last executing test programs: 8.535757979s ago: executing program 1 (id=167): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x21088000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[], 0x2a4}}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000280)="823be7271019b3fe048765ad73", 0xd}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="3c000000000000000000000007000000441454010000000000000000ac1414bb00000000004414000100000000000000000000000000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141427000000005fd91900"], 0x60}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) close(r3) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) semget(0x1, 0x0, 0x54a) 8.028482116s ago: executing program 1 (id=174): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macsec0\x00'}) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b7fe8c2a", @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf25020000001400020077673000000000000000000000000000140002006d6163766c616e3000000000000000001400020074756e6c3000"/74], 0x50}, 0x1, 0x0, 0x0, 0x6004c094}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0xb05, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/40) bind$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x10) r5 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x5a}) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x0, 0x1000, 0x3a}, 0x1c) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x5, 0x60000000, 0x0, 0xc9, &(0x7f0000000000), &(0x7f0000000600)="40abe72020740c430a672787467a63994f2e79427e5c46c8cd8d625eb3334e04738c494556ef405885e445b07182cda629a120514884a50700000000000000c9fe6586e232141a2fb6f29136967cf8e601cde665b019a6ec696f223e1f9df0394e63d4ee54645ba4bfc5464ba37e2ac6ceb3d31812dc7579085cdd233eb90ed18e57e0c0bec454e7f02527c9380f5b0b3d1eb099dafa77466c6071666c0da87a61166a8f02b88711c1338ef88c4ce73979a33f26c5f3c25789644053431b06c61a3a62bdf27bd47117", 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) keyctl$session_to_parent(0x12) 5.17942371s ago: executing program 4 (id=189): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpquota}, {@grpid}]}, 0x4, 0x4fe, &(0x7f0000001080)="$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") mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x48}}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000070601020000000000000000000000000500010007000000ab6779d323"], 0x1c}}, 0x0) 4.268752365s ago: executing program 4 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000680)='syzkaller\x00', 0x102, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000012c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffffffc}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r6, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x30, r6, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffeeb, 0x44}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) syz_open_procfs$namespace(r4, &(0x7f0000000280)='ns/time\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_int(r9, 0x10d, 0xf, &(0x7f0000001340), &(0x7f0000000000)=0x4) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r11 = socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r12, @ANYBLOB="14000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x4000000) lseek(r10, 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x811) socket$nl_generic(0x10, 0x3, 0x10) 3.798239508s ago: executing program 4 (id=195): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000eea4ca0a0a088397002e776d88e3005ee2a92a8dc55a2c8704ea0b61bd69489e0584040c4389355963688e05ceb9cd4fbbbdaff5268bf8f63583d784f1804c2a7280cc48ed5fa5e5f503d853c267ccb9f88f74194fe12e050000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x20000810) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000006a000000000000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_process_fork\x00', r9}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab000000000000000005"], 0x1c}}, 0x0) 3.331809151s ago: executing program 4 (id=199): r0 = syz_io_uring_setup(0x390a, &(0x7f0000000f00)={0x0, 0xa673, 0x2, 0x1, 0x357}, &(0x7f0000000f80), &(0x7f0000000b40)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1809000000000000000000000000000085100000fdffffff95"], &(0x7f0000000300)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0xa7, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f00000003c0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r9, 0x1, 0x12, &(0x7f0000000500), 0x4) fcntl$setlease(r8, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6aa2, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 3.199311243s ago: executing program 3 (id=200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0xfffffffb, 0x4) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local}}}], 0x20}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3008498, &(0x7f0000000000), 0xfe, 0x561, &(0x7f0000000240)="$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") r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180)='=', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) dup(r4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={0x0, 0xffff}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="050000bd156900788763c4736d566e1fb197031e0f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xe985e4df3848afb5}, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 3.170558186s ago: executing program 4 (id=201): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB="00635a10ee692145f700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001e20000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000c00)={0x0, @can={0x1d, r3}, @hci={0x1f, 0x2, 0x2}, @qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6, 0x0, 0x0, 0x0, 0x1a, &(0x7f0000000b00)='syz_tun\x00', 0x5, 0x6, 0xff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@errors_remount}, {@dioread_lock}, {@user_xattr}, {@quota}]}, 0x1, 0x576, &(0x7f0000000e80)="$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") listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r10}, 0x10) finit_module(r9, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x5, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r13, &(0x7f00000029c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_dest={0x18, 0x10c, 0x2, {0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xc7c}], 0x30}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x57, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x3, 0xa0, 0x2e, [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "81"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x4, 0xe}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xf9, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc, 0x5, 0x8e}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x80, 0xe}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x0, 0x0, 0x3, 0xff, 0xd}, 0x34, &(0x7f0000000200)={0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7f, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xd2, 0x91, 0xe69e}, @ssp_cap={0x18, 0x10, 0xa, 0xf, 0x3, 0x9, 0xf00, 0x7, [0x0, 0xff000f, 0x3f]}, @ptm_cap={0x3}]}, 0x4, [{0x1f, &(0x7f0000000300)=@string={0x1f, 0x3, "e5389a8e3a68c0f1fda8008a893193bef68c943c29e8d1d4ca9e870c9c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1411}}, {0xba, &(0x7f0000000380)=@string={0xba, 0x3, "eda8ce60fddb7fa76172fd2943c3815bd7a003a0e9547fce2280191321e0aa6e351e65b9dbfc4a3f0c0f8beb0d886a95a40d9631abd804566ef9850df01e3a6e61e303391603fe2f7237a494ed429ae2ed41112ef1711e7d103a76336388b0f9d6897d0d6fc7062848fa7d47fc3df2553e9c149be67c650272ca37a015c067223c7e1b7a97f90e3ebecfc4be5ae3fb2930283741e165c013e9785f43c7c8162b593335745621ecf0b416cace46a3a1665f5d71451cb093f9"}}, {0x8, &(0x7f0000000440)=@string={0x8, 0x3, "b4e54fa631ed"}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) chown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 2.878541943s ago: executing program 3 (id=202): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109b01) socket(0x28, 0x2, 0x400) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="ffffffff00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4e24, 0x0, 0x8}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff05000000000000}}, 0x20) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x2054dfff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000000000600000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000040)={0x8, 'vlan0\x00', {'team_slave_1\x00'}, 0x8}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.569105402s ago: executing program 3 (id=204): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000002000000000000000000000000070200006111960884fc57f0532d6bbfd3ac1144a81714d8c76790b9e5beef8421c8b08937dd741474175608bcd18c03f1d7c30b844b6175581d56b8aca9bb7aa34a327469eae6c23621577c7b75e47e37a89b33e42bdaa8c947ba"], 0x18}, 0x1, 0x5502000000000000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="180500f1a1d739470d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000000500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000076e10c0008000000060000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x30d0, &(0x7f0000000540)={0x0, 0x0, 0x100}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304}, "a58601697a35dd38", "d1c802686e68088e09e5630d56c2b1e5a4ef9f91d73ad0dec753bed03e367831", "244200ff", "99e85847641dd4e3"}, 0x38) write$binfmt_script(r5, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)='\"', 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x6f5a, 0x0, 0x1, 0x123}, &(0x7f0000000380)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2.536349825s ago: executing program 0 (id=205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000eb00000000000000c68a8d708f00"/33], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200006ac50018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000a40)="b8c3e4", &(0x7f0000000080)=@tcp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7, &(0x7f00000009c0)="bafd24bc901cfd"}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r8 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000580)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r10, r9, &(0x7f0000000540)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2b, 0x2000, @fd_index=0x4, 0x49cb, 0x0, 0x0, 0x5, 0x0, {0x1}}) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r11 = syz_open_pts(r3, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000180c200000000000000000088a8160d810000000800"], 0x1e) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 2.436801564s ago: executing program 3 (id=206): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100", @ANYRES32, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000080000001f0000000000000085000000080000009500000000000000e135dee43f5d62cdaf5bb32c301264de232ce03ca49ba60071b592758143664bf8505b4845e336472821027a89dba77c8ea9b6ee1398ae73749be1537086ae214b648801a3f00174709ddccbce9ffab959b9042fc0dfcd37b7baa14007c92d4cf2d339bf000000000000000957476eac9cdac23d9c280569e2dbfa62118132000000000000c0dadcbdbfba95ec64e00d93bfada6b71d91340a4508bcd72d77eba909bd6a9d45359cf11ad81000fb0f5548ced9733ca0fe9d8ca129b42fea3551e5ca8cdad72f668dbfa9a21d9e8c4afb7203e71a4dcefc7a45ea63c8899caca26b63ddd0ddf5b45ad90b19879853bac503661a3069ba143e01ccbef34bdce3099f80a5ae740c01ffa4f0a207fa54f5112a341a195af0662cfbaa80fce27ae5abd0dfbd0fcdcf8b8c362667a67813555101d3f6abaaea73dcf70445c52f0a0354dab0acdc6955a5f2dae85280f9f5a66b411fafe99d8a79d24cc9cf88e456cc5cdda94eeda37b147d64d97abf7f34490200b00ed338864d7d9855f9ee3a194294c73491ec"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x8, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r7, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r8, 0x80000001}, 0xc) connect$can_bcm(r0, &(0x7f0000000280), 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x259ad3d854a1c77, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.120336564s ago: executing program 0 (id=207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d8322dcf0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.101454535s ago: executing program 1 (id=184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000ac0)="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", 0x240}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948", 0x2b}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bind$packet(r6, &(0x7f0000000140)={0x11, 0x18, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x4c, 0x3, 0x0, 0x43, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x1, 0x2, 0xdeb}}) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r11 = dup(r10) ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, &(0x7f00000027c0)={0x40, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r11, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x66048000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000940)={0xb8, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket(0xa, 0x1, 0x0) 1.545572316s ago: executing program 3 (id=208): io_setup(0x2, &(0x7f0000000180)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYBLOB="476f45078a7d00a981d8eae391d4ea30dea193fb5b13787af62b1e33097593c093b3b9fd6e5ed173da65f6122f338d503bb821b3d75f9fff5a7580362c835441037abc1ae996128f74c509809ae401ef509d3746b4777883a35a90aa3b1598281be6b3c2d8", @ANYRES16=r5, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRES16=r3, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r12, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r13, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7b, 0x12, r11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.148266463s ago: executing program 0 (id=209): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x801) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002cf2c68d4da4822a78cd0b3f33b70400000000000085000000240000009500"/78], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 984.745419ms ago: executing program 1 (id=210): r0 = semget$private(0x0, 0x6, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) listen(r2, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x9, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000100)=0x240000) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000080), 0x4) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) socket(0xb, 0x4, 0x3) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000001d000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) msgget$private(0x0, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000b80)=[{&(0x7f00000003c0)="12b88b92244e28c9b703c77157b089448765975bdc036deddd9914f13b64605897430621e27a325f45876d174d464fbd11b285dd", 0x34}, {&(0x7f0000000240)="e2c8e585ca54d4ae79c2d3199cddc64cfb120633acff03994070293475eaed834d5b4ceb2c7cc64540b8847bfd06c2fc96eaa2431b30111117ca891af6fa42be7f3ac07cd362868a7afa6c3324e16a40ae960fcef064a967ab93ca98c8907b0c51750221389ab3a9906ecde7132cee716baba48b7208ccfe7610120a8363fe34ef9b6fb1f5694e0fa35930557b65acb177bd254b67563a7e2929514820f374f87297a4084cd50b3fde13c1f242619ea857e34b711134a4c8a0d9af7bfd6fb483ce33c6ddb329d8539209bda069b0", 0xce}, {&(0x7f0000000340)="c03c224b7409a7006e94976a24a8bcff83814b53d138d77a6e5aa446b6875d7346ae735d74b3dc1691791a1ace035f91a9caff29206dc0191fd5d36efe9a424e0c72071c9f54dd7fb4941adca7e575cf6b330ba6efdbf0e1513e13275f3926eb8a8b88142b92b5ef0cdcb69b80e35c30cf50823125479343df", 0x79}, {&(0x7f0000000780)="f022317ea0ec028c5336c523617045dfd2d7750df85e407fc8042be6decd33f9438b144f54ac8f5c25f1db2d638d5d0049a7c72ce170b8e6947c92f29f066008a96e29da3124697053f1d9729c1169aa68e83f0178cf69c03e42c3cd1922e75a972459331de30d7a8f3bb676845883fe7c53e83c35f6cbb13442fa94d26d7a29698b9e46ec60665ee8030aa30ac8", 