1024 [ 54.469205][ T3911] EXT4-fs: Ignoring removed orlov option [ 54.476057][ T3909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.497364][ T3911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.564680][ T3909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.637217][ T3923] mmap: syz.1.76 (3923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.658171][ T3925] netlink: 240 bytes leftover after parsing attributes in process `syz.3.72'. [ 55.212142][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.259409][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 55.268321][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 55.475396][ T3951] pimreg: entered allmulticast mode [ 55.507009][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.517444][ T3949] lo speed is unknown, defaulting to 1000 [ 55.531579][ T3949] lo speed is unknown, defaulting to 1000 [ 55.552191][ T3949] lo speed is unknown, defaulting to 1000 [ 55.573852][ T3949] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.586157][ T3949] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 55.602170][ T3949] lo speed is unknown, defaulting to 1000 [ 55.608893][ T3949] lo speed is unknown, defaulting to 1000 [ 55.615589][ T3949] lo speed is unknown, defaulting to 1000 [ 55.623130][ T3949] lo speed is unknown, defaulting to 1000 [ 55.629427][ T3949] lo speed is unknown, defaulting to 1000 [ 55.636346][ T3947] Invalid ELF header magic: != ELF [ 55.706457][ T3960] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.741653][ T3962] loop3: detected capacity change from 0 to 2048 [ 55.742736][ T3964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.83'. [ 55.749746][ T3962] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.811403][ T3966] lo speed is unknown, defaulting to 1000 [ 55.931996][ T3966] lo speed is unknown, defaulting to 1000 [ 56.338707][ T3968] loop2: detected capacity change from 0 to 512 [ 56.357314][ T3962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.369659][ T3968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.392484][ T3960] random: crng reseeded on system resumption [ 56.407303][ T3971] lo speed is unknown, defaulting to 1000 [ 56.512630][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 56.512648][ T29] audit: type=1400 audit(1755705045.621:1078): avc: denied { setopt } for pid=3961 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.539908][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 56.616529][ T29] audit: type=1400 audit(1755705045.721:1079): avc: denied { prog_load } for pid=3970 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.620336][ T3968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.650015][ T29] audit: type=1400 audit(1755705045.721:1080): avc: denied { bpf } for pid=3970 comm="syz.4.85" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.673492][ T29] audit: type=1400 audit(1755705045.781:1081): avc: denied { map_create } for pid=3961 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.693174][ T29] audit: type=1400 audit(1755705045.801:1082): avc: denied { mount } for pid=3963 comm="syz.2.83" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.715073][ T3968] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.844938][ T29] audit: type=1400 audit(1755705045.831:1083): avc: denied { map_read map_write } for pid=3975 comm="syz.5.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.865152][ T29] audit: type=1400 audit(1755705045.831:1084): avc: denied { perfmon } for pid=3975 comm="syz.5.86" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.886549][ T29] audit: type=1400 audit(1755705045.841:1085): avc: denied { prog_run } for pid=3975 comm="syz.5.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.905750][ T29] audit: type=1400 audit(1755705045.841:1086): avc: denied { create } for pid=3975 comm="syz.5.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.926981][ T29] audit: type=1400 audit(1755705045.841:1087): avc: denied { write } for pid=3975 comm="syz.5.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.142833][ T3964] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.83: corrupted xattr block 19: overlapping e_value [ 57.195234][ T3964] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 57.205681][ T3964] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.83: corrupted xattr block 19: overlapping e_value [ 57.221230][ T3964] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 57.253049][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.411721][ T3994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.419504][ T3995] siw: device registration error -23 [ 57.442381][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.485064][ T3997] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 57.493814][ T3997] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 57.559054][ T3997] loop2: detected capacity change from 0 to 764 [ 57.580441][ T4002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.92'. [ 57.599857][ T3997] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.619466][ T4001] siw: device registration error -23 [ 57.780885][ T3987] lo speed is unknown, defaulting to 1000 [ 57.827920][ T4004] lo speed is unknown, defaulting to 1000 [ 58.122175][ T4008] loop2: detected capacity change from 0 