last executing test programs: 10m58.874852923s ago: executing program 3 (id=3225): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 10m58.750832519s ago: executing program 3 (id=3226): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "d49905adaf57b57e6559174c44"}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000004c0)=""/38) 10m58.750396729s ago: executing program 3 (id=3227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) fremovexattr(r2, &(0x7f0000000340)=@known='com.apple.system.Security\x00') 10m58.728599649s ago: executing program 3 (id=3229): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) creat(0x0, 0x0) syz_io_uring_setup(0x298b, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010101}, 0x10) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000600)={'syztnl2\x00', r1, 0x120, 0x8000, 0x3, 0x76f9, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x3, 0x5}, @noop, @generic={0x94, 0x5, "b1de6b"}, @noop, @noop]}}}}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 10m58.338315526s ago: executing program 3 (id=3233): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) memfd_secret(0x80000) 10m58.100156996s ago: executing program 3 (id=3239): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x3}, 0x18) unshare(0x20060400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1e, 0x14, &(0x7f0000000b40)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYRES64], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 10m58.099885256s ago: executing program 32 (id=3239): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x3}, 0x18) unshare(0x20060400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1e, 0x14, &(0x7f0000000b40)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYRES64], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 9m44.5582562s ago: executing program 0 (id=4827): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000300), 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) pidfd_getfd(0xffffffffffffffff, r4, 0x0) mq_unlink(0x0) creat(&(0x7f0000000240)='./file1/file3\x00', 0x42) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) 9m44.373179668s ago: executing program 0 (id=4830): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1, 0x30}) 9m44.282707502s ago: executing program 0 (id=4831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) unshare(0x2c020400) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r5) 9m44.220441974s ago: executing program 0 (id=4832): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x4880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0x11, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x8, 0x3, 0xac9b, {0x170f}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000002}, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r6, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x18, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408) 9m44.016695713s ago: executing program 0 (id=4836): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5f58a51a27e27356) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1c000000}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x1979cdc91f213706) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x7, 0x913, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100}}}, 0xa0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback, 0x1, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000700)=[0x0]}, 0x40) 9m43.801272322s ago: executing program 0 (id=4839): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000300), 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) pidfd_getfd(0xffffffffffffffff, r4, 0x0) mq_unlink(0x0) creat(&(0x7f0000000240)='./file1/file3\x00', 0x42) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) 9m43.800945962s ago: executing program 33 (id=4839): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000300), 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) pidfd_getfd(0xffffffffffffffff, r4, 0x0) mq_unlink(0x0) creat(&(0x7f0000000240)='./file1/file3\x00', 0x42) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) 3.404946877s ago: executing program 1 (id=15172): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) 3.372371708s ago: executing program 1 (id=15173): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x803, 0x208) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000300)=@filename='./file0\x00', 0x0, &(0x7f0000000400)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3.33074728s ago: executing program 1 (id=15174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r3, &(0x7f0000000300)=""/212, 0xd4) socket(0x10, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1d", 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.241534064s ago: executing program 4 (id=15176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 3.240882864s ago: executing program 2 (id=15177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) 3.205221025s ago: executing program 5 (id=15178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000ffff00000000000007020000f8ffffffb703000008000000b704000000000000850000001600008a95"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) 3.136182488s ago: executing program 5 (id=15179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {0x0}], 0x2, 0x0) tee(r1, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x3f, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000"], 0x124}}, 0x0) 3.118468989s ago: executing program 4 (id=15180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x28, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19b28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) socket$kcm(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000c40000000800"]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x806, 0x800077, 0x20800000000412, 0x6, 0xfffffffffffffffd, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.114492949s ago: executing program 2 (id=15181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x28) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, &(0x7f00000010c0)) sched_getaffinity(0x0, 0x8, &(0x7f0000000440)) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="850000"], &(0x7f0000000040)='GPL\x00', 0x7f, 0x44, &(0x7f0000000200)=""/68, 0x41000, 0x20, '\x00', r5, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r0, r1, r1, 0x1, r1, r1, r1, r1], 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="dd27987eab8ff7a1a7c94849e919e742fcb6d6fd1345dffe079cc1bf30f1ac9a2aa9d50cefff5485b06166c2c7c322d02d9fb7d68bd171a3af96b49c323211a215943351ca4e4abcfc27eaff9e2e3a795d78020d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.823420721s ago: executing program 4 (id=15182): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x2, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}, @ra={0x5, 0x2, 0x4}]}, 0x20) sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000340)='syzkaller\x00', 0x76ab3ddd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111001, 0x2) io_setup(0x8f0, &(0x7f0000002400)) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x2}], 0x18, 0x4000000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000440)='syz0']}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x24040040) 2.695233796s ago: executing program 4 (id=15184): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000003b40)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002440)=[{&(0x7f0000001e80)="2c237499a7df3a204f9d1cdd9c41219a0ccac2cb7ccdd2990f1078be1ae0640c6e21a3fa89730905a0b7aae19ff5acd84ebc6e01c9cffc964b48cef169fb8abada83029ea313a1274d579d61d97511f4d73095bab2175b9ce3ceb95112f62f5aaf404ebf201084", 0x67}, {0x0}, {&(0x7f0000002040)="841d3e1e9288d5e19ab1b2d1e94f07367280264d69488b580cea65e5d99ca9897e1abd092c2eb7e42a71d07bcd52be6a11a89cafa2cf6fa05b180eb38eec27532339bc75219f606f9b9cf9fe416b6b8d65e94abe49718c320f7f808827ee2aca", 0x60}, {&(0x7f00000020c0)="206bc28de3c2603d753a39c61c", 0xd}, {&(0x7f0000002100)="f5112c321cecf489fbd49dd68e3c1f182245a6f0b51b5fb9b148917ed96acee2e1cf91f55a9bc8dd618d3bf1700f77cb3be0f98cf1534b8cd2e80a4377dbfc002e893e89f3152eed26f516b24070c0d4112abdf3faea557500173ae330f3a1202cddcaefc51f8f513b19d6af3222ae1ab6aaf09cb6df5d4619c20903c41d0a89acd67d9da85691093b961b2fe92ea78745360388ed34d5acedf1012831df45e0e072427326c4c6c1809cf1249882e94c1645a91fe0944088dcf8499f2a412fc0", 0xc0}, {0x0}, {&(0x7f00000022c0)}, {&(0x7f0000002380)="aeb932162eaf99608b07bcec9074d1be3e75222313bc49375ae73ba049f8dca9c8fbe19137826490b1b104ce470c0d1d2dccc24800539808f9640269f9949ee6a2883151d58fab118f880d73ad4a239be49722bb5ff8bc7036a3633364e8bce0c66f35d102cdfea621a1590d7bae9ce331d928d7f596a58602054f3eb0d7dfe5c91f472bf193c5086d9d8adb", 0x8c}], 0x8, &(0x7f0000002600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}, {{&(0x7f0000002c00)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000031c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000003a80)=[{0x0}, {&(0x7f00000036c0)="ee8cb8bbc2d7a5e4215a138d63c5a118468774cf707bc1b844a39ecd8e4e352f9091c5983fa76964310c811622b246a5f9af287c1b306ddd3be6b314b136b68c89bb896db50813a5ccf0b10c8258dc4c446dd931450291a2ad83012349f81183a50a4d99dec55476db9608e4755978ffe2b66cac81f129d6eeb311d69887a7f2919b013c4b9ff01a3a1a85a2903ad00ddf5e2b09b8e606a7444ef129319418b6d0429b49729521c82758192c6c6ce0d1e32cce35c0af", 0xb6}, {&(0x7f0000003780)="1819ea82c0fe4c973360fbadc7dafe2b1ca26bf30c784138ef654b01298466ee4f2edb3e6d152fe297a6d95374c27414a174b9117859452e60a969c7723086592d6a1335b7890d79d910da986f9cb34dc87f07c9046a85c01c16268b8b0be4e18599c7dc9d7a702b069184a7d9440ecffce481c169f7c51ce73efb6572927031d222421aa0854fc696c6a4620d1fa4f899b1", 