0x8e}, {&(0x7f0000000480)="19069115bc129f00c952067cdc334f23d1a91f4b6127a20f81e10ade116460e1348c0d7265ee4076e9115e21efe6d9c40810749638ba0ba7f6d8d57d15d4039c3ba8c634b39a2c3cc547a0bab9f17b25d0cb53d21eb39394a48bd81de815c8008a37f6d585406b78250df30196bd2d1c2f4dedfd749f0b9d16716262d2eb1604", 0x80}, {&(0x7f0000000500)="3bcdf8983cfd4e0b2ccdea7b41a45e43190974551a53b8217d91e6603b802955a266a95fa8609420fcdf926a70fda0caf7ab471c0d9500a2c728a8ea560486f0faceec45a5c0f3d4eb167e4ecf69341327ead68e66e2b36367e8995c55557dc02420aa845d9885726fe8ff8cc7a7fe97afaa520c9e55d0785e58260ef8e1c9b56d8c5d3af9852e18e9310662d1e870410f3fe563e821bcc7b8ef74d75770a7b55e2a75e89552e380b336f4bcd1f36931d5133e9dbc7459c6e1ef22acb67731e9c7294278ac11a786f1128e943fbe871dcfdbb309c0d4", 0xd6}, {&(0x7f0000000600)="77b974fc70239d8caa9921ed38eb415f7b5c5c7773e8acaab19bd1e59340dbf6612866f71c586e5abe8dbfe0708570fca421f7890b86e02a184cac2d56d9f5f0a19d55af4c4b4d1f09ebc5932d7b185aa37d71ecc39454e85755b53c5efc1403591061bbf22ec6118aee27656b28f0c5f8a748d65891da26bff14db5eba0c5ab612376ad10e8fd1753d1b45c99dbf7ee7b37ed08e4b1a3b2ff4d0d12bb99ce193714e1fd808e9214429cf213fe5e7ae78832573262511da646fefa4c6230960029327f313ba8af83d30dff86d07b54eb582391bb65ea37f015a1fa41195060d49b732aa69ca49d74cfa7110a369ec35180360e0d1dd61aedd2cc4c40184862cf2e990fad46509dd9e17bb4d213daad487cc6dd46a68f6ffeb34da8a3cf42ca53c4dc3d9004815a1199f212bbf6f261cbdd3aec6f0890efa615c935b5b9460386d0a7bd3331d1ba94c445887274f693afe21dc2257ba01e6cd29c7f6a1f0699006f6c7dfb24b96ada29c3cedb4952feab", 0x170}], 0x7, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x2000000002ffff, 0x0) semop(r0, &(0x7f0000000080), 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 972.25816ms ago: executing program 0 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70a000003000000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff0000000026040000000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e52915ec0ae563f721c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef00"/1724], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180700000000000000000000fc000000189da000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000da1b000000005033bc6ef4d35d2a630000000000800800"/37], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000005008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bff8ffffffbf9200000000000007040000f0ff", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x10) r4 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r4, 0x107, 0x15, 0x0, 0x20600000) sendmsg$nl_route(r4, 0x0, 0x90) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0xff, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 924.905184ms ago: executing program 1 (id=212): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r3 = getpgid(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r3, @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000000), &(0x7f00000004c0)=""/155}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) r8 = gettid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030000000000000000000000000011000300686173683a69702c6d61726b0000000005000400000013000900020073797a3200000000050001000700000005000500020000000c000780080012"], 0x58}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb04}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r11, &(0x7f0000000300)=""/150, 0x96, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f00000002c0)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) 907.007945ms ago: executing program 0 (id=213): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r6, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003de22c6f5474a7e7dfbe3c6cf8b3ee57c8734d4221d0e986b9a3936e1326d7eae0a91b9a9f2b6b9f552b9941d5b8fe410765c461fd19b56a41c9d0a64585ed1180dca36157665eea0ab07656c722fa90bd33c310782693fe709a0b3f5bf5dc963b6c75eda43b352cf39705c12259387b790f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x67, r2}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 766.959969ms ago: executing program 3 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_io_uring_setup(0x26af, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x59, 0x5}, 0x10819, 0x0, 0x0, 0x2, 0x0, 0xffffffbe, 0x27, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x150}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}]}, 0x3c}}, 0x0) r7 = syz_io_uring_setup(0x366a, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYRES64=r7], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r9, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000802", @ANYRES16=r10, @ANYBLOB="010000000000000000000f000000240007800c000300060000000000000008000200020000000c0004000200000000000000"], 0x38}}, 0x0) mincore(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x0) 762.000849ms ago: executing program 2 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x36e}, &(0x7f0000000240)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ff9c, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1ff, 0xa401) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x80, 0x6, 0x305}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1b98}}, 0x0) r10 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fcntl$setpipe(r10, 0x407, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4800000006520a0a09040000000000000000020000001c00048018004180080001006c6f67000c00008006003e2c3122f8f7210140000000000900010073797a30000000000900020073797a320000000014000900000001030000fdffffff00ff0000"], 0x70}}, 0x0) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) syz_open_dev$evdev(0x0, 0x0, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 679.582607ms ago: executing program 2 (id=217): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1265, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a0104000000b2de0000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000010000000900020000007a32000000000900010073797a30"], 0xb0}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x31, 0x0, 0x6, {0xb, @sctp_ip4_spec={@multicast2, @private=0xa010100, 0x4e21, 0x4e24, 0x98}, {0x0, @local, 0x4, 0x5, [0x80, 0x8]}, @usr_ip6_spec={@dev={0xfe, 0x80, '\x00', 0xc}, @mcast1, 0x5, 0xb, 0x1}, {0x0, @broadcast, 0x2, 0x7, [0x400, 0x9492]}, 0xffffffffffffffff, 0x400}, 0x1, [0x1]}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_open(0x0, 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) madvise(&(0x7f0000a05000/0x3000)=nil, 0x3000, 0x13) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000004c0)=0x9, 0x4) r7 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r7, 0x0) sendto$inet6(r7, 0x0, 0x0, 0xfffffeffffff7fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000001580)="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", 0xff7, 0x0, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001280), 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x8, 0x3b, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x9, 0x0, 0x8, 0x2, 0x67, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) readlink(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 627.366202ms ago: executing program 2 (id=218): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x2248c, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc8480, 0x8) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="19020000000000000800000308000000000000000c62a758dbbe1261ff4781737f315b406be9f32644561320327c1ae34ce957936b594fee3643e19ca74f8d3a12b1a64a4fae267fe33108db12168484e8b7e3210f7d0dc82f68e0a335a0e6c7535c1a665c27fe8df89614dc3f6648a23fae5c74f9d0d0691f3fa528754746e7366e1ffe54bce53089edf2afcf8bfcabdff4b73425aa25c7351991c98e9ca590214e581105e6071199ad033f14f176515f4444460b030cb422f8f96f1479f1fe9d9b5ddff44f9422806d80e6eb021a213d6f381bb271bdae0e5a043f0739cb0178cbd82eeca7dfc4418f68", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4f56f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="0ec6fc", 0x3}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r8, &(0x7f0000000140)="f9ae", 0x5, 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = msgget$private(0x0, 0x3a9) setreuid(0x0, 0xee01) msgrcv(r11, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r11, 0x1, &(0x7f0000000280)={{0x2, 0xee00, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x12, r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x0, &(0x7f00000000c0)=0xfffffffd, 0x0, 0x4) 560.689438ms ago: executing program 2 (id=219): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r7, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000605d795e76869aa197beea40db16eace6ae124c1290e8a50a078958096ba5c6e6eff006edb0b2416f41348b116eae5f3f13da89d4e1bf53cc86e1937be4a2f6e199bf0aa2b883df361e4f329e51da1e193f87ae5573b569958d09a07a6083500163d709f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b0026", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 503.541383ms ago: executing program 2 (id=220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r1 = socket(0x40000000015, 0x805, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x6000, @fd_index=0x9, 0x3, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x6, 0xf}) io_uring_enter(0xffffffffffffffff, 0x2915, 0x83b4, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x56, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x404, @remote, 0xffffff8e}}, [0x20000000008000, 0xfffffffffffffffe, 0xfffb, 0x8001, 0x8, 0x6000000000000, 0x4, 0x100400000, 0xb, 0x44773838, 0x0, 0x4, 0x40795, 0xfff, 0x80008]}, &(0x7f00000001c0)=0x100) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='ext4_load_inode\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r8, r7, 0x0, 0x100800001) 413.881891ms ago: executing program 2 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x4, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1, 0x3fc}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_create(0x80000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x6e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=[{0x58, 0x115, 0x2, "5bbc620ea463175112d8b2388d620b5a9d25654ddda671143b90ae6a95baa231c5e62009c6060f0487f9cce8cfe16f7922b1a386776dd75555472d183a2668e09615c93e9b28"}, {0x10, 0xff, 0x3ff00}], 0x68}, 0x0, 0x40000, 0x1, {0x0, r5}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000414000828bd7000fbdbdf250801000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf7, 0x7ffc1ff9}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 140.742267ms ago: executing program 4 (id=222): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='cpuhp_exit\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x104, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff008001fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x57, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x21, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0xe, 0x1, "0c874a1a0335ae"}]}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) close_range(0xffffffffffffffff, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) timerfd_create(0x0, 0x800) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000038c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000005200)=""/79, 0x4f}, 0x6}], 0x2, 0x40012000, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r2, @ANYBLOB="dadb"], 0x20}}, 0x0) 41.892736ms ago: executing program 1 (id=223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1832000004000000000000a900000000000ae90400010000001863"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1f86, &(0x7f00000004c0)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x400, 0x0}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001f80)="$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") r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) write$nci(r6, &(0x7f00000002c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x1, {0x1, 0x2}}, 0x5) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r11, 0x0, 0x0, 0xb5) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3f}, 0x1c) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0xf18524dd8a2d36e, &(0x7f0000000240)=ANY=[], 0x1, 0x120f, &(0x7f0000002dc0)="$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") r15 = open(&(0x7f00000005c0)='./bus\x00', 0x24842, 0x0) pwritev2(r15, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x8ec00}], 0x12, 0x300400, 0x0, 0x3) write$P9_RSTATu(r11, &(0x7f00000003c0)={0x6c, 0x7d, 0x1, {{0x0, 0x55, 0x9, 0x5, {0x1, 0x4, 0x4}, 0x10000, 0xfffffff8, 0x5, 0x2, 0x14, 'inode_readahead_blks', 0x0, '', 0xa, '/dev/vcsu\x00', 0x4, '\'&-&'}, 0x2, '(-', r13, r14, r13}}, 0x6c) 0s ago: executing program 0 (id=224): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000858, &(0x7f0000000500)=ANY=[], 0x5, 0x2d6, &(0x7f0000000200)="$eJzs3E1PE2sUwPHTUkopgXZxc2/uTW44uXejmwnUvbExkBibSJAaXxLjAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO1du3LExcSEL45jOCxQogoVSXv6/hMyB85zyPFMg55kws3779eNSwTEKZk2iCZWIiMiGSFqiEooEx6gXx6XZC7k48PXjvzfv3L2ezeXGJlXHs1OXMqo6NPzuybP+YNhKn6yl769/yXxe+3Pt7/UfU4+KjhYdLVdqaup05VPNnLYtnS06JUN1wrZMx9Ji2bGqfr7i5wt2ZW6urmZ5djA5V7UcR81yXUtWXWsVrVXraj40i2U1DEMHk4L95BcnJ81sm8UzRzwZdEi1mjV7RKR/Vya/2JUJAQCArtrZ/0cbLX07/X+sZf+/9N9qbeDW8lDQ/6/EG/2/SFP//2Drtbb1/wkR6Xj/v7sjOltc99f5Q/X/OCUa/X8y+P31vLy3NOIF9P8AAAAAAAAAAAAAAAAAAAAAAJwGG66bcl03FR7Djz4RSXh3kPifd3ue6Aze//Nt68EdsSER+9V8fj7vH4MBqyJiiyUjkpLv3s9DoBGH9wJqQ1re2wtB/cJ8vsfLZAtS9OpHJSXpnfWuO34tNzaqvu31vZJsrs9ISv5oXZ9pWR+XC/831RuSkg8zUhFbZoM748L656OqV2/kdtT3e+MAAAAAADgLDN20uX/va84bu/P+/tjPb+6vW14f8PfXIy335zH5J9atVQMAAAAAcL449acl07at6pkLwhUetCr8X4Y9xkQkslfqCILwm5+MU3eAINrWVIfjv/mmtAzCy0Z7jZGJdl7ZTYkc9rT89ebtt6M7z5eXE/ustGNB7/H9BQIAAABwXLaa/vArV7o7IQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqHjeJxYt9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBQ/AwAA//8Kygul") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)='ipvlan1\x00', 0x80, 0x800, 0xfffc}) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x3, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73c5a791cc17bca736"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0xb, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004ac0)) getpgid(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000000180)=""/250, 0xfa}], 0x2, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) kernel console output (not intermixed with test programs): 27][ T3677] tipc: Started in network mode [ 67.996001][ T3677] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.046732][ T3677] tipc: Enabled bearer , priority 10 [ 68.140563][ T3677] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.156575][ T3683] pim6reg: entered allmulticast mode [ 68.207221][ T3683] pim6reg: left allmulticast mode [ 68.228290][ T3677] xt_nfacct: accounting object `syz1' does not exists [ 68.270240][ T3684] loop1: detected capacity change from 0 to 512 [ 68.355464][ T3684] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.55: casefold flag without casefold feature [ 68.368204][ T29] audit: type=1400 audit(1727639214.618:1060): avc: denied { create } for pid=3676 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.437770][ T3684] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.55: couldn't read orphan inode 15 (err -117) [ 68.845148][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.164616][ T35] tipc: Node number set to 2886997162 [ 75.524607][ T29] audit: type=1400 audit(1727639221.678:1061): avc: denied { mount } for pid=3690 comm="syz.3.56" name="/" dev="ramfs" ino=3839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.945192][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.486669][ T3692] mmap: syz.3.56 (3692) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.811537][ T3691] Process accounting resumed [ 80.025087][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.494692][ T29] audit: type=1400 audit(1727639226.378:1062): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.752209][ T3698] loop3: detected capacity change from 0 to 