to 2048 [ 58.286150][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.346856][ T4011] lo speed is unknown, defaulting to 1000 [ 58.560868][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.96'. [ 58.862024][ T4037] IPVS: Error joining to the multicast group [ 58.980783][ T4045] lo speed is unknown, defaulting to 1000 [ 59.190173][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.431839][ T4057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'. [ 59.591602][ T4062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 60.228316][ T4081] siw: device registration error -23 [ 60.296978][ T4088] lo speed is unknown, defaulting to 1000 [ 60.299416][ T4082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4082 comm=syz.2.106 [ 60.302801][ T4088] lo speed is unknown, defaulting to 1000 [ 60.350365][ T4088] lo speed is unknown, defaulting to 1000 [ 60.358657][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 60.370863][ T4088] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.400440][ T4082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.425306][ T4107] macvlan2: entered promiscuous mode [ 60.430861][ T4107] macvlan2: entered allmulticast mode [ 60.455944][ T4107] bond1: entered promiscuous mode [ 60.472610][ T4107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.487301][ T4107] bond1: left promiscuous mode [ 60.566614][ T4088] lo speed is unknown, defaulting to 1000 [ 60.573170][ T4088] lo speed is unknown, defaulting to 1000 [ 60.579551][ T4088] lo speed is unknown, defaulting to 1000 [ 60.587225][ T4088] lo speed is unknown, defaulting to 1000 [ 60.602176][ T4088] lo speed is unknown, defaulting to 1000 [ 60.627030][ T4111] siw: device registration error -23 [ 60.745163][ T4123] bridge_slave_0: left allmulticast mode [ 60.750993][ T4123] bridge_slave_0: left promiscuous mode [ 60.756823][ T4123] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.880484][ T4126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.111'. [ 60.895748][ T4123] bridge_slave_1: left allmulticast mode [ 60.901800][ T4123] bridge_slave_1: left promiscuous mode [ 60.907786][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.928942][ T4123] bond0: (slave bond_slave_0): Releasing backup interface [ 60.941208][ T4123] bond_slave_0: left promiscuous mode [ 60.963762][ T4123] bond0: (slave bond_slave_1): Releasing backup interface [ 60.998671][ T4123] bond_slave_1: left promiscuous mode [ 61.011965][ T4123] team0: Port device team_slave_0 removed [ 61.026757][ T4123] team0: Port device team_slave_1 removed [ 61.035223][ T4123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.043022][ T4123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.063782][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 61.081567][ T4123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.089372][ T4123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.116463][ T4147] process 'syz.3.113' launched './file0' with NULL argv: empty string added [ 61.133425][ T37] lo speed is unknown, defaulting to 1000 [ 61.154508][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.162179][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.171471][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.179341][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.389333][ T4169] loop3: detected capacity change from 0 to 1024 [ 61.407887][ T4169] EXT4-fs: Ignoring removed orlov option [ 61.436050][ T4169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.478006][ T4173] netlink: 28 bytes leftover after parsing attributes in process `syz.5.117'. [ 61.554510][ T4175] loop5: detected capacity change from 0 to 512 [ 61.569960][ T4175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.592015][ T4175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.606515][ T4175] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.621731][ T4173] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.117: corrupted xattr block 19: overlapping e_value [ 61.636470][ T4173] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.646559][ T4173] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.117: corrupted xattr block 19: overlapping e_value [ 61.660715][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.662533][ T4173] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.752618][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.797012][ T4183] siw: device registration error -23 [ 61.820939][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 61.820957][ T29] audit: type=1400 audit(1755705050.931:1292): avc: denied { read write } for pid=4184 comm="syz.5.120" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.850816][ T29] audit: type=1400 audit(1755705050.931:1293): avc: denied { open } for pid=4184 comm="syz.5.120" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.874758][ T29] audit: type=1400 audit(1755705050.951:1294): avc: denied { ioctl } for pid=4184 comm="syz.5.120" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.899926][ T29] audit: type=1326 audit(1755705050.961:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 61.924489][ T29] audit: type=1326 audit(1755705050.961:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 61.948717][ T29] audit: type=1326 audit(1755705050.961:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 61.973271][ T29] audit: type=1326 audit(1755705050.961:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 61.996874][ T29] audit: type=1326 audit(1755705050.961:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 62.020353][ T29] audit: type=1326 audit(1755705050.961:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 62.044325][ T29] audit: type=1326 audit(1755705050.961:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.5.