0x92}, {0x0}, {&(0x7f0000003880)="28400af07d2c69bdf3ef5e1267d6726bddabbf54e2894472d806f93d677fbd17e12c24eebb47e7a0f48f2941c8daf153d978a2de5f6c04bf91ec17af180c2155a4652af63ef2f66e90d59b6ce9979324e95212218b256968b052eeecbc7b5e9d661b7175f9cf17243324dcd239d83621455bfaaccd387f74948f1098fbd4beb7c049713dde9cb90749247baac63812692755dca46e2fa948b3abf5a9e0c7782851749284dba5583f2142e8471d83dec9ea5b6bd69029615531b2009e3b14afe5d2bae949adb7aa9be160", 0xca}, {&(0x7f0000003980)}], 0x6, &(0x7f0000003b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}], 0x38}}, {{&(0x7f0000003bc0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000003d80)}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003f40)="b461f68028aad9b9567f6e22cc4ebc7b4edd495e", 0x14}, {&(0x7f0000003f80)="1f5567fbd4a29fd66407e796cced187c4f9ed50d39c65ddbc83e945ff3ab68a458b3bdbe9bb39a3d3654", 0x2a}, {&(0x7f0000003fc0)="bc87da8638a1f5ba28ef083b0367368bf30df1279093e99865bd26f8bcb1b735970f24dedc3344793ad6228895573ab3bdaefacaf91c97acd2cb3d72102e405d4963b08eeaa03269097e20a1cbf4892859e39ac562f7e5aacf49391f2edb15e5cefafa2c7767066e885391cc1d1c2cedaa8ce8abb72dc3366c13475f9790b0a71b9101495eeafb79950f421e0ce6531775a526bd59f3f346ef2644", 0x9b}, {&(0x7f0000004080)="69c92f590c1e1816519a7b6bfa2deb976f2a335a553c8c78b6ba447a5f41763a943e3cb77ca22a051a55da8d9c9e3864d792e2b00070d1a96d2373f58550ea7dc19d6cada5313de7bcec1845ec9f12f735d4800a6b61cfb6a06b52f350d5567aa9de1cab2bd38f99dd7d730339de066c864c6a7d386b80b350bdb964b3353b1ee9c599e775f9b10d9ed9c1faf1ddee5498addc0ff7d9195db960a2bd95a8dd9b", 0xa0}, {&(0x7f0000004140)="64aab5775b83cf32195899c81ea1c383fb4ed25801cef924afecb76d6312e5f1f1a59156d3681838ae593958a10175ad1a284d63263aad92a0e3d9730853e07391c981459648f8ef76d5d0263f9be1d0d044c1c36ef18ab52b7b1d3e260cdc4c9f9426e9cc3b571480c6e1d4d46fb318d9965177d2f4ca381b9d1ec2b1fe985c6ca95c8106ffbcf6484a0c5907b5263162dcf2eefa8a6cefa3ffb0614808beba281a57", 0xa3}], 0x5, &(0x7f0000004580)=[@ip_retopts={{0x38, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0x4d, [@local, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @ssrr={0x89, 0x7, 0x6d, [@loopback]}, @ssrr={0x89, 0xb, 0x13, [@local, @multicast1]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcef}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xa0}}], 0x7, 0x40091) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08860100223803003800128009000100766c616e000000002800028006000100110000001c0003800c00010000000000090000000c000100000000000800000008000500", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 1.696499779s ago: executing program 5 (id=15185): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.695742859s ago: executing program 2 (id=15186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000100000000000000e7ffffff0000000000000000"], 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x584c7000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 1.683640269s ago: executing program 1 (id=15187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) gettid() r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) waitid(0x0, r2, 0x0, 0x2100000a, 0x0) 1.624442782s ago: executing program 4 (id=15188): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x28, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19b28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, 0x10) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) close(r1) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$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") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000c40000000800"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x806, 0x800077, 0x20800000000412, 0x6, 0xfffffffffffffffd, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1.604309263s ago: executing program 5 (id=15189): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.558314825s ago: executing program 6 (id=15191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 1.536109595s ago: executing program 2 (id=15192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000100)=ANY=[]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r5 = dup(0xffffffffffffffff) read$usbfs(r5, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002001008008000100736974001400028006000e000010000008000300ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.470802018s ago: executing program 5 (id=15193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r3, &(0x7f0000000300)=""/212, 0xd4) socket(0x10, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1d", 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.344987794s ago: executing program 6 (id=15194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x11, 0x5, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xfffffffffffffffd, {0x2, 0xff, 0x2}, 0xff}, 0x18) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/208, &(0x7f0000000240)=0xd0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.320582464s ago: executing program 1 (id=15195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {0x0}], 0x2, 