1024 [ 81.966646][ T3695] loop4: detected capacity change from 0 to 128 [ 81.974476][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.998254][ T3695] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.207211][ T3695] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.436880][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.622471][ T3264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.850464][ T29] audit: type=1400 audit(1727639229.368:1063): avc: denied { create } for pid=3706 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.873795][ T3707] loop1: detected capacity change from 0 to 512 [ 82.906147][ T3707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.919356][ T3707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.048183][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.287180][ T3714] netlink: 180 bytes leftover after parsing attributes in process `syz.4.60'. [ 83.385971][ T3714] netlink: 56 bytes leftover after parsing attributes in process `syz.4.60'. [ 83.622586][ T3707] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.765915][ T3707] EXT4-fs (loop1): 1 truncate cleaned up [ 83.771936][ T3707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.816882][ T3718] netlink: 'syz.3.61': attribute type 322 has an invalid length. [ 83.929053][ T3718] loop3: detected capacity change from 0 to 512 [ 84.072807][ T3718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.188043][ T3718] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.335944][ T29] audit: type=1400 audit(1727639230.858:1064): avc: denied { execute } for pid=3715 comm="syz.3.61" path="/17/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.462090][ T3724] loop4: detected capacity change from 0 to 512 [ 84.516146][ T3724] ext4: Unknown parameter 'euid>00000000000000000000' [ 84.716249][ T29] audit: type=1400 audit(1727639231.238:1065): avc: denied { bind } for pid=3706 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.984711][ T29] audit: type=1400 audit(1727639231.498:1066): avc: denied { create } for pid=3723 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.090421][ T29] audit: type=1326 audit(1727639231.608:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 85.207250][ T3731] loop4: detected capacity change from 0 to 512 [ 85.254025][ T29] audit: type=1326 audit(1727639231.638:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 85.277350][ T29] audit: type=1326 audit(1727639231.638:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 85.300681][ T29] audit: type=1326 audit(1727639231.638:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 85.324118][ T29] audit: type=1326 audit(1727639231.638:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 85.705457][ T3731] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.756808][ T3731] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.63: iget: bad i_size value: -6917529027641081756 [ 85.796583][ T3731] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.63: couldn't read orphan inode 17 (err -117) [ 85.836525][ T3731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.988588][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.129884][ T3736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.65'. [ 86.937789][ T3748] loop4: detected capacity change from 0 to 512 [ 86.968408][ T3737] chnl_net:caif_netlink_parms(): no params data found [ 87.026036][ T3748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.305909][ T3748] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.866569][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.906776][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.936190][ T3707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.515313][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.522401][ T3737] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.566179][ T3737] bridge_slave_0: entered allmulticast mode [ 90.606272][ T3737] bridge_slave_0: entered promiscuous mode [ 90.645853][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.652929][ T3737] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.716701][ T3737] bridge_slave_1: entered allmulticast mode [ 90.755551][ T3737] bridge_slave_1: entered promiscuous mode [ 90.856672][ T3737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.916035][ T3737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.035725][ T3737] team0: Port device team_slave_0 added [ 91.042409][ T3737] team0: Port device team_slave_1 added [ 91.152246][ T3737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.159340][ T3737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.186145][ T3737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.405435][ T3737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.412402][ T3737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.438509][ T3737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.753940][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 91.753954][ T29] audit: type=1400 audit(1727639238.268:1117): avc: denied { write } for pid=3756 comm="syz.4.67" path="socket:[4767]" dev="sockfs" ino=4767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.784084][ T29] audit: type=1400 audit(1727639238.268:1118): avc: denied { nlmsg_read } for pid=3756 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.874900][ T3760] loop3: detected capacity change from 0 to 512 [ 91.890790][ T3760] EXT4-fs (loop3): failed to initialize system zone (-117) [ 91.957977][ T3737] hsr_slave_0: entered promiscuous mode [ 91.966107][ T3760] EXT4-fs (loop3): mount failed [ 91.979345][ T3737] hsr_slave_1: entered promiscuous mode [ 92.005841][ T3737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.067744][ T3737] Cannot create hsr debugfs directory [ 92.206038][ T29] audit: type=1400 audit(1727639238.728:1119): avc: denied { create } for pid=3765 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.335883][ T29] audit: type=1400 audit(1727639238.768:1120): avc: denied { write } for pid=3765 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.422031][ T3769] netlink: 27 bytes leftover after parsing attributes in process `syz.4.68'. [ 92.430963][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.68'. [ 92.563005][ T3769] netlink: 27 bytes leftover after parsing attributes in process `syz.4.68'. [ 93.615465][ T3837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1538 sclass=netlink_tcpdiag_socket pid=3837 comm=syz.4.69 [ 94.346953][ T3837] loop4: detected capacity change from 0 to 8192 [ 94.446784][ T29] audit: type=1400 audit(1727639240.968:1121): avc: denied { mount } for pid=3828 comm="+}[@" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.034624][ T29] audit: type=1400 audit(1727639241.078:1122): avc: denied { unmount } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.170314][ T3928] loop4: detected capacity change from 0 to 256 [ 95.256593][ T3928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.70'. [ 95.307918][ T29] audit: type=1400 audit(1727639241.828:1123): avc: denied { write } for pid=3925 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.399771][ T3946] veth0_vlan: left promiscuous mode [ 95.477205][ T3948] loop4: detected capacity change from 0 to 1024 [ 95.483842][ T3948] EXT4-fs: Ignoring removed i_version option [ 95.491857][ T3946] veth0_vlan: entered promiscuous mode [ 95.616100][ T3948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.799504][ T29] audit: type=1400 audit(1727639242.318:1124): avc: denied { setattr } for pid=3947 comm="syz.4.72" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.835018][ T3948] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 95.931712][ T3948] EXT4-fs (loop4): Remounting filesystem read-only [ 95.994342][ T29] audit: type=1400 audit(1727639242.498:1125): avc: denied { connect } for pid=3947 comm="syz.4.72" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.015786][ T3954] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 96.104959][ T3954] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 96.144592][ T29] audit: type=1400 audit(1727639242.628:1126): avc: denied { mounton } for pid=3947 comm="syz.4.72" path="/23/file2/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.047309][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 97.047324][ T29] audit: type=1400 audit(1727639243.568:1128): avc: denied { bind } for pid=3956 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.107044][ T3959] loop3: detected capacity change from 0 to 512 [ 97.214524][ T3957] loop3: detected capacity change from 0 to 256 [ 97.222399][ T29] audit: type=1400 audit(1727639243.698:1129): avc: denied { create } for pid=3956 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.354164][ T29] audit: type=1400 audit(1727639243.808:1130): avc: denied { create } for pid=3956 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.853054][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.870410][ T29] audit: type=1400 audit(1727639244.388:1131): avc: denied { setopt } for pid=3962 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.878443][ T3963] loop3: detected capacity change from 0 to 1024 [ 97.943464][ T29] audit: type=1400 audit(1727639244.388:1132): avc: denied { create } for pid=3962 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.963445][ T29] audit: type=1400 audit(1727639244.388:1133): avc: denied { read write } for pid=3962 comm="syz.3.74" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.987299][ T29] audit: type=1400 audit(1727639244.388:1134): avc: denied { open } for pid=3962 comm="syz.3.74" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.065551][ T3963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.120731][ T3972] bridge0: entered allmulticast mode [ 98.129292][ T3972] pim6reg: entered allmulticast mode [ 98.139904][ T29] audit: type=1326 audit(1727639244.488:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.75" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x0 [ 98.207955][ T3391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.254383][ T29] audit: type=1400 audit(1727639244.688:1136): avc: denied { create } for pid=3962 comm="syz.3.74" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.276203][ T29] audit: type=1400 audit(1727639244.708:1137): avc: denied { read append open } for pid=3962 comm="syz.3.74" path="/21/file1/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.498966][ T3391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.648474][ T3391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.789641][ T3391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.863467][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.215087][ T3391] bridge_slave_1: left allmulticast mode [ 99.220828][ T3391] bridge_slave_1: left promiscuous mode [ 99.226631][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.244789][ T3987] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 99.279112][ T3391] bridge_slave_0: left allmulticast mode [ 99.284826][ T3391] bridge_slave_0: left promiscuous mode [ 99.290474][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.775028][ T3391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.816005][ T3391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.856162][ T3391] bond0 (unregistering): Released all slaves [ 99.908432][ T3970] chnl_net:caif_netlink_parms(): no params data found [ 100.071475][ T3992] loop4: detected capacity change from 0 to 2048 [ 100.147020][ T3992] loop4: p1 < > p4 [ 100.152105][ T3992] loop4: p4 size 8388608 extends beyond EOD, truncated [ 100.226241][ T4001] loop3: detected capacity change from 0 to 2048 [ 100.241902][ T3391] hsr_slave_0: left promiscuous mode [ 100.273443][ T3391] hsr_slave_1: left promiscuous mode [ 100.326577][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.334046][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.346445][ T4001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.415159][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.422607][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.429941][ T4001] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.485243][ T3391] veth1_macvtap: left promiscuous mode [ 100.490781][ T3391] veth0_macvtap: left promiscuous mode [ 100.496445][ T3391] veth1_vlan: left promiscuous mode [ 100.501753][ T3391] veth0_vlan: left promiscuous mode [ 100.602983][ T3270] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 101.042063][ T3391] team0 (unregistering): Port device team_slave_1 removed [ 101.077010][ T3391] team0 (unregistering): Port device team_slave_0 removed [ 101.236856][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.243937][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.253814][ T3970] bridge_slave_0: entered allmulticast mode [ 101.257406][ T3426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.260994][ T3970] bridge_slave_0: entered promiscuous mode [ 101.276696][ T4012] sit0: entered allmulticast mode [ 101.286970][ T4015] sit0: entered promiscuous mode [ 101.332189][ T3485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.343556][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.350653][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.358143][ T3970] bridge_slave_1: entered allmulticast mode [ 101.364376][ T3970] bridge_slave_1: entered promiscuous mode [ 101.381395][ T3970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.392515][ T3970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.411352][ T3485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.426986][ T3970] team0: Port device team_slave_0 added [ 101.433811][ T3970] team0: Port device team_slave_1 added [ 101.452737][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.459802][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.485773][ T3970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.497228][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.504184][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.530352][ T3970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.545461][ T3485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.558940][ T4020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.576740][ T4017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.576783][ T4020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.603522][ T3970] hsr_slave_0: entered promiscuous mode [ 101.619147][ T3970] hsr_slave_1: entered promiscuous mode [ 101.632599][ T3970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.640473][ T3970] Cannot create hsr debugfs directory [ 101.674902][ T3537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.760795][ T3537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.780770][ T3391] IPVS: stop unused estimator thread 0... [ 101.810085][ T3537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.858319][ T3391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.885573][ T3537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.902080][ T3391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.980878][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 102.002366][ T3391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.040951][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.048215][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.057889][ T4037] bridge_slave_0: entered allmulticast mode [ 102.064992][ T4037] bridge_slave_0: entered promiscuous mode [ 102.077499][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.084633][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.092030][ T4037] bridge_slave_1: entered allmulticast mode [ 102.098861][ T4037] bridge_slave_1: entered promiscuous mode [ 102.114930][ T3391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.145862][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.157115][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.181907][ T4037] team0: Port device team_slave_0 added [ 102.188744][ T4037] team0: Port device team_slave_1 added [ 102.228801][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.236019][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.262129][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.276189][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.283151][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.309266][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.343427][ T3391] bridge_slave_1: left allmulticast mode [ 102.349146][ T3391] bridge_slave_1: left promiscuous mode [ 102.354942][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.373182][ T3391] bridge_slave_0: left allmulticast mode [ 102.379300][ T3391] bridge_slave_0: left promiscuous mode [ 102.385018][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.395615][ T3391] bridge_slave_1: left allmulticast mode [ 102.401307][ T3391] bridge_slave_1: left promiscuous mode [ 102.407017][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.415221][ T3391] bridge_slave_0: left allmulticast mode [ 102.420891][ T3391] bridge_slave_0: left promiscuous mode [ 102.426583][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.436791][ T3391] bridge_slave_1: left allmulticast mode [ 102.442520][ T3391] bridge_slave_1: left promiscuous mode [ 102.448296][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.458889][ T3391] bridge_slave_0: left allmulticast mode [ 102.464677][ T3391] bridge_slave_0: left promiscuous mode [ 102.470297][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.478843][ T3391] bridge_slave_1: left allmulticast mode [ 102.484487][ T3391] bridge_slave_1: left promiscuous mode [ 102.490189][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.497989][ T3391] bridge_slave_0: left allmulticast mode [ 102.503682][ T3391] bridge_slave_0: left promiscuous mode [ 102.509380][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.720975][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 102.720989][ T29] audit: type=1400 audit(1727639249.238:1247): avc: denied { mount } for pid=4101 comm="syz.4.85" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.749747][ T29] audit: type=1400 audit(1727639249.238:1248): avc: denied { read } for pid=4101 comm="syz.4.85" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.772558][ T29] audit: type=1400 audit(1727639249.238:1249): avc: denied { open } for pid=4101 comm="syz.4.85" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.800662][ T4103] loop4: detected capacity change from 0 to 4096 [ 102.809076][ T4103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.986650][ T3391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.996654][ T3391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.006486][ T3391] bond0 (unregistering): Released all slaves [ 103.014915][ T3391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.024984][ T3391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.035691][ T3391] bond0 (unregistering): Released all slaves [ 103.044277][ T3391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.054327][ T3391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.063893][ T3391] bond0 (unregistering): Released all slaves [ 103.072951][ T3391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.082660][ T3391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.092372][ T3391] bond0 (unregistering): Released all slaves [ 103.136944][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.146991][ T4037] hsr_slave_0: entered promiscuous mode [ 103.154816][ T4037] hsr_slave_1: entered promiscuous mode [ 103.168313][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.183955][ T4037] Cannot create hsr debugfs directory [ 103.193396][ T3391] tipc: Disabling bearer [ 103.198688][ T3391] tipc: Left network mode [ 103.217004][ T3737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.233408][ T3737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.267607][ T3391] hsr_slave_0: left promiscuous mode [ 103.273476][ T3391] hsr_slave_1: left promiscuous mode [ 103.279327][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.287411][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.296812][ T3391] hsr_slave_0: left promiscuous mode [ 103.302480][ T3391] hsr_slave_1: left promiscuous mode [ 103.313065][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.320638][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.332633][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.340178][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.351149][ T3391] hsr_slave_0: left promiscuous mode [ 103.356886][ T3391] hsr_slave_1: left promiscuous mode [ 103.362710][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.370334][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.377963][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.385453][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.394511][ T3391] hsr_slave_0: left promiscuous mode [ 103.400376][ T3391] hsr_slave_1: left promiscuous mode [ 103.405980][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.413430][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.420978][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.428453][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.439923][ T3391] veth1_macvtap: left promiscuous mode [ 103.445503][ T3391] veth0_macvtap: left promiscuous mode [ 103.451050][ T3391] veth1_vlan: left promiscuous mode [ 103.456316][ T3391] veth0_vlan: left promiscuous mode [ 103.461911][ T3391] veth1_macvtap: left promiscuous mode [ 103.467434][ T3391] veth0_macvtap: left promiscuous mode [ 103.472989][ T3391] veth1_vlan: left promiscuous mode [ 103.478280][ T3391] veth0_vlan: left promiscuous mode [ 103.483808][ T3391] veth1_macvtap: left promiscuous mode [ 103.489327][ T3391] veth0_macvtap: left promiscuous mode [ 103.494834][ T3391] veth1_vlan: left promiscuous mode [ 103.500034][ T3391] veth0_vlan: left promiscuous mode [ 103.629961][ T3391] team0 (unregistering): Port device team_slave_1 removed [ 103.639743][ T3391] team0 (unregistering): Port device team_slave_0 removed [ 103.693177][ T3391] team0 (unregistering): Port device team_slave_1 removed [ 103.702754][ T3391] team0 (unregistering): Port device team_slave_0 removed [ 103.756577][ T3391] team0 (unregistering): Port device team_slave_1 removed [ 103.766557][ T3391] team0 (unregistering): Port device team_slave_0 removed [ 103.820846][ T3391] team0 (unregistering): Port device team_slave_1 removed [ 103.830403][ T3391] team0 (unregistering): Port device team_slave_0 removed [ 103.862525][ T3737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.871346][ T3537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.882350][ T3537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.890753][ T3537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.905822][ T3737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.936120][ T3537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.959951][ T3970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.986827][ T3970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.024546][ T3970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.049157][ T4161] syzkaller0: entered promiscuous mode [ 104.054748][ T4161] syzkaller0: entered allmulticast mode [ 104.064144][ T3970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.088636][ T4161] futex_wake_op: syz.4.88 tries to shift op by -1; fix this program [ 104.114881][ T29] audit: type=1400 audit(1727639250.628:1250): avc: denied { relabelfrom } for pid=4160 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.115750][ T3737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.134590][ T29] audit: type=1400 audit(1727639250.628:1251): avc: denied { relabelto } for pid=4160 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.169918][ T4161] loop4: detected capacity change from 0 to 164 [ 104.186853][ T4161] Unable to read rock-ridge attributes [ 104.187399][ T3970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.196396][ T4161] netlink: 228 bytes leftover after parsing attributes in process `syz.4.88'. [ 104.204589][ T3737] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.207758][ T4161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.88'. [ 104.231413][ T3537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.245062][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.248136][ T4161] netlink: 76 bytes leftover after parsing attributes in process `syz.4.88'. [ 104.252163][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.271670][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.278768][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.288965][ T3970] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.313609][ T3537] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.325539][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.332642][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.344657][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.351717][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.384033][ T3737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.394480][ T3737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.413267][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.420369][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.429931][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.437119][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.454406][ T29] audit: type=1326 audit(1727639250.968:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 104.473797][ T3970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.477731][ T29] audit: type=1326 audit(1727639250.968:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 104.488073][ T3970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.511502][ T29] audit: type=1326 audit(1727639250.968:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 104.545314][ T29] audit: type=1326 audit(1727639250.968:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 104.568690][ T29] audit: type=1326 audit(1727639250.968:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9ef4dff9 code=0x7ffc0000 [ 104.593187][ T3537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.603570][ T3537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.661202][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.684483][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.693663][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.707043][ T3737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.722089][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.748952][ T3970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.760458][ T3537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.838206][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.866769][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.902502][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.909645][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.930662][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.937773][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.960306][ T4037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.970738][ T4037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.019479][ T3737] veth0_vlan: entered promiscuous mode [ 105.034303][ T3537] veth0_vlan: entered promiscuous mode [ 105.054117][ T3970] veth0_vlan: entered promiscuous mode [ 105.063074][ T3737] veth1_vlan: entered promiscuous mode [ 105.072019][ T3537] veth1_vlan: entered promiscuous mode [ 105.093763][ T3970] veth1_vlan: entered promiscuous mode [ 105.111732][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.121970][ T3737] veth0_macvtap: entered promiscuous mode [ 105.136550][ T3537] veth0_macvtap: entered promiscuous mode [ 105.143009][ T3737] veth1_macvtap: entered promiscuous mode [ 105.163316][ T3537] veth1_macvtap: entered promiscuous mode [ 105.191801][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.202371][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.212902][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.220538][ T3737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.231226][ T3737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.241277][ T3737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.251728][ T3737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.262421][ T3737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.275079][ T3970] veth0_macvtap: entered promiscuous mode [ 105.284250][ T3737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.294871][ T3737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.314536][ T3737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.326786][ T3737] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.335757][ T3737] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.344524][ T3737] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.353301][ T3737] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.363799][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.374332][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.384287][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.394869][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.405980][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.420683][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.429446][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.438212][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.447012][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.477344][ T3970] veth1_macvtap: entered promiscuous mode [ 105.493506][ T4037] veth0_vlan: entered promiscuous mode [ 105.523465][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.534069][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.544012][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.545831][ T4276] +}[@[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.554434][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.554509][ T4276] +}[@[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.565319][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.576392][ T4276] +}[@[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.585859][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.590042][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.627206][ T4037] veth1_vlan: entered promiscuous mode [ 105.644232][ T4281] loop1: detected capacity change from 0 to 512 [ 105.660525][ T4037] veth0_macvtap: entered promiscuous mode [ 105.674041][ T4037] veth1_macvtap: entered promiscuous mode [ 105.688938][ T4281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=f040e01c, mo2=0002] [ 105.711978][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.720231][ T4281] System zones: 1-12 [ 105.722467][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.736287][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.746902][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.756774][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.767236][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.777071][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.787679][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.800920][ T4281] EXT4-fs error (device loop1): __ext4_iget:4952: inode #11: block 1: comm syz.1.64: invalid block [ 