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc8f0cd69f code=0x7ffc0000 [ 62.751685][ T4197] lo speed is unknown, defaulting to 1000 [ 62.758790][ T4197] lo speed is unknown, defaulting to 1000 [ 62.932078][ T4191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 62.979458][ T4191] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.480461][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 63.518479][ T4203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 63.691753][ T4220] Invalid ELF header magic: != ELF [ 63.706788][ T4224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.130'. [ 63.954016][ T4216] loop5: detected capacity change from 0 to 2048 [ 63.976300][ T4223] loop3: detected capacity change from 0 to 128 [ 64.025871][ T4216] loop5: p2 p3 p7 [ 64.115084][ T4236] siw: device registration error -23 [ 64.262798][ T4248] capability: warning: `syz.5.137' uses deprecated v2 capabilities in a way that may be insecure [ 64.456677][ T4248] sg_read: process 61 (syz.5.137) changed security contexts after opening file descriptor, this is not allowed. [ 64.576116][ T4259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.143'. [ 64.598005][ T4259] loop5: detected capacity change from 0 to 1024 [ 64.741936][ T4259] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.753378][ T4259] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.781176][ T4259] JBD2: no valid journal superblock found [ 64.787121][ T4259] EXT4-fs (loop5): Could not load journal inode [ 64.826119][ T4265] lo speed is unknown, defaulting to 1000 [ 64.840601][ T4265] lo speed is unknown, defaulting to 1000 [ 64.987924][ T4259] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 65.272664][ T4272] syz.4.144 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.329402][ T4272] lo speed is unknown, defaulting to 1000 [ 65.338731][ T4272] lo speed is unknown, defaulting to 1000 [ 65.780305][ T4279] siw: device registration error -23 [ 66.934555][ T4299] loop3: detected capacity change from 0 to 8192 [ 67.053903][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 67.053921][ T29] audit: type=1400 audit(1755705056.161:1405): avc: denied { write } for pid=4305 comm="syz.5.152" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.057125][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.084352][ T29] audit: type=1400 audit(1755705056.161:1406): avc: denied { ioctl } for pid=4305 comm="syz.5.152" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.173922][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.248451][ T29] audit: type=1400 audit(1755705056.351:1407): avc: denied { sqpoll } for pid=4298 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.311482][ T29] audit: type=1326 audit(1755705056.421:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.335243][ T29] audit: type=1326 audit(1755705056.421:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.358832][ T29] audit: type=1326 audit(1755705056.421:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.382612][ T29] audit: type=1326 audit(1755705056.421:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.407192][ T29] audit: type=1326 audit(1755705056.491:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.431162][ T29] audit: type=1326 audit(1755705056.491:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.455807][ T29] audit: type=1326 audit(1755705056.511:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 67.767972][ T4310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 67.991873][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 68.568536][ T4327] loop2: detected capacity change from 0 to 1024 [ 68.667779][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.061906][ T4327] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.157: Allocating blocks 449-513 which overlap fs metadata [ 69.148044][ T4341] netlink: 272 bytes leftover after parsing attributes in process `syz.4.159'. [ 69.263835][ T4341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 69.417886][ T4326] EXT4-fs (loop2): pa ffff888106ea4310: logic 48, phys. 177, len 21 [ 69.426515][ T4326] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 69.707316][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.203756][ T4345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.161'. [ 70.258587][ T4349] loop2: detected capacity change from 0 to 2048 [ 70.292608][ T4349] EXT4-fs (loop2): failed to initialize system zone (-117) [ 70.333707][ T4349] EXT4-fs (loop2): mount failed [ 70.364394][ T4353] vlan2: entered promiscuous mode [ 70.369892][ T4353] vlan2: entered allmulticast mode [ 70.375195][ T4353] hsr_slave_1: entered allmulticast mode [ 70.383168][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 70.416760][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 70.431301][ T4349] loop2: detected