0x0) tee(r1, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x3f, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000"], 0x124}}, 0x0) 1.130888833s ago: executing program 6 (id=15196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000ffff00000000000007020000f8ffffffb703000008000000b704000000000000850000001600008a95"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) 1.095167734s ago: executing program 6 (id=15197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x28) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, &(0x7f00000010c0)) sched_getaffinity(0x0, 0x8, &(0x7f0000000440)) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="850000"], &(0x7f0000000040)='GPL\x00', 0x7f, 0x44, &(0x7f0000000200)=""/68, 0x41000, 0x20, '\x00', r5, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r0, r1, r1, 0x1, r1, r1, r1, r1], 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="dd27987eab8ff7a1a7c94849e919e742fcb6d6fd1345dffe079cc1bf30f1ac9a2aa9d50cefff5485b06166c2c7c322d02d9fb7d68bd171a3af96b49c323211a215943351ca4e4abcfc27eaff9e2e3a795d78020d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.094859494s ago: executing program 2 (id=15198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4056, &(0x7f00000003c0), 0x1, 0x466, &(0x7f0000000b00)="$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") 762.909808ms ago: executing program 4 (id=15199): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="c20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x5, 0x6, {{0x2d, 0x4, 0x2, 0x12, 0xb4, 0x68, 0x0, 0x1c, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x77, 0x3, 0x9, [{@remote, 0x7}, {@private=0xa010102, 0x81}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x954c}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010101, 0x1000}, {@multicast2, 0xffff7fff}, {@multicast2}]}, @rr={0x7, 0x1f, 0x2b, [@multicast1, @local, @multicast1, @remote, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp={0x44, 0xc, 0x8c, 0x0, 0xd, [0x3, 0x3]}, @cipso={0x86, 0x26, 0x0, [{0x7, 0x11, "f2d4b82fb35479dbf327bddec9f8b2"}, {0x0, 0x3, 'k'}, {0x0, 0xc, "33a10afb31fdf9120032"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) 762.186758ms ago: executing program 2 (id=15209): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x28, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19b28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, 0x10) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) close(r1) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$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") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000c40000000800"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x806, 0x800077, 0x20800000000412, 0x6, 0xfffffffffffffffd, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 335.410816ms ago: executing program 1 (id=15200): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000003b40)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002440)=[{&(0x7f0000001e80)="2c237499a7df3a204f9d1cdd9c41219a0ccac2cb7ccdd2990f1078be1ae0640c6e21a3fa89730905a0b7aae19ff5acd84ebc6e01c9cffc964b48cef169fb8abada83029ea313a1274d579d61d97511f4d73095bab2175b9ce3ceb95112f62f5aaf404ebf201084", 0x67}, {0x0}, {&(0x7f0000002040)="841d3e1e9288d5e19ab1b2d1e94f07367280264d69488b580cea65e5d99ca9897e1abd092c2eb7e42a71d07bcd52be6a11a89cafa2cf6fa05b180eb38eec27532339bc75219f606f9b9cf9fe416b6b8d65e94abe49718c320f7f808827ee2aca", 0x60}, {&(0x7f00000020c0)="206bc28de3c2603d753a39c61c", 0xd}, {&(0x7f0000002100)="f5112c321cecf489fbd49dd68e3c1f182245a6f0b51b5fb9b148917ed96acee2e1cf91f55a9bc8dd618d3bf1700f77cb3be0f98cf1534b8cd2e80a4377dbfc002e893e89f3152eed26f516b24070c0d4112abdf3faea557500173ae330f3a1202cddcaefc51f8f513b19d6af3222ae1ab6aaf09cb6df5d4619c20903c41d0a89acd67d9da85691093b961b2fe92ea78745360388ed34d5acedf1012831df45e0e072427326c4c6c1809cf1249882e94c1645a91fe0944088dcf8499f2a412fc0", 0xc0}, {0x0}, {&(0x7f00000022c0)}, {&(0x7f0000002380)="aeb932162eaf99608b07bcec9074d1be3e75222313bc49375ae73ba049f8dca9c8fbe19137826490b1b104ce470c0d1d2dccc24800539808f9640269f9949ee6a2883151d58fab118f880d73ad4a239be49722bb5ff8bc7036a3633364e8bce0c66f35d102cdfea621a1590d7bae9ce331d928d7f596a58602054f3eb0d7dfe5c91f472bf193c5086d9d8adb", 0x8c}], 0x8, &(0x7f0000002600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}, {{&(0x7f0000002c00)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000031c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000003a80)=[{0x0}, {&(0x7f00000036c0)="ee8cb8bbc2d7a5e4215a138d63c5a118468774cf707bc1b844a39ecd8e4e352f9091c5983fa76964310c811622b246a5f9af287c1b306ddd3be6b314b136b68c89bb896db50813a5ccf0b10c8258dc4c446dd931450291a2ad83012349f81183a50a4d99dec55476db9608e4755978ffe2b66cac81f129d6eeb311d69887a7f2919b013c4b9ff01a3a1a85a2903ad00ddf5e2b09b8e606a7444ef129319418b6d0429b49729521c82758192c6c6ce0d1e32cce35c0af", 