105.813460][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.821736][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.832187][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.842039][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.852461][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.862360][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.869832][ T4281] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.64: couldn't read orphan inode 11 (err -117) [ 105.872777][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.873497][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.886493][ T4281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.900143][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.923947][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.933769][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.944183][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.954085][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.964628][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.974427][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.984965][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.006285][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.020561][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.029450][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.038319][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.047081][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.065777][ T3970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.074543][ T3970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.083311][ T3970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.092127][ T3970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.150214][ T3737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.240965][ T4309] loop4: detected capacity change from 0 to 2048 [ 106.302984][ T4314] Zero length message leads to an empty skb [ 106.321607][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.324107][ T4303] loop0: detected capacity change from 0 to 2048 [ 106.364077][ T4309] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.94: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 106.384532][ T4320] loop1: detected capacity change from 0 to 512 [ 106.404036][ T4320] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.414085][ T4309] EXT4-fs (loop4): Remounting filesystem read-only [ 106.443431][ T4320] EXT4-fs (loop1): 1 truncate cleaned up [ 106.461905][ T4320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.794070][ T4338] loop0: detected capacity change from 0 to 128 [ 106.951587][ T4343] loop0: detected capacity change from 0 to 512 [ 106.960184][ T4343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.027727][ T3737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.048332][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.174325][ T4352] netlink: 56 bytes leftover after parsing attributes in process `syz.4.103'. [ 107.545949][ T4353] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.102'. [ 107.555122][ T4353] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.102'. [ 107.579167][ T3537] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 107.684678][ T3537] EXT4-fs error (device loop0): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 107.767785][ T3537] EXT4-fs error (device loop0): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 107.792726][ T4357] syzkaller0: entered allmulticast mode [ 107.823632][ T4354] syzkaller0: left allmulticast mode [ 107.845813][ T4358] Cannot find set identified by id 0 to match [ 107.860593][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 107.866825][ T29] audit: type=1400 audit(1727639254.378:1706): avc: denied { execute } for pid=4356 comm="syz.3.106" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.917187][ T29] audit: type=1400 audit(1727639254.378:1707): avc: denied { getopt } for pid=4356 comm="syz.3.106" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.985124][ T4360] loop4: detected capacity change from 0 to 1024 [ 107.991770][ T4360] EXT4-fs: Ignoring removed i_version option [ 107.999153][ T29] audit: type=1326 audit(1727639254.498:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.022498][ T29] audit: type=1326 audit(1727639254.498:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.045861][ T29] audit: type=1326 audit(1727639254.498:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.069218][ T29] audit: type=1326 audit(1727639254.498:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.092588][ T29] audit: type=1326 audit(1727639254.498:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.115944][ T29] audit: type=1326 audit(1727639254.498:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.139371][ T29] audit: type=1326 audit(1727639254.498:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.162847][ T29] audit: type=1326 audit(1727639254.498:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 108.178641][ T4360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.218491][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 108.218891][ T4362] loop1: detected capacity change from 0 to 1024 [ 108.251593][ T4362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.266778][ T4365] bond0: entered allmulticast mode [ 108.285541][ T3264] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /38/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 108.317305][ T3737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.326580][ T3264] EXT4-fs (loop4): Remounting filesystem read-only [ 108.358083][ T4382] loop1: detected capacity change from 0 to 1024 [ 108.393632][ T4382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.408739][ T4388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 108.417231][ T4382] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.417694][ T4388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.112'. [ 108.433904][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 108.443793][ T4388] vlan0: entered allmulticast mode [ 108.449047][ T4388] veth0_vlan: entered allmulticast mode [ 108.468474][ T3737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.506557][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.519215][ T4401] random: crng reseeded on system resumption [ 108.533214][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.608185][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.614794][ T4406] syz.2.112 uses obsolete (PF_INET,SOCK_PACKET) [ 108.698476][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.756684][ T4435] loop2: detected capacity change from 0 to 764 [ 108.769842][ T4435] Symlink component flag not implemented [ 108.775549][ T4435] Symlink component flag not implemented [ 108.782544][ T4435] Symlink component flag not implemented (112) [ 108.782703][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.788752][ T4435] Symlink component flag not implemented (22) [ 108.812400][ T4408] chnl_net:caif_netlink_parms(): no params data found [ 108.853024][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.860731][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.868612][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.876205][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.899898][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.907161][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.914413][ T4408] bridge_slave_0: entered allmulticast mode [ 108.921346][ T4408] bridge_slave_0: entered promiscuous mode [ 108.928361][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.935528][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.942893][ T4408] bridge_slave_1: entered allmulticast mode [ 108.949280][ T4408] bridge_slave_1: entered promiscuous mode [ 108.971206][ T4408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.987047][ T50] bridge_slave_1: left allmulticast mode [ 108.992763][ T50] bridge_slave_1: left promiscuous mode [ 108.998502][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.005988][ T50] bridge_slave_0: left allmulticast mode [ 109.011640][ T50] bridge_slave_0: left promiscuous mode [ 109.017311][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.083462][ T50] bridge0 (unregistering): left allmulticast mode [ 109.116956][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.127417][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.137514][ T50] bond0 (unregistering): Released all slaves [ 109.146963][ T4408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.167642][ T4408] team0: Port device team_slave_0 added [ 109.174309][ T4408] team0: Port device team_slave_1 added [ 109.187616][ T50] hsr_slave_0: left promiscuous mode [ 109.193287][ T50] hsr_slave_1: left promiscuous mode [ 109.199014][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.206529][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.213944][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.221485][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.230553][ T50] veth1_macvtap: left promiscuous mode [ 109.236065][ T50] veth0_macvtap: left promiscuous mode [ 109.241601][ T50] veth1_vlan: left promiscuous mode [ 109.246901][ T50] veth0_vlan: left promiscuous mode [ 109.296875][ T50] pim6reg (unregistering): left allmulticast mode [ 109.334200][ T50] team0 (unregistering): Port device team_slave_1 removed [ 109.344230][ T50] team0 (unregistering): Port device team_slave_0 removed [ 109.385145][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.392109][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.418293][ T4408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.429581][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.436668][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.462593][ T4408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.489350][ T4408] hsr_slave_0: entered promiscuous mode [ 109.495887][ T4408] hsr_slave_1: entered promiscuous mode [ 109.549158][ T4453] loop1: detected capacity change from 0 to 128 [ 109.644171][ T4468] vhci_hcd: default hub control req: 2000 v0000 i0000 l0 [ 109.776986][ T4486] loop2: detected capacity change from 0 to 256 [ 109.783581][ T4486] vfat: Unknown parameter '' [ 109.866588][ T3537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.008309][ T4408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.064343][ T4408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.165523][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.191808][ T4408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.203134][ T4408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.223440][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.256880][ T4408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.267868][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.285987][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.301408][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.308603][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.317963][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.325050][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.358858][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.403568][ T4408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.428316][ T4539] loop2: detected capacity change from 0 to 512 [ 110.447233][ T4539] EXT4-fs: Ignoring removed orlov option [ 110.462910][ T4539] ext4: Bad value for 'sb' [ 110.504708][ T50] bridge_slave_1: left allmulticast mode [ 110.510395][ T50] bridge_slave_1: left promiscuous mode [ 110.516137][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.564992][ T4539] 9pnet_fd: Insufficient options for proto=fd [ 110.576923][ T50] bridge_slave_0: left allmulticast mode [ 110.582611][ T50] bridge_slave_0: left promiscuous mode [ 110.588345][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.588371][ T4556] __nla_validate_parse: 2 callbacks suppressed [ 110.588412][ T4556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 110.599360][ T4539] 9pnet_fd: Insufficient options for proto=fd [ 110.610080][ T4556] capability: warning: `syz.1.127' uses deprecated v2 capabilities in a way that may be insecure [ 110.614288][ T4539] xt_connbytes: Forcing CT accounting to be enabled [ 110.634361][ T4539] Cannot find add_set index 0 as target [ 110.671647][ T4559] loop1: detected capacity change from 0 to 1024 [ 110.683778][ T4559] EXT4-fs: Ignoring removed orlov option [ 110.689593][ T4559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.716765][ T4559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.732111][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.748445][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.759685][ T50] bond0 (unregistering): Released all slaves [ 110.789412][ T4567] loop3: detected capacity change from 0 to 512 [ 110.809321][ T4567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.820522][ T3737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.855648][ T4494] chnl_net:caif_netlink_parms(): no params data found [ 110.883083][ T4583] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.892136][ T4567] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.130: invalid indirect mapped block 512 (level 0) [ 110.921844][ T4583] loop1: detected capacity change from 0 to 1024 [ 110.940140][ T4583] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.951161][ T4583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 110.962282][ T4583] JBD2: no valid journal superblock found [ 110.968091][ T4583] EXT4-fs (loop1): Could not load journal inode [ 110.968306][ T4567] EXT4-fs (loop3): Remounting filesystem read-only [ 110.975719][ T50] hsr_slave_0: left promiscuous mode [ 110.981215][ T4567] EXT4-fs (loop3): 1 orphan inode deleted [ 110.991942][ T4567] EXT4-fs (loop3): 1 truncate cleaned up [ 111.006396][ T50] hsr_slave_1: left promiscuous mode [ 111.006904][ T4567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.025091][ T4567] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 111.032691][ T4567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.091325][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.098978][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.115118][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.122554][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.146713][ T50] veth1_macvtap: left promiscuous mode [ 111.152326][ T50] veth0_macvtap: left promiscuous mode [ 111.157912][ T50] veth1_vlan: left promiscuous mode [ 111.163130][ T50] veth0_vlan: left promiscuous mode [ 111.286903][ T50] team0 (unregistering): Port device team_slave_1 removed [ 111.303893][ T50] team0 (unregistering): Port device team_slave_0 removed [ 111.360509][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.367614][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.388162][ T4494] bridge_slave_0: entered allmulticast mode [ 111.406250][ T4494] bridge_slave_0: entered promiscuous mode [ 111.424386][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.431501][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.471516][ T4494] bridge_slave_1: entered allmulticast mode [ 111.488222][ T4494] bridge_slave_1: entered promiscuous mode [ 111.527048][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.539225][ T4408] veth0_vlan: entered promiscuous mode [ 111.569056][ T4408] veth1_vlan: entered promiscuous mode [ 111.586758][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.603320][ T4408] veth0_macvtap: entered promiscuous mode [ 111.678761][ T4408] veth1_macvtap: entered promiscuous mode [ 111.704400][ T4494] team0: Port device team_slave_0 added [ 111.733491][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.744005][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.753915][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.764403][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.803943][ C1] ------------[ cut here ]------------ [ 111.809465][ C1] refcount_t: underflow; use-after-free. [ 111.815324][ C1] WARNING: CPU: 1 PID: 4622 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 111.824749][ C1] Modules linked in: [ 111.828670][ C1] CPU: 1 UID: 0 PID: 4622 Comm: dhcpcd-run-hook Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 111.839453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.849632][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 111.855819][ C1] Code: 72 ff ff ff e8 0b 88 71 ff 48 c7 c7 be d6 b2 86 e8 9f 6d 8a ff c6 05 b6 2d f4 04 01 90 48 c7 c7 c2 a5 1b 86 e8 db 4c 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 dc 87 71 ff 48 c7 c7 bb d6 b2 86 e8 [ 111.875444][ C1] RSP: 0000:ffffc900000e4af8 EFLAGS: 00010246 [ 111.881540][ C1] RAX: d677cf471eb1f100 RBX: ffff88810126efe4 RCX: ffff888102f40000 [ 111.885469][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.889616][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.904831][ C1] RBP: 0000000000000003 R08: ffffffff8111f757 R09: 0000000000000000 [ 111.912812][ C1] R10: 0001ffffffffffff R11: ffff888102f40000 R12: ffff888115097468 [ 111.920834][ C1] R13: ffff888115097400 R14: ffff88810126efe4 R15: 0000000000000000 [ 111.928839][ C1] FS: 00007f095961e380(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 111.937809][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.944416][ C1] CR2: 00007f0959758a12 CR3: 0000000111c06000 CR4: 00000000003506f0 [ 111.952402][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.960400][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.968491][ C1] Call Trace: [ 111.971770][ C1] [ 111.974636][ C1] ? __warn+0x141/0x350 [ 111.978909][ C1] ? report_bug+0x315/0x420 [ 111.983474][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 111.989064][ C1] ? handle_bug+0x60/0x90 [ 111.993412][ C1] ? exc_invalid_op+0x1a/0x50 [ 111.998147][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 112.003220][ C1] ? __warn_printk+0x167/0x1b0 [ 112.008026][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 112.013611][ C1] ? refcount_warn_saturate+0x1c5/0x230 [ 112.019201][ C1] sk_skb_reason_drop+0xe9/0x290 [ 112.024198][ C1] j1939_session_put+0x157/0x2a0 [ 112.029181][ C1] j1939_xtp_rx_dat_one+0x664/0x9b0 [ 112.034412][ C1] j1939_tp_recv+0x26b/0xa80 [ 112.039050][ C1] j1939_can_recv+0x45f/0x550 [ 112.043735][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 112.049063][ C1] can_rcv_filter+0x225/0x4c0 [ 112.053759][ C1] can_receive+0x182/0x1f0 [ 112.058241][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 112.062772][ C1] can_rcv+0xe7/0x180 [ 112.066833][ C1] ? __pfx_can_rcv+0x10/0x10 [ 112.071492][ C1] __netif_receive_skb+0x123/0x280 [ 112.072023][ T4494] team0: Port device team_slave_1 added [ 112.076638][ C1] process_backlog+0x22e/0x440 [ 112.087020][ C1] __napi_poll+0x63/0x3c0 [ 112.091342][ C1] ? net_rx_action+0x376/0x7f0 [ 112.096139][ C1] net_rx_action+0x3a1/0x7f0 [ 112.100740][ C1] handle_softirqs+0xbf/0x280 [ 112.105444][ C1] irq_exit_rcu+0x3e/0x90 [ 112.109776][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 112.115439][ C1] [ 112.118371][ C1] [ 112.121303][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.127333][ C1] RIP: 0010:mm_trace_rss_stat+0x0/0x100 [ 112.132947][ C1] Code: e8 15 1c d8 ff 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 53 89 f5 48 89 fb e8 dc 1b d8 ff 66 90 [ 112.152594][ C1] RSP: 0000:ffffc90003d1fca8 EFLAGS: 00000286 [ 112.158767][ C1] RAX: ffffffff81c82456 RBX: 0000000000000000 RCX: ffff888102f40000 [ 112.166748][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888114019500 [ 112.174731][ C1] RBP: ffff888114019500 R08: ffffffff81c82430 R09: 0000000000000000 [ 112.182699][ C1] R10: 0001ffffffffffff R11: 0001c90003d1fd60 R12: ffffc90003d1fea8 [ 112.190717][ C1] R13: ffff8881149b46f0 R14: ffff888114019830 R15: 00007f0959758000 [ 112.198786][ C1] ? percpu_counter_add_batch+0xa0/0x140 [ 112.204430][ C1] ? percpu_counter_add_batch+0xc6/0x140 [ 112.210092][ C1] filemap_map_pages+0x86e/0xb30 [ 112.215059][ C1] handle_mm_fault+0x1124/0x2a80 [ 112.219986][ C1] exc_page_fault+0x3b9/0x650 [ 112.224675][ C1] asm_exc_page_fault+0x26/0x30 [ 112.229557][ C1] RIP: 0033:0x7f0959758a12 [ 112.233980][ C1] Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83 [ 112.253606][ C1] RSP: 002b:00007fff1d7890d8 EFLAGS: 00010246 [ 112.259690][ C1] RAX: 0000000000000000 RBX: 0000557af2b0f201 RCX: 00007f0959758a12 [ 112.267686][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 112.275664][ C1] RBP: 0000557af2b10930 R08: 0000000000000000 R09: 0000000000000000 [ 112.283621][ C1] R10: 00007f095961e650 R11: 0000000000000246 R12: 0000557af2b11d30 [ 112.291694][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.299710][ C1] [ 112.302725][ C1] ---[ end trace 0000000000000000 ]--- [ 112.318112][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.328633][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.338534][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.348984][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.369490][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.402787][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 112.426178][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.438227][ T4637] serio: Serial port ptm0 [ 112.439210][ T4625] bridge_slave_0 (unregistering): left allmulticast mode [ 112.449693][ T4625] bridge_slave_0 (unregistering): left promiscuous mode [ 112.456893][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.470078][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.477065][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.502991][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.534255][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.541493][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.567522][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.600620][ T4408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.609416][ T4408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.618197][ T4408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.627060][ T4408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.643145][ T4642] bridge1: entered promiscuous mode [ 112.648426][ T4642] bridge1: entered allmulticast mode [ 112.678171][ T4645] loop1: detected capacity change from 0 to 512 [ 112.695643][ T4645] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.728044][ T4494] hsr_slave_0: entered promiscuous mode [ 112.728584][ T4645] EXT4-fs (loop1): 1 orphan inode deleted [ 112.739407][ T4645] EXT4-fs (loop1): 1 truncate cleaned up [ 112.746210][ T4494] hsr_slave_1: entered promiscuous mode [ 112.752810][ T4645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.761806][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.772431][ T4494] Cannot create hsr debugfs directory [ 112.869020][ T4668] loop4: detected capacity change from 0 to 256 [ 112.890082][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 112.890095][ T29] audit: type=1326 audit(1727639259.408:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 112.919811][ T29] audit: type=1326 audit(1727639259.408:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3babeadff9 code=0x7ffc0000 [ 112.943730][ T4668] FAT-fs (loop4): codepage cp866 not found [ 112.957438][ T29] audit: type=1400 audit(1727639259.478:1984): avc: denied { execmem } for pid=4666 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 113.060970][ T3737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.092427][ T4683] loop1: detected capacity change from 0 to 128 [ 113.241807][ T4683] syz.1.138: attempt to access beyond end of device [ 113.241807][ T4683] loop1: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 113.258912][ T29] audit: type=1400 audit(1727639259.668:1985): avc: denied { mount } for pid=4666 comm="syz.4.115" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.281213][ T29] audit: type=1400 audit(1727639259.678:1986): avc: denied { remount } for pid=4666 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.301053][ T29] audit: type=1400 audit(1727639259.728:1987): avc: denied { search } for pid=4666 comm="syz.4.115" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 113.322774][ T29] audit: type=1400 audit(1727639259.728:1988): avc: denied { mounton } for pid=4666 comm="syz.4.115" path="/0/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 113.345237][ T29] audit: type=1400 audit(1727639259.728:1989): avc: denied { execute } for pid=4666 comm="syz.4.115" path="/0/file0/bus" dev="hugetlbfs" ino=7866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 113.610796][ T4494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.623220][ T4698] sctp: [Deprecated]: syz.2.139 (pid 4698) Use of int in maxseg socket option. [ 113.623220][ T4698] Use struct sctp_assoc_value instead [ 113.624485][ T3391] kworker/u8:7: attempt to access beyond end of device [ 113.624485][ T3391] loop1: rw=1, sector=249, nr_sectors = 792 limit=128 [ 113.653814][ T4494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.662678][ T4494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.671488][ T4494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.708036][ T4698] loop2: detected capacity change from 0 to 512 [ 113.729460][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.740531][ T4494] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.758002][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.765111][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.775235][ T29] audit: type=1400 audit(1727639260.298:1990): avc: denied { unmount } for pid=4408 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 113.780768][ T4698] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 113.810019][ T29] audit: type=1400 audit(1727639260.328:1991): avc: denied { unmount } for pid=4408 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.810304][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.837209][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.859516][ T4713] loop4: detected capacity change from 0 to 128 [ 113.872286][ T4707] sit0 speed is unknown, defaulting to 1000 [ 113.893147][ T4494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.903569][ T4494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.917574][ T4713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.922590][ T4707] sit0 speed is unknown, defaulting to 1000 [ 113.945759][ T4707] sit0 speed is unknown, defaulting to 1000 [ 113.948792][ T4713] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.977871][ T4707] infiniband syz0: set active [ 113.988143][ T4707] infiniband syz0: added sit0 [ 113.992832][ T3341] sit0 speed is unknown, defaulting to 1000 [ 114.041823][ T4707] RDS/IB: syz0: added [ 114.050232][ T4707] smc: adding ib device syz0 with port count 1 [ 114.061118][ T4707] smc: ib device syz0 port 1 has pnetid [ 114.067206][ T35] sit0 speed is unknown, defaulting to 1000 [ 114.088862][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.096944][ T4707] sit0 speed is unknown, defaulting to 1000 [ 114.104647][ T4726] bond_slave_1: mtu less than device minimum [ 114.145577][ T4408] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.163448][ T4735] loop2: detected capacity change from 0 to 1024 [ 114.174467][ T4735] EXT4-fs: Ignoring removed i_version option [ 114.180591][ T4735] EXT4-fs: Ignoring removed bh option [ 114.193082][ T4735] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.210469][ T4707] sit0 speed is unknown, defaulting to 1000 [ 114.229782][ T4735] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 114.263732][ T4741] loop4: detected capacity change from 0 to 764 [ 114.271895][ T4707] sit0 speed is unknown, defaulting to 1000 [ 114.275837][ T4735] EXT4-fs (loop2): mount failed [ 114.300037][ T4741] Symlink component flag not implemented [ 114.312103][ T4494] veth0_vlan: entered promiscuous mode [ 114.318084][ T4741] Symlink component flag not implemented (129) [ 114.337815][ T4494] veth1_vlan: entered promiscuous mode [ 114.357564][ T4707] sit0 speed is unknown, defaulting to 1000 [ 114.366476][ T4741] rock: directory entry would overflow storage [ 114.372698][ T4741] rock: sig=0x4f50, size=4, remaining=3 [ 114.378351][ T4741] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 114.392498][ T4494] veth0_macvtap: entered promiscuous mode [ 114.400296][ T4494] veth1_macvtap: entered promiscuous mode [ 114.410425][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.420914][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.430873][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.441335][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.448843][ T4735] ALSA: seq fatal error: cannot create timer (-22) [ 114.451281][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.468506][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.479998][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.488259][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.498840][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.508815][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.519374][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.529331][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.539777][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.552410][ T4758] netlink: 268 bytes leftover after parsing attributes in process `syz.3.146'. [ 114.552533][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.577684][ T4758] loop4: detected capacity change from 0 to 7 [ 114.584670][ T4707] sit0 speed is unknown, defaulting to 1000 [ 114.602475][ T4494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.611357][ T4494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.620226][ T4494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.629317][ T4494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.630442][ T4758] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.662693][ T4758] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.670683][ T4758] loop4: unable to read partition table [ 114.690326][ T4758] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 114.690326][ T4758] ) failed (rc=-5) [ 114.756200][ T4783] loop0: detected capacity change from 0 to 512 [ 114.779993][ T4783] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.810521][ T4783] EXT4-fs (loop0): 1 truncate cleaned up [ 114.817211][ T4783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.836169][ T4799] netlink: 68 bytes leftover after parsing attributes in process `syz.3.150'. [ 114.841390][ T4772] loop2: detected capacity change from 0 to 512 [ 114.860517][ T4783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.874213][ T4799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.150'. [ 114.884019][ T4772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.918336][ T4772] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.933994][ T4772] syz.2.148: attempt to access beyond end of device [ 114.933994][ T4772] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.980471][ T3970] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.002712][ T4817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 115.009346][ T4817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.017038][ T4817] vhci_hcd vhci_hcd.0: Device attached [ 115.031488][ T4817] loop3: detected capacity change from 0 to 512 [ 115.047662][ T4817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.062408][ T4817] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.107095][ T4827] loop0: detected capacity change from 0 to 1024 [ 115.130608][ T4828] can0: slcan