capacity change from 0 to 1024 [ 70.552961][ T4361] can0: slcan on ptm0. [ 70.594275][ T4364] C: renamed from team_slave_0 (while UP) [ 70.604258][ T4364] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 70.641065][ T4364] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 70.664140][ T4376] can1: slcan on ttyS3. [ 70.732261][ T4360] can0 (unregistered): slcan off ptm0. [ 70.759908][ T4364] can1 (unregistered): slcan off ttyS3. [ 70.769669][ T4376] can0: slcan on ttyS3. [ 70.807465][ T4364] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 70.815597][ T4364] netlink: 224 bytes leftover after parsing attributes in process `syz.3.166'. [ 70.830474][ T4389] siw: device registration error -23 [ 70.868510][ T4382] Invalid ELF header magic: != ELF [ 71.199913][ T4355] can0 (unregistered): slcan off ttyS3. [ 71.265470][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.171'. [ 71.883170][ T4460] loop5: detected capacity change from 0 to 512 [ 71.959429][ T4460] msdos: Bad value for 'time_offset' [ 72.014385][ T4474] tipc: Started in network mode [ 72.019524][ T4474] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.028550][ T4474] tipc: Enabling of bearer rejected, failed to enable media [ 72.081358][ T4460] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 72.088347][ T4460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.096030][ T4460] vhci_hcd vhci_hcd.0: Device attached [ 72.339792][ T3391] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 72.358499][ T4477] vhci_hcd: connection closed [ 72.363117][ T4478] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 72.380035][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 72.380049][ T29] audit: type=1400 audit(1755705061.491:1802): avc: denied { read } for pid=4482 comm="syz.2.176" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.410245][ T29] audit: type=1400 audit(1755705061.491:1803): avc: denied { open } for pid=4482 comm="syz.2.176" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.478421][ T2162] vhci_hcd: stop threads [ 72.482903][ T2162] vhci_hcd: release socket [ 72.487348][ T2162] vhci_hcd: disconnect device [ 72.672881][ T29] audit: type=1326 audit(1755705061.751:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.696620][ T29] audit: type=1326 audit(1755705061.751:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.720925][ T29] audit: type=1326 audit(1755705061.751:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.744661][ T29] audit: type=1326 audit(1755705061.751:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.768117][ T29] audit: type=1326 audit(1755705061.751:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.791741][ T29] audit: type=1326 audit(1755705061.751:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.815456][ T29] audit: type=1326 audit(1755705061.751:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 72.839216][ T29] audit: type=1326 audit(1755705061.751:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 73.576715][ T4498] netlink: 104 bytes leftover after parsing attributes in process `syz.3.179'. [ 73.595927][ T4499] loop5: detected capacity change from 0 to 512 [ 74.166309][ T4499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.205411][ T4499] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.273552][ T4509] netlink: 'syz.2.182': attribute type 7 has an invalid length. [ 74.297862][ T4499] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 74.501521][ T4514] bond1: entered promiscuous mode [ 74.506712][ T4514] bond1: entered allmulticast mode [ 74.528366][ T4514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.541232][ T4514] bond1 (unregistering): Released all slaves [ 74.550434][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.180'. [ 74.560746][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.180'. [ 74.588242][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.655724][ T4519] lo speed is unknown, defaulting to 1000 [ 74.662437][ T4519] lo speed is unknown, defaulting to 1000 [ 74.751367][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 74.773121][ T4524] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 74.976496][ T4529] lo speed is unknown, defaulting to 1000 [ 74.983408][ T4529] lo speed is unknown, defaulting to 1000 [ 75.102998][ T4529] netlink: 'syz.5.196': attribute type 4 has an invalid length. [ 75.296941][ T4528] program syz.1.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.545159][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 75.920142][ T4545] netlink: 'syz.4.190': attribute type 4 has an invalid length. [ 75.949484][ T4545] netlink: 'syz.4.190': attribute type 4 has an invalid length. [ 75.960484][ T3411] lo speed is unknown, defaulting to 1000 [ 75.966350][ T3411] syz2: Port: 1 Link DOWN [ 75.983423][ T1036] lo speed is unknown, defaulting to 1000 [ 75.989328][ T1036] syz2: Port: 1 Link ACTIVE [ 76.844509][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 76.855726][ T4560] sch_fq: defrate 4294967295 ignored. [ 76.947591][ T4564] pimreg: entered allmulticast mode [ 77.033669][ T4570] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.070205][ T4572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.165125][ T4572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.181897][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 