0xb6}, {&(0x7f0000003780)="1819ea82c0fe4c973360fbadc7dafe2b1ca26bf30c784138ef654b01298466ee4f2edb3e6d152fe297a6d95374c27414a174b9117859452e60a969c7723086592d6a1335b7890d79d910da986f9cb34dc87f07c9046a85c01c16268b8b0be4e18599c7dc9d7a702b069184a7d9440ecffce481c169f7c51ce73efb6572927031d222421aa0854fc696c6a4620d1fa4f899b1", 0x92}, {0x0}, {&(0x7f0000003880)="28400af07d2c69bdf3ef5e1267d6726bddabbf54e2894472d806f93d677fbd17e12c24eebb47e7a0f48f2941c8daf153d978a2de5f6c04bf91ec17af180c2155a4652af63ef2f66e90d59b6ce9979324e95212218b256968b052eeecbc7b5e9d661b7175f9cf17243324dcd239d83621455bfaaccd387f74948f1098fbd4beb7c049713dde9cb90749247baac63812692755dca46e2fa948b3abf5a9e0c7782851749284dba5583f2142e8471d83dec9ea5b6bd69029615531b2009e3b14afe5d2bae949adb7aa9be160", 0xca}, {&(0x7f0000003980)}], 0x6, &(0x7f0000003b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}], 0x38}}, {{&(0x7f0000003bc0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000003d80)}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003f40)="b461f68028aad9b9567f6e22cc4ebc7b4edd495e", 0x14}, {&(0x7f0000003f80)="1f5567fbd4a29fd66407e796cced187c4f9ed50d39c65ddbc83e945ff3ab68a458b3bdbe9bb39a3d3654", 0x2a}, {&(0x7f0000003fc0)="bc87da8638a1f5ba28ef083b0367368bf30df1279093e99865bd26f8bcb1b735970f24dedc3344793ad6228895573ab3bdaefacaf91c97acd2cb3d72102e405d4963b08eeaa03269097e20a1cbf4892859e39ac562f7e5aacf49391f2edb15e5cefafa2c7767066e885391cc1d1c2cedaa8ce8abb72dc3366c13475f9790b0a71b9101495eeafb79950f421e0ce6531775a526bd59f3f346ef2644", 0x9b}, {&(0x7f0000004080)="69c92f590c1e1816519a7b6bfa2deb976f2a335a553c8c78b6ba447a5f41763a943e3cb77ca22a051a55da8d9c9e3864d792e2b00070d1a96d2373f58550ea7dc19d6cada5313de7bcec1845ec9f12f735d4800a6b61cfb6a06b52f350d5567aa9de1cab2bd38f99dd7d730339de066c864c6a7d386b80b350bdb964b3353b1ee9c599e775f9b10d9ed9c1faf1ddee5498addc0ff7d9195db960a2bd95a8dd9b", 0xa0}, {&(0x7f0000004140)="64aab5775b83cf32195899c81ea1c383fb4ed25801cef924afecb76d6312e5f1f1a59156d3681838ae593958a10175ad1a284d63263aad92a0e3d9730853e07391c981459648f8ef76d5d0263f9be1d0d044c1c36ef18ab52b7b1d3e260cdc4c9f9426e9cc3b571480c6e1d4d46fb318d9965177d2f4ca381b9d1ec2b1fe985c6ca95c8106ffbcf6484a0c5907b5263162dcf2eefa8a6cefa3ffb0614808beba281a57", 0xa3}], 0x5, &(0x7f0000004580)=[@ip_retopts={{0x38, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0x4d, [@local, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @ssrr={0x89, 0x7, 0x6d, [@loopback]}, @ssrr={0x89, 0xb, 0x13, [@local, @multicast1]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcef}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xa0}}], 0x7, 0x40091) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08860100223803003800128009000100766c616e000000002800028006000100110000001c0003800c00010000000000090000000c000100000000000800000008000500", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 175.893463ms ago: executing program 5 (id=15201): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000012c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x6d) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, 0x0, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x4a) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfba, 0x10000000, 0x0, 0x8}, 0x3, r8}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfffe) 90.355206ms ago: executing program 6 (id=15202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000ffff00000000000007020000f8ffffffb703000008000000b704000000000000850000001600008a95"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 0s ago: executing program 6 (id=15203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000100000000000000e7ffffff0000000000000000"], 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x584c7000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) kernel console output (not intermixed with test programs): 1.040869][T10382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.074821][ T29] audit: type=1400 audit(1764252757.977:133735): avc: denied { add_name } for pid=10381 comm="syz.5.14256" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.095984][ T29] audit: type=1400 audit(1764252757.977:133736): avc: denied { create } for pid=10381 comm="syz.5.14256" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 761.116675][ T29] audit: type=1400 audit(1764252757.977:133737): avc: denied { read write open } for pid=10381 comm="syz.5.14256" path="/502/file0/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 761.240320][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14263'. [ 761.298062][T10401] netlink: 'syz.6.14262': attribute type 2 has an invalid length. [ 761.685840][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.733470][ T29] audit: type=1400 audit(1764252758.217:133738): avc: denied { map } for pid=10381 comm="syz.5.14256" path="/502/file0/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 761.756544][ T29] audit: type=1326 