on ttyS3. [ 115.141431][ T4827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.156385][ T4827] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.179390][ T4818] vhci_hcd: connection closed [ 115.179605][ T53] vhci_hcd: stop threads [ 115.183044][ T4828] sit0 speed is unknown, defaulting to 1000 [ 115.184298][ T53] vhci_hcd: release socket [ 115.184312][ T53] vhci_hcd: disconnect device [ 115.204447][ T35] vhci_hcd: vhci_device speed not set [ 115.321895][ T4821] infiniband syz1: set active [ 115.327028][ T4821] infiniband syz1: added team_slave_0 [ 115.366091][ T4821] RDS/IB: syz1: added [ 115.370480][ T4821] smc: adding ib device syz1 with port count 1 [ 115.377274][ T4821] smc: ib device syz1 port 1 has pnetid [ 115.516377][ T4851] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 115.528739][ T4851] loop4: detected capacity change from 0 to 512 [ 115.547084][ T4851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.559980][ T4851] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.573099][ T4851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.654789][ T4856] loop4: detected capacity change from 0 to 512 [ 115.662615][ T4858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.156'. [ 115.671786][ T4856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.688272][ T4856] EXT4-fs (loop4): 1 orphan inode deleted [ 115.694160][ T4856] EXT4-fs (loop4): 1 truncate cleaned up [ 115.714064][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.745731][ T4037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.780313][ T4862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'. [ 115.814833][ T4862] netlink: 116 bytes leftover after parsing attributes in process `syz.3.157'. [ 115.846094][ T4862] bridge_slave_1: left allmulticast mode [ 115.851784][ T4862] bridge_slave_1: left promiscuous mode [ 115.857436][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.868015][ T4862] bridge_slave_0: left allmulticast mode [ 115.873669][ T4862] bridge_slave_0: left promiscuous mode [ 115.879473][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.896169][ T4868] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.939756][ T4494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.961633][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 115.970666][ T4868] netlink: 80 bytes leftover after parsing attributes in process `syz.3.157'. [ 115.983219][ T4868] ip6erspan0: entered promiscuous mode [ 116.033720][ T4870] syzkaller0: entered promiscuous mode [ 116.039464][ T4870] syzkaller0: entered allmulticast mode [ 116.040564][ T4820] can0 (unregistered): slcan off ttyS3. [ 116.052734][ T4867] bridge0: entered promiscuous mode [ 116.068368][ T4856] sit0 speed is unknown, defaulting to 1000 [ 116.089263][ T4867] bridge0: left promiscuous mode [ 116.229602][ T4913] loop0: detected capacity change from 0 to 512 [ 116.251696][ T4821] syz.2.152 (4821) used greatest stack depth: 10160 bytes left [ 116.293775][ T4930] loop2: detected capacity change from 0 to 256 [ 116.301912][ T4919] loop1: detected capacity change from 0 to 512 [ 116.314948][ T4913] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.338495][ T4919] journal_path: Lookup failure for './bus' [ 116.344365][ T4919] EXT4-fs: error: could not find journal device path [ 116.418853][ T4913] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.161: iget: bad i_size value: -6917529027641081756 [ 116.432701][ T4913] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.161: couldn't read orphan inode 17 (err -117) [ 116.449100][ T4913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.503202][ T4913] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.161: bg 0: block 65: padding at end of block bitmap is not set [ 116.529063][ T4913] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.161: Failed to acquire dquot type 0 [ 116.572838][ T4964] loop1: detected capacity change from 0 to 512 [ 116.615711][ T4408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.676954][ T4964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.691619][ T4964] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.828213][ T4974] siw: device registration error -23 [ 116.830723][ T4963] Process accounting resumed [ 116.859420][ T3737] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.921047][ T4977] loop4: detected capacity change from 0 to 1024 [ 116.936703][ T4977] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 116.947694][ T4977] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 116.947825][ T4913] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.161: deleted inode referenced: 15 [ 116.968927][ T4977] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 116.980441][ T4977] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: comm syz.4.168: inode #1: comm syz.4.168: iget: illegal inode # [ 116.994056][ T4977] EXT4-fs (loop4): no journal found [ 116.999312][ T4977] EXT4-fs (loop4): can't get journal size [ 117.008758][ T4977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.021606][ T4913] syz.0.161 (4913) used greatest stack depth: 9480 bytes left [ 117.040505][ T4977] loop5: detected capacity change from 0 to 16385 [ 117.053361][ T4494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.080152][ T4990] loop0: detected capacity change from 0 to 1024 [ 117.086037][ T4984] loop3: detected capacity change from 0 to 128 [ 117.094890][ T4977] loop5: detected capacity change from 16385 to 16321 [ 117.104353][ T4990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.176341][ T4969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.193524][ T5006] loop3: detected capacity change from 0 to 512 [ 117.213663][ T4408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.229137][ T5006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.276765][ T5015] loop2: detected capacity change from 0 to 128 [ 117.293683][ T5006] EXT4-fs (loop3): 1 truncate cleaned up [ 117.304161][ T5006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.334300][ T5015] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.377940][ T5015] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.469188][ T4037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.577370][ T5031] syz.3.175[5031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.577426][ T5031] syz.3.175[5031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.927843][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 117.927856][ T29] audit: type=1326 audit(1727639264.448:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 117.968968][ T29] audit: type=1326 audit(1727639264.448:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 117.992259][ T29] audit: type=1326 audit(1727639264.448:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.015613][ T29] audit: type=1326 audit(1727639264.448:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.038939][ T29] audit: type=1326 audit(1727639264.448:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.062831][ T29] audit: type=1326 audit(1727639264.448:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.065089][ T3810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.086204][ T29] audit: type=1326 audit(1727639264.448:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.086225][ T29] audit: type=1326 audit(1727639264.448:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.143100][ T29] audit: type=1326 audit(1727639264.448:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.166626][ T29] audit: type=1326 audit(1727639264.448:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961634dff9 code=0x7ffc0000 [ 118.209709][ T4494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.220522][ T3970] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.327882][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.364351][ T5054] loop2: detected capacity change from 0 to 256 [ 118.372521][ T3810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.385063][ T5054] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.526917][ T5059] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 118.568489][ T5023] sit0 speed is unknown, defaulting to 1000 [ 118.593545][ T3810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.709822][ T3810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.764820][ T5054] loop2: detected capacity change from 256 to 64 [ 118.811903][ T3810] bridge_slave_1: left allmulticast mode [ 118.817659][ T3810] bridge_slave_1: left promiscuous mode [ 118.823356][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.870378][ T3970] syz-executor: attempt to access beyond end of device [ 118.870378][ T3970] loop2: rw=2049, sector=160, nr_sectors = 4 limit=64 [ 118.883933][ T3970] Buffer I/O error on dev loop2, logical block 40, lost sync page write [ 118.916099][ T3810] infiniband syz0: set down [ 118.944263][ T11] smc: removing ib device syz0 [ 119.040596][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.056482][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.076495][ T3810] bond0 (unregistering): Released all slaves [ 119.196944][ T3341] sit0 speed is unknown, defaulting to 1000 [ 119.203827][ T5199] loop0: detected capacity change from 0 to 512 [ 119.238903][ T5198] loop4: detected capacity change from 0 to 2048 [ 119.252739][ T5023] chnl_net:caif_netlink_parms(): no params data found [ 119.302024][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.316050][ T5199] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.358282][ T5230] netlink: 268 bytes leftover after parsing attributes in process `syz.4.182'. [ 119.395606][ T149] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 119.409168][ T5230] loop4: detected capacity change from 0 to 7 [ 119.440427][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.447637][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.457971][ T149] kworker/u8:5: attempt to access beyond end of device [ 119.457971][ T149] loop2: rw=0, sector=160, nr_sectors = 4 limit=64 [ 119.471818][ T5230] Buffer I/O error on dev loop4, logical block 0, async page read [ 119.481095][ T5023] bridge_slave_0: entered allmulticast mode [ 119.493335][ T5230] Buffer I/O error on dev loop4, logical block 0, async page read [ 119.501340][ T5230] loop4: unable to read partition table [ 119.509046][ T149] FAT-fs (loop2): unable to read inode block for updating (i_pos 2560) [ 119.518862][ T5023] bridge_slave_0: entered promiscuous mode [ 119.534632][ T5230] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 119.534632][ T5230] ) failed (rc=-5) [ 119.540198][ T5199] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.558085][ T3810] hsr_slave_0: left promiscuous mode [ 119.563906][ T3810] hsr_slave_1: left promiscuous mode [ 119.588553][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.596060][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.610965][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.618543][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.644633][ T3810] veth1_macvtap: left promiscuous mode [ 119.650169][ T3810] veth0_macvtap: left promiscuous mode [ 119.655774][ T3810] veth1_vlan: left promiscuous mode [ 119.661027][ T3810] veth0_vlan: left promiscuous mode [ 119.718904][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.726438][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.733849][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.741328][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.748819][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.756293][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.763689][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.771234][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.778813][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786265][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786287][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786323][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786346][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786368][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786396][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786486][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786508][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786530][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786552][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786575][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.786654][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.831462][ T5293] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 119.838589][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.838616][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.897931][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.897987][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898010][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898030][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898051][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898075][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898098][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898149][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898170][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898189][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898211][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898235][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898259][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898288][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898312][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898336][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898360][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898390][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898414][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.898488][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.900689][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 120.057766][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 120.061259][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 120.089773][ T5299] loop3: detected capacity change from 0 to 512 [ 120.122106][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.122213][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.122314][ T5023] bridge_slave_1: entered allmulticast mode [ 120.122953][ T5023] bridge_slave_1: entered promiscuous mode [ 120.132954][ T5299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.169780][ T5299] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.203085][ T4494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.238840][ T5299] netlink: '+}[@': attribute type 10 has an invalid length. [ 120.241656][ T5340] loop4: detected capacity change from 0 to 512 [ 120.269436][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.280674][ T5299] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.290785][ T5340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.291089][ T5023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.313407][ T5340] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.329116][ T5023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.350087][ T4037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.377947][ T5023] team0: Port device team_slave_0 added [ 120.384197][ T5023] team0: Port device team_slave_1 added [ 120.404334][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.411405][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.437423][ T5023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.449776][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.456820][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.483113][ T5023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.601779][ T5453] vhci_hcd: invalid port number 157 [ 120.607396][ T5453] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 120.787035][ T5023] hsr_slave_0: entered promiscuous mode [ 120.835929][ T5023] hsr_slave_1: entered promiscuous mode [ 120.958299][ T5023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.971724][ T5584] loop0: detected capacity change from 0 to 512 [ 121.012851][ T5584] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.193: Failed to acquire dquot type 1 [ 121.128318][ T5584] EXT4-fs (loop0): 1 truncate cleaned up [ 121.136212][ T5023] Cannot create hsr debugfs directory [ 121.142602][ T4408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.156990][ T5288] chnl_net:caif_netlink_parms(): no params data found [ 121.230740][ T5584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.289134][ T5636] loop4: detected capacity change from 0 to 512 [ 121.312382][ T5636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.320918][ T5636] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 121.324792][ T5584] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.345982][ T5636] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 121.368231][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.375357][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.379627][ T5636] EXT4-fs (loop4): 1 truncate cleaned up [ 121.385611][ T5288] bridge_slave_0: entered allmulticast mode [ 121.396662][ T5636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.404694][ T5288] bridge_slave_0: entered promiscuous mode [ 121.425904][ T5636] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 121.435287][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.447318][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.454638][ T5288] bridge_slave_1: entered allmulticast mode [ 121.455833][ T5636] EXT4-fs (loop4): Remounting filesystem read-only [ 121.460956][ T5288] bridge_slave_1: entered promiscuous mode [ 121.484135][ T5584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 121.501414][ T5636] netlink: 'syz.4.194': attribute type 2 has an invalid length. [ 121.529130][ T5288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.550767][ T5636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.194'. [ 121.561270][ T5288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.596830][ T4408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.615965][ T5288] team0: Port device team_slave_0 added [ 121.622504][ T5288] team0: Port device team_slave_1 added [ 121.694037][ T5797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.709665][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.716694][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.742699][ T5288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.754547][ T4494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.757283][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.770720][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.797100][ T5288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.827049][ T5838] loop3: detected capacity change from 0 to 2048 [ 121.859058][ T5288] hsr_slave_0: entered promiscuous mode [ 121.865164][ T5288] hsr_slave_1: entered promiscuous mode [ 121.871028][ T5288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.878604][ T5288] Cannot create hsr debugfs directory [ 121.884064][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 121.896274][ T5838] Alternate GPT is invalid, using primary GPT. [ 121.902575][ T5838] loop3: p1 p2 p3 [ 121.943834][ T5816] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 121.943834][ T5816] program syz.3.196 not setting count and/or reply_len properly [ 121.947201][ T5905] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 121.973467][ T5905] team0: Failed to send options change via netlink (err -105) [ 121.981281][ T5905] team0: Port device netdevsim1 added [ 122.009613][ T4695] udevd[4695]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 122.010001][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 122.020618][ T3456] udevd[3456]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 122.041592][ T5023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.070192][ T5023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.080905][ T5023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.105204][ T5926] loop3: detected capacity change from 0 to 128 [ 122.113852][ T5023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.128527][ T5288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.204386][ T5023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.229398][ T5288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.248122][ T3813] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 122.249422][ T6000] loop4: detected capacity change from 0 to 1024 [ 122.273007][ T5023] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.283845][ T5288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.298738][ T6000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.303202][ T6008] loop3: detected capacity change from 0 to 1024 [ 122.321928][ T6000] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.201: iget: bad extended attribute block 8388352 [ 122.336837][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.343909][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.355797][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.356325][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 122.362932][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.379620][ T6000] EXT4-fs (loop4): Remounting filesystem read-only [ 122.393144][ T5288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.460071][ T5288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.473039][ T5023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.486210][ T5288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.502530][ T5288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.516539][ T4037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 122.531584][ T5288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.648417][ T6070] loop0: detected capacity change from 0 to 128 [ 122.657888][ T5023] veth0_vlan: entered promiscuous mode [ 122.671034][ T6070] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.681319][ T5023] veth1_vlan: entered promiscuous mode [ 122.690065][ T6070] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.701109][ T6062] loop3: detected capacity change from 0 to 2048 [ 122.727736][ T6062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.749716][ T6062] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.756108][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.782864][ T5288] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.793030][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.800141][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.813642][ T5023] veth0_macvtap: entered promiscuous mode [ 122.828295][ T4037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.840118][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.847330][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.860453][ T5023] veth1_macvtap: entered promiscuous mode [ 122.865172][ T4494] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.913865][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 122.920244][ T5288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.933117][ T5288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.944236][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 122.971366][ T6107] syz.3.206[6107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.971430][ T6107] syz.3.206[6107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.973608][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.004351][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.014194][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.024656][ T6107] syz.3.206[6107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.024675][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.045706][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.056248][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.070975][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.089641][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 123.089654][ T29] audit: type=1400 audit(1727639269.608:2907): avc: denied { module_request } for pid=5288 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 123.103960][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.128871][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.138765][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.149251][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.159073][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.169621][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.180765][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.200335][ T5023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.209162][ T5023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.217879][ T5023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.226646][ T5023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.259132][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.300786][ T29] audit: type=1326 audit(1727639269.818:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.381132][ T29] audit: type=1326 audit(1727639269.818:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.404621][ T29] audit: type=1326 audit(1727639269.818:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.422882][ T6153] syz.1.184[6153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.428586][ T29] audit: type=1326 audit(1727639269.818:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.428625][ T29] audit: type=1326 audit(1727639269.818:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.441230][ T6153] syz.1.184[6153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.463316][ T29] audit: type=1326 audit(1727639269.818:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.490294][ T6153] syz.1.184[6153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.497790][ T29] audit: type=1326 audit(1727639269.818:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.573688][ T29] audit: type=1326 audit(1727639269.928:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9522800e5 code=0x7ffc0000 [ 123.597201][ T29] audit: type=1326 audit(1727639270.088:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa95224dff9 code=0x7ffc0000 [ 123.612809][ T5288] veth0_vlan: entered promiscuous mode [ 123.899978][ T5288] veth1_vlan: entered promiscuous mode [ 124.056198][ T5288] veth0_macvtap: entered promiscuous mode [ 124.172825][ T5288] veth1_macvtap: entered promiscuous mode [ 124.192404][ T6128] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 124.208989][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.219492][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.229382][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.239816][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.249818][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.260286][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.270133][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.280568][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.294187][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.309088][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.319570][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.325828][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 124.329408][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.341630][ T6160] loop3: detected capacity change from 0 to 512 [ 124.348592][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.348609][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.348624][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.385120][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.395581][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.426554][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.437593][ T6160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.458201][ T6160] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.478393][ T5288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.487292][ T5288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.496217][ T5288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.504995][ T5288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.564484][ T6189] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 124.573737][ T6189] lo: entered allmulticast mode [ 124.586202][ T6190] pim6reg1: entered promiscuous mode [ 124.591719][ T6190] pim6reg1: entered allmulticast mode [ 124.609134][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 124.627184][ T4037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.650013][ T4234] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.658411][ T4234] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.693283][ T6199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.865258][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 125.252308][ T4408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.341199][ T6239] ipt_REJECT: ECHOREPLY no longer supported. [ 125.370663][ T6244] loop1: detected capacity change from 0 to 512 [ 125.399817][ T6244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.399930][ T6249] loop0: detected capacity change from 0 to 128 [ 125.413606][ T6244] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.448642][ T6249] 9pnet: p9_errstr2errno: server reported unknown error sŧ6 [ 125.482062][ T3391] ================================================================== [ 125.490180][ T3391] BUG: KCSAN: data-race in alloc_pid / copy_process [ 125.496766][ T3391] [ 125.499079][ T3391] read-write to 0xffffffff8665d858 of 4 bytes by task 3813 on cpu 0: [ 125.507134][ T3391] alloc_pid+0x542/0x6f0 [ 125.511380][ T3391] copy_process+0xe72/0x1f90 [ 125.515960][ T3391] kernel_clone+0x167/0x5e0 [ 125.520458][ T3391] user_mode_thread+0x7d/0xb0 [ 125.525124][ T3391] call_usermodehelper_exec_work+0x41/0x150 [ 125.531018][ T3391] process_scheduled_works+0x483/0x9a0 [ 125.536470][ T3391] worker_thread+0x51d/0x6f0 [ 125.541045][ T3391] kthread+0x1d1/0x210 [ 125.545151][ T3391] ret_from_fork+0x4b/0x60 [ 125.549573][ T3391] ret_from_fork_asm+0x1a/0x30 [ 125.554339][ T3391] [ 125.556649][ T3391] read to 0xffffffff8665d858 of 4 bytes by task 3391 on cpu 1: [ 125.564190][ T3391] copy_process+0x1799/0x1f90 [ 125.568860][ T3391] kernel_clone+0x167/0x5e0 [ 125.573441][ T3391] user_mode_thread+0x7d/0xb0 [ 125.578108][ T3391] call_usermodehelper_exec_work+0x41/0x150 [ 125.583997][ T3391] process_scheduled_works+0x483/0x9a0 [ 125.589452][ T3391] worker_thread+0x51d/0x6f0 [ 125.594027][ T3391] kthread+0x1d1/0x210 [ 125.598085][ T3391] ret_from_fork+0x4b/0x60 [ 125.602487][ T3391] ret_from_fork_asm+0x1a/0x30 [ 125.607253][ T3391] [ 125.609563][ T3391] value changed: 0x800000cd -> 0x800000ce [ 125.615273][ T3391] [ 125.617590][ T3391] Reported by Kernel Concurrency Sanitizer on: [ 125.623750][ T3391] CPU: 1 UID: 0 PID: 3391 Comm: kworker/u8:7 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 125.635727][ T3391] Tainted: [W]=WARN [ 125.639518][ T3391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.649563][ T3391] Workqueue: events_unbound call_usermodehelper_exec_work [ 125.656674][ T3391] ================================================================== [ 126.205833][ T5023] EXT4-fs error (device loop1): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /3/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0