77.225893][ T4572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.297404][ T4585] tipc: Started in network mode [ 77.302595][ T4585] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 77.315226][ T4585] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.323801][ T4585] tipc: Enabled bearer , priority 10 [ 77.391162][ T3391] usb 11-1: enqueue for inactive port 0 [ 77.396946][ T3391] usb 11-1: enqueue for inactive port 0 [ 77.423378][ T4572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.431151][ T4593] loop2: detected capacity change from 0 to 1024 [ 77.546351][ T4593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.561946][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 77.590910][ T4597] lo speed is unknown, defaulting to 1000 [ 77.597739][ T4597] lo speed is unknown, defaulting to 1000 [ 77.774237][ T85] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.805059][ T85] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.880522][ T85] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.992202][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 77.992220][ T29] audit: type=1400 audit(1755705067.101:1934): avc: denied { setopt } for pid=4599 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.013819][ T3391] vhci_hcd: vhci_device speed not set [ 78.032634][ T85] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.055684][ T29] audit: type=1326 audit(1755705067.141:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.079343][ T29] audit: type=1326 audit(1755705067.141:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.103597][ T29] audit: type=1326 audit(1755705067.141:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.127423][ T29] audit: type=1326 audit(1755705067.141:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.151118][ T29] audit: type=1326 audit(1755705067.141:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.174814][ T29] audit: type=1326 audit(1755705067.161:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.198699][ T29] audit: type=1326 audit(1755705067.161:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.222752][ T29] audit: type=1326 audit(1755705067.161:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.247366][ T29] audit: type=1326 audit(1755705067.161:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29fd3ebe9 code=0x7ffc0000 [ 78.356915][ T4604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 78.363491][ T4604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.371673][ T4604] vhci_hcd vhci_hcd.0: Device attached [ 78.392987][ T4613] pimreg: entered allmulticast mode [ 78.413766][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 78.426314][ T4614] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.210'. [ 78.450673][ T2955] tipc: Node number set to 1 [ 78.492487][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 78.557618][ T4614] bond0 (unregistering): Released all slaves [ 78.657243][ T3373] usb 4-1: SetAddress Request (2) to port 0 [ 78.663726][ T3373] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 78.693248][ T4593] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 78.845905][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.910751][ T4649] C: renamed from team_slave_0 (while UP) [ 78.928990][ T4649] netlink: 'syz.5.213': attribute type 1 has an invalid length. [ 78.953505][ T4649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 79.000738][ T4640] can0: slcan on ttyS3. [ 79.090482][ T4640] can0 (unregistered): slcan off ttyS3. [ 79.100238][ T4649] can0: slcan on ttyS3. [ 79.129555][ T4640] netlink: 'syz.5.213': attribute type 1 has an invalid length. [ 79.191726][ T4675] loop3: detected capacity change from 0 to 1024 [ 79.200287][ T4639] can0 (unregistered): slcan off ttyS3. [ 79.213976][ T4675] EXT4-fs: Ignoring removed bh option [ 79.237615][ T4675] EXT4-fs: inline encryption not supported [ 79.252517][ T4675] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.296415][ T4675] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.216: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.321050][ T4675] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.216: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.349674][ T4685] loop5: detected capacity change from 0 to 512 [ 79.385844][ T4685] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 79.396494][ T4685] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 79.408009][ T4675] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.216: Failed to acquire dquot type 0 [ 79.422699][ T4675] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 79.432676][ T4675] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.216: mark_inode_dirty error [ 79.459218][ T4685] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.217: Invalid inode table block 1 in block_group 0 [ 79.472521][ T4675] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 79.483289][ T4675] EXT4-fs (loop3): 1 orphan inode deleted [ 79.489950][ T4675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.605546][ T4685] EXT4-fs (loop5): Remounting filesystem read-only [ 79.606281][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.612392][ T4685] EXT4-fs (loop5): get root inode failed [ 