audit(1764252758.607:133739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.757011][T10417] netlink: 'syz.1.14269': attribute type 1 has an invalid length. [ 761.780545][ T29] audit: type=1326 audit(1764252758.617:133740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.812194][ T29] audit: type=1326 audit(1764252758.617:133741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.835960][ T29] audit: type=1326 audit(1764252758.617:133742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.859678][ T29] audit: type=1326 audit(1764252758.617:133743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.883503][ T29] audit: type=1326 audit(1764252758.617:133744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.907355][ T29] audit: type=1326 audit(1764252758.617:133745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.931251][ T29] audit: type=1326 audit(1764252758.617:133746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 761.955043][ T29] audit: type=1326 audit(1764252758.617:133747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.4.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd519d7f749 code=0x7ffc0000 [ 762.014188][T10427] loop5: detected capacity change from 0 to 512 [ 762.020897][T10427] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 762.145806][T10432] lo speed is unknown, defaulting to 1000 [ 762.252124][T10445] FAULT_INJECTION: forcing a failure. [ 762.252124][T10445] name failslab, interval 1, probability 0, space 0, times 0 [ 762.264888][T10445] CPU: 0 UID: 0 PID: 10445 Comm: syz.5.14280 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 762.264918][T10445] Tainted: [W]=WARN [ 762.264923][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 762.264934][T10445] Call Trace: [ 762.264941][T10445] [ 762.264948][T10445] __dump_stack+0x1d/0x30 [ 762.264967][T10445] dump_stack_lvl+0xe8/0x140 [ 762.264995][T10445] dump_stack+0x15/0x1b [ 762.265027][T10445] should_fail_ex+0x265/0x280 [ 762.265047][T10445] should_failslab+0x8c/0xb0 [ 762.265122][T10445] __kmalloc_noprof+0xa5/0x570 [ 762.265220][T10445] ? security_prepare_creds+0x52/0x120 [ 762.265250][T10445] security_prepare_creds+0x52/0x120 [ 762.265349][T10445] prepare_creds+0x34a/0x4c0 [ 762.265400][T10445] copy_creds+0x8f/0x3f0 [ 762.265426][T10445] copy_process+0x658/0x2000 [ 762.265455][T10445] ? copy_clone_args_from_user+0x3ce/0x490 [ 762.265492][T10445] kernel_clone+0x16c/0x5c0 [ 762.265541][T10445] __se_sys_clone3+0x1c2/0x200 [ 762.265580][T10445] __x64_sys_clone3+0x31/0x40 [ 762.265608][T10445] x64_sys_call+0x1fc9/0x3000 [ 762.265705][T10445] do_syscall_64+0xd2/0x200 [ 762.265723][T10445] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 762.265780][T10445] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 762.265811][T10445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.265833][T10445] RIP: 0033:0x7fb15a39f749 [ 762.265848][T10445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.265939][T10445] RSP: 002b:00007fb158dfef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 762.265959][T10445] RAX: ffffffffffffffda RBX: 00000000000000a0 RCX: 00007fb15a39f749 [ 762.265972][T10445] RDX: 00007fb158dfef20 RSI: 00000000000000a0 RDI: 00007fb158dfef20 [ 762.266015][T10445] RBP: 00007fb158dff090 R08: 0000000000000000 R09: 00000000000000a0 [ 762.266028][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.266042][T10445] R13: 00007fb15a5f6038 R14: 00007fb15a5f5fa0 R15: 00007ffd26add228 [ 762.266062][T10445] [ 762.487802][T10432] wg1 speed is unknown, defaulting to 1000 [ 762.586889][T10449] siw: device registration error -23 [ 763.416803][T10459] lo speed is unknown, defaulting to 1000 [ 763.470937][T10459] wg1 speed is unknown, defaulting to 1000 [ 763.749788][T10471] __nla_validate_parse: 8 callbacks suppressed [ 763.749823][T10471] netlink: 332 bytes leftover after parsing attributes in process `syz.1.14290'. [ 763.848767][T10485] netlink: 'syz.6.14297': attribute type 10 has an invalid length. [ 763.856713][T10485] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14297'. [ 763.870042][T10492] netlink: 'syz.4.14299': attribute type 1 has an invalid length. [ 763.877875][T10492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14299'. [ 763.931628][T10503] siw: device registration error -23 [ 763.947705][T10505] netlink: 'syz.1.14304': attribute type 1 has an invalid length. [ 763.955655][T10505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14304'. [ 764.076670][T10514] lo speed is unknown, defaulting to 1000 [ 764.103023][T10519] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14309'. [ 764.135589][T10514] wg1 speed is unknown, defaulting to 1000 [ 764.254486][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14310'. [ 764.282129][T10532] siw: device registration error -23 [ 764.467518][T10544] netlink: 'syz.6.14318': attribute type 10 has an invalid length. [ 764.499444][T10544] team0: Port device dummy0 added [ 