79.628662][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 79.632763][ T4685] EXT4-fs (loop5): mount failed [ 79.673619][ T4675] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 79.690277][ T4685] loop5: detected capacity change from 0 to 512 [ 79.709514][ T4685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.712541][ T4711] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 79.737418][ T4703] loop2: detected capacity change from 0 to 512 [ 79.748133][ T4703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.762043][ T4685] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.763512][ T4703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.785900][ T4703] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.807333][ T4711] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.216: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.843251][ T4711] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 79.855381][ T4675] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.216: lblock 0 mapped to illegal pblock 16 (length 1) [ 79.882765][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.894544][ T4685] EXT4-fs error (device loop5): ext4_readdir:264: inode #12: block 32: comm syz.5.217: path /35/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 79.927205][ T4685] EXT4-fs (loop5): Remounting filesystem read-only [ 79.986826][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.104049][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.162601][ T4761] siw: device registration error -23 [ 80.506960][ T4605] vhci_hcd: connection reset by peer [ 80.507270][ T85] vhci_hcd: stop threads [ 80.507279][ T85] vhci_hcd: release socket [ 80.507291][ T85] vhci_hcd: disconnect device [ 80.834149][ T4808] loop2: detected capacity change from 0 to 1024 [ 80.851449][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.864353][ T4808] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.878508][ T4808] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.222: lblock 3 mapped to illegal pblock 3 (length 3) [ 80.894776][ T4808] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 80.907662][ T4808] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.907662][ T4808] [ 80.929045][ T2162] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 80.947027][ T2162] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 80.959566][ T2162] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.959566][ T2162] [ 80.981139][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.022573][ T4817] loop3: detected capacity change from 0 to 512 [ 81.029748][ T4817] EXT4-fs: Ignoring removed i_version option [ 81.039535][ T4817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.055020][ T4815] loop5: detected capacity change from 0 to 2048 [ 81.061919][ T4817] EXT4-fs (loop3): 1 truncate cleaned up [ 81.068527][ T4817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.072947][ T4821] __nla_validate_parse: 2 callbacks suppressed [ 81.072969][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 81.097547][ T4817] netlink: 272 bytes leftover after parsing attributes in process `syz.3.226'. [ 81.110231][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.117715][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.128945][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 81.169108][ T4815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.233535][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.324119][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.403475][ T4828] loop5: detected capacity change from 0 to 8192 [ 81.480355][ T4836] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 81.487229][ T4836] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.495168][ T4836] vhci_hcd vhci_hcd.0: Device attached [ 81.919451][ T4866] loop2: detected capacity change from 0 to 1024 [ 81.957002][ T4866] EXT4-fs: Ignoring removed bh option [ 81.977424][ T4866] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.004824][ T4866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.222981][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.284374][ T4890] loop5: detected capacity change from 0 to 128 [ 82.329765][ T4890] 9pnet_fd: Insufficient options for proto=fd [ 82.360355][ T4890] loop5: detected capacity change from 0 to 1024 [ 82.391565][ T4890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.489735][ T4893] loop2: detected capacity change from 0 to 736 [ 82.630205][ T4893] rock: directory entry would overflow storage [ 82.636935][ T4893] rock: sig=0x3b10, size=4, remaining=3 [ 82.874594][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.352084][ T4839] vhci_hcd: connection closed [ 83.352246][ T85] vhci_hcd: stop threads [ 83.361756][ T85] vhci_hcd: release socket [ 83.366300][ T85] vhci_hcd: disconnect device [ 83.379025][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 83.379039][ T29] audit: type=1400 audit(1755705072.481:2255): avc: denied { connect } for pid=4993 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.657499][ T4996] Set syz1 is full, maxelem 65536 reached [ 83.719990][ T3373] usb 4-1: device descriptor read/8, error -110 [ 83.829954][ T3373] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.851018][ T5000] loop2: detected capacity change from 0 to 512 [ 83.858585][ T5000] EXT4-fs: Ignoring removed i_version option [ 83.858860][ T5001] lo speed is unknown, defaulting to 1000 [ 83.869037][ T3373] usb 4-1: enqueue for inactive port 0 [ 83.880237][ T3373] usb 4-1: enqueue for inactive port 0 [ 83.886008][ T3373] usb 4-1: enqueue for inactive port 0 [ 83.895062][ T5000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.905701][ T5001] lo speed is unknown, defaulting to 1000 [ 83.915658][ T5000] EXT4-fs (loop2): 1 truncate cleaned up [ 83.923969][ T29] audit: type=1326 audit(1755705073.031:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.926978][ T5000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.961484][ T29] audit: type=1326 audit(1755705073.031:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961525][ T29] audit: type=1326 audit(1755705073.031:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961551][ T29] audit: type=1326 audit(1755705073.031:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961579][ T29] audit: type=1326 audit(1755705073.031:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961613][ T29] audit: type=1326 audit(1755705073.031:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961677][ T29] audit: type=1326 audit(1755705073.031:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961705][ T29] audit: type=1326 audit(1755705073.031:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 83.961744][ T29] audit: type=1326 audit(1755705073.031:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 84.075563][ T5000] netlink: 272 bytes leftover after parsing attributes in process `syz.2.239'. [ 84.153432][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 84.202418][ T5010] lo speed is unknown, defaulting to 1000 [ 84.208869][ T5010] lo speed is unknown, defaulting to 1000 [ 84.251913][ T5011] netlink: 'syz.5.242': attribute type 21 has an invalid length. [ 84.259993][ T5011] netlink: 'syz.5.242': attribute type 4 has an invalid length. [ 84.303835][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.242'. [ 84.313892][ T5014] random: crng reseeded on system resumption [ 84.331347][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 84.331557][ T5011] Restarting kernel threads ... [ 84.347905][ T5011] Done restarting kernel threads. [ 84.349829][ T5017] IPVS: Error joining to the multicast group [ 84.447905][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.457549][ T5020] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 84.532023][ T5023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.246'. [ 84.582466][ T5030] sch_fq: defrate 4294967295 ignored. [ 84.678795][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.249'. [ 84.693059][ T5033] loop5: detected capacity change from 0 to 512 [ 84.717700][ T5033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.740877][ T5033] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.821729][ T3655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.890760][ T5041] siw: device registration error -23 [ 85.020174][ T3373] usb usb4-port1: attempt power cycle [ 85.405122][ T5053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'. [ 85.540255][ T5058] lo speed is unknown, defaulting to 1000 [ 85.546583][ T5058] lo speed is unknown, defaulting to 1000 [ 85.860673][ T5072] lo speed is unknown, defaulting to 1000 [ 85.867867][ T5072] lo speed is unknown, defaulting to 1000 [ 85.982652][ T5072] netlink: 'syz.2.257': attribute type 4 has an invalid length. [ 86.285692][ T5069] loop5: detected capacity change from 0 to 736 [ 86.485951][ T5075] __nla_validate_parse: 2 callbacks suppressed [ 86.485972][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 86.513573][ T5069] rock: directory entry would overflow storage [ 86.520924][ T5069] rock: sig=0x3b10, size=4, remaining=3 [ 86.578037][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 86.629191][ T5083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5083 comm=syz.4.263 [ 86.641873][ T5083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5083 comm=syz.4.263 [ 86.930085][ T3373] usb usb4-port1: unable to enumerate USB device [ 87.025656][ T5093] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 87.039830][ T3373] IPVS: starting estimator thread 0... [ 87.150271][ T5097] IPVS: using max 2304 ests per chain, 115200 per kthread [ 87.276032][ T5077] Set syz1 is full, maxelem 65536 reached [ 87.347179][ T5104] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.443223][ T5104] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.501033][ T5110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5110 comm=syz.5.270 [ 87.539637][ T5106] loop2: detected capacity change from 0 to 512 [ 87.548899][ T5106] msdos: Bad value for 'time_offset' [ 87.561285][ T5104] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.574211][ T5106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 87.580833][ T5106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.588757][ T5106] vhci_hcd vhci_hcd.0: Device attached [ 87.625917][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.633278][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709193][ T5104] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.721309][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.732659][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.742841][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.752399][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.792644][ T85] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.802028][ T85] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.817429][ T85] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.829859][ T2955] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 87.840512][ T85] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.922216][ T5128] netlink: 'syz.3.277': attribute type 21 has an invalid length. [ 88.199107][ T5116] vhci_hcd: connection reset by peer [ 88.206087][ T2162] vhci_hcd: stop threads [ 88.210865][ T2162] vhci_hcd: release socket [ 88.215415][ T2162] vhci_hcd: disconnect device [ 88.221529][ T9] IPVS: starting estimator thread 0... [ 88.225254][ T5141] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.319779][ T5145] IPVS: using max 2352 ests per chain, 117600 per kthread [ 88.425806][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 88.425824][ T29] audit: type=1326 audit(1755705077.531:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.459220][ T5155] siw: device registration error -23 [ 88.488042][ T29] audit: type=1326 audit(1755705077.561:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.511543][ T29] audit: type=1326 audit(1755705077.591:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 88.535336][ T29] audit: type=1326 audit(1755705077.591:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f0cebe9 code=0x7ffc0000 [ 88.560412][ T29] audit: type=1326 audit(1755705077.611:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.584020][ T29] audit: type=1326 audit(1755705077.611:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.607826][ T29] audit: type=1326 audit(1755705077.611:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.631740][ T29] audit: type=1326 audit(1755705077.621:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.655640][ T29] audit: type=1326 audit(1755705077.621:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.679300][ T29] audit: type=1326 audit(1755705077.621:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952dbbebe9 code=0x7ffc0000 [ 88.777494][ T5161] bridge0: entered allmulticast mode [ 88.788796][ T5161] bridge_slave_1: left allmulticast mode [ 88.796866][ T5161] bridge_slave_1: left promiscuous mode [ 88.805156][ T5161] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.824251][ T5161] bridge_slave_0: left allmulticast mode [ 88.830861][ T5161] bridge_slave_0: left promiscuous mode [ 88.838651][ T5161] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.202560][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 89.275701][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.284800][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.294141][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.330733][ T5191] pimreg: entered allmulticast mode [ 89.367765][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.376863][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.387838][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.397475][ T5194] ================================================================== [ 89.405790][ T5194] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 89.413423][ T5194] [ 89.415778][ T5194] read-write to 0xffff888237c29d64 of 4 bytes by task 3373 on cpu 0: [ 89.424257][ T5194] wq_worker_running+0x95/0x120 [ 89.429514][ T5194] synchronize_rcu_expedited+0x695/0x790 [ 89.435375][ T5194] synchronize_rcu+0x45/0x320 [ 89.440346][ T5194] key_garbage_collector+0x753/0x8c0 [ 89.445663][ T5194] process_scheduled_works+0x4ce/0x9d0 [ 89.451266][ T5194] worker_thread+0x582/0x770 [ 89.456016][ T5194] kthread+0x486/0x510 [ 89.460187][ T5194] ret_from_fork+0xda/0x150 [ 89.464865][ T5194] ret_from_fork_asm+0x1a/0x30 [ 89.469748][ T5194] [ 89.472558][ T5194] read to 0xffff888237c29d64 of 4 bytes by task 5194 on cpu 1: [ 89.480466][ T5194] kick_pool+0x49/0x2d0 [ 89.484724][ T5194] __queue_work+0x8cb/0xb50 [ 89.489428][ T5194] queue_work_on+0xd1/0x160 [ 89.493980][ T5194] __lru_add_drain_all+0x2c6/0x3f0 [ 89.499219][ T5194] lru_cache_disable+0x1f/0x30 [ 89.504081][ T5194] __se_sys_move_pages+0x2b2/0x1360 [ 89.509387][ T5194] __x64_sys_move_pages+0x78/0x90 [ 89.514440][ T5194] x64_sys_call+0x2f78/0x2ff0 [ 89.519227][ T5194] do_syscall_64+0xd2/0x200 [ 89.523789][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.529781][ T5194] [ 89.532106][ T5194] value changed: 0x00000000 -> 0x00000001 [ 89.538085][ T5194] [ 89.540514][ T5194] Reported by Kernel Concurrency Sanitizer on: [ 89.547044][ T5194] CPU: 1 UID: 0 PID: 5194 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.556872][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.567215][ T5194] ================================================================== [ 89.644855][ T5200] loop3: detected capacity change from 0 to 512 [ 89.653207][ T5200] EXT4-fs: Ignoring removed i_version option [ 89.659755][ T5200] EXT4-fs: journaled quota format not specified [ 89.665488][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 92.910054][ T2955] usb 5-1: enqueue for inactive port 0 [ 92.915743][ T2955] usb 5-1: enqueue for inactive port 0 [ 92.989814][ T2955] vhci_hcd: vhci_device speed not set