764.543955][T10535] lo speed is unknown, defaulting to 1000 [ 764.578671][T10535] wg1 speed is unknown, defaulting to 1000 [ 764.588856][T10545] lo speed is unknown, defaulting to 1000 [ 764.596427][T10545] lo speed is unknown, defaulting to 1000 [ 764.604328][T10545] lo speed is unknown, defaulting to 1000 [ 764.613006][T10545] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 764.635948][T10545] lo speed is unknown, defaulting to 1000 [ 764.642163][T10545] lo speed is unknown, defaulting to 1000 [ 764.651052][T10545] lo speed is unknown, defaulting to 1000 [ 764.657358][T10545] lo speed is unknown, defaulting to 1000 [ 764.677255][T10545] lo speed is unknown, defaulting to 1000 [ 764.684067][T10545] lo speed is unknown, defaulting to 1000 [ 764.691026][T10545] lo speed is unknown, defaulting to 1000 [ 764.697308][T10545] lo speed is unknown, defaulting to 1000 [ 764.703462][T10545] lo speed is unknown, defaulting to 1000 [ 764.709794][T10545] lo speed is unknown, defaulting to 1000 [ 764.799807][T10562] netlink: 332 bytes leftover after parsing attributes in process `syz.4.14323'. [ 764.841906][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14324'. [ 764.850893][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14324'. [ 765.148547][T10586] loop5: detected capacity change from 0 to 128 [ 765.185834][T10578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14329'. [ 765.234931][T10586] loop5: detected capacity change from 0 to 256 [ 765.316036][T10591] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 765.324405][T10591] tipc: Enabled bearer , priority 10 [ 765.386510][T10593] veth2: entered promiscuous mode [ 765.391657][T10593] veth2: entered allmulticast mode [ 765.415352][T10595] siw: device registration error -23 [ 765.915482][T10601] lo speed is unknown, defaulting to 1000 [ 765.944445][T10601] wg1 speed is unknown, defaulting to 1000 [ 765.950638][T10601] lo speed is unknown, defaulting to 1000 [ 766.023712][T10611] netlink: 'syz.4.14339': attribute type 10 has an invalid length. [ 766.084204][T10613] 9pnet_fd: Insufficient options for proto=fd [ 766.145829][T10617] siw: device registration error -23 [ 766.327779][T10630] tipc: Enabling of bearer rejected, failed to enable media [ 766.340576][T10631] loop5: detected capacity change from 0 to 128 [ 766.347578][T10631] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.376245][T10631] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 766.422868][T10631] program syz.5.14344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.491891][T10635] lo speed is unknown, defaulting to 1000 [ 766.530551][T10641] 9pnet_fd: Insufficient options for proto=fd [ 766.562750][T10631] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 766.571349][T10631] FAT-fs (loop5): Filesystem has been set read-only [ 766.581736][T10635] wg1 speed is unknown, defaulting to 1000 [ 766.600127][T10635] lo speed is unknown, defaulting to 1000 [ 766.676514][T10650] siw: device registration error -23 [ 767.043837][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 767.043849][ T29] audit: type=1326 audit(1764252763.947:133981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.14353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b8a0f749 code=0x7ffc0000 [ 767.073936][ T29] audit: type=1326 audit(1764252763.947:133982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.14353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b8a0f749 code=0x7ffc0000 [ 767.098577][ T29] audit: type=1326 audit(1764252763.997:133983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.14353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f36b8a0f749 code=0x7ffc0000 [ 767.122463][ T29] audit: type=1326 audit(1764252763.997:133984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.14353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b8a0f749 code=0x7ffc0000 [ 767.146366][ T29] audit: type=1326 audit(1764252763.997:133985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.14353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b8a0f749 code=0x7ffc0000 [ 767.174150][ T29] audit: type=1400 audit(1764252764.077:133986): avc: denied { create } for pid=10657 comm="syz.4.14356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.193938][ T29] audit: type=1400 audit(1764252764.077:133987): avc: denied { setopt } for pid=10657 comm="syz.4.14356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.214055][ T29] audit: type=1400 audit(1764252764.077:133988): avc: denied { connect } for pid=10657 comm="syz.4.14356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.233964][ T29] audit: type=1400 audit(1764252764.127:133989): avc: denied { unmount } for pid=2841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 767.310609][T10662] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 767.448034][ T29] audit: type=1326 audit(1764252764.347:133990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.5.14357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 767.571627][T10671] loop5: detected capacity change from 0 to 512 [ 767.582042][T10671] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14359: inode has both inline data and extents flags [ 767.588737][T10674] 9pnet_fd: Insufficient options for proto=fd [ 767.595567][T10671] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14359: couldn't read orphan inode 15 (err -117) [ 767.613839][T10671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.792370][T10682] netlink: 'syz.1.14364': attribute type 10 has an invalid length. [ 767.819107][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.906658][T10680] FAULT_INJECTION: forcing a failure. [ 767.906658][T10680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.919756][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.6.14363 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 767.919822][T10680] Tainted: [W]=WARN [ 767.919829][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 767.919841][T10680] Call Trace: [ 767.919849][T10680] [ 767.919857][T10680] __dump_stack+0x1d/0x30 [ 767.919881][T10680] dump_stack_lvl+0xe8/0x140 [ 767.919934][T10680] dump_stack+0x15/0x1b [ 767.919950][T10680] should_fail_ex+0x265/0x280 [ 767.919967][T10680] should_fail+0xb/0x20 [ 767.920017][T10680] should_fail_usercopy+0x1a/0x20 [ 767.920096][T10680] _copy_to_user+0x20/0xa0 [ 767.920131][T10680] simple_read_from_buffer+0xb5/0x130 [ 767.920156][T10680] proc_fail_nth_read+0x10e/0x150 [ 767.920293][T10680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.920317][T10680] vfs_read+0x1a8/0x770 [ 767.920375][T10680] ? __rcu_read_unlock+0x4f/0x70 [ 767.920402][T10680] ? __fget_files+0x184/0x1c0 [ 767.920430][T10680] ksys_read+0xda/0x1a0 [ 767.920451][T10680] __x64_sys_read+0x40/0x50 [ 767.920473][T10680] x64_sys_call+0x27c0/0x3000 [ 767.920511][T10680] do_syscall_64+0xd2/0x200 [ 767.920529][T10680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 767.920551][T10680] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 767.920582][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.920663][T10680] RIP: 0033:0x7f3f704be15c [ 767.920688][T10680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 767.920705][T10680] RSP: 002b:00007f3f6ef1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.920726][T10680] RAX: ffffffffffffffda RBX: 00007f3f70715fa0 RCX: 00007f3f704be15c [ 767.920765][T10680] RDX: 000000000000000f RSI: 00007f3f6ef1f0a0 RDI: 0000000000000008 [ 767.920776][T10680] RBP: 00007f3f6ef1f090 R08: 0000000000000000 R09: 0000000000000000 [ 767.920786][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.920854][T10680] R13: 00007f3f70716038 R14: 00007f3f70715fa0 R15: 00007ffd73a86d98 [ 767.920874][T10680] [ 768.153817][T10687] siw: device registration error -23 [ 768.282405][T10693] FAULT_INJECTION: forcing a failure. [ 768.282405][T10693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.295644][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.4.14369 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 768.295676][T10693] Tainted: [W]=WARN [ 768.295691][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 768.295704][T10693] Call Trace: [ 768.295710][T10693] [ 768.295718][T10693] __dump_stack+0x1d/0x30 [ 768.295740][T10693] dump_stack_lvl+0xe8/0x140 [ 768.295767][T10693] dump_stack+0x15/0x1b [ 768.295784][T10693] should_fail_ex+0x265/0x280 [ 768.295804][T10693] should_fail+0xb/0x20 [ 768.295820][T10693] should_fail_usercopy+0x1a/0x20 [ 768.295837][T10693] strncpy_from_user+0x25/0x230 [ 768.295912][T10693] ? kmem_cache_alloc_noprof+0x242/0x480 [ 768.296005][T10693] ? getname_flags+0x80/0x3b0 [ 768.296030][T10693] getname_flags+0xae/0x3b0 [ 768.296057][T10693] getname_uflags+0x21/0x30 [ 768.296164][T10693] __x64_sys_execveat+0x5d/0x90 [ 768.296235][T10693] x64_sys_call+0x1fec/0x3000 [ 768.296256][T10693] do_syscall_64+0xd2/0x200 [ 768.296277][T10693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 768.296348][T10693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 768.296373][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.296402][T10693] RIP: 0033:0x7fd519d7f749 [ 768.296418][T10693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.296490][T10693] RSP: 002b:00007fd5187df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 768.296507][T10693] RAX: ffffffffffffffda RBX: 00007fd519fd5fa0 RCX: 00007fd519d7f749 [ 768.296518][T10693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 768.296531][T10693] RBP: 00007fd5187df090 R08: 0000000000001000 R09: 0000000000000000 [ 768.296544][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.296557][T10693] R13: 00007fd519fd6038 R14: 00007fd519fd5fa0 R15: 00007ffd97b578f8 [ 768.296576][T10693] [ 768.539576][T10684] loop5: detected capacity change from 0 to 512 [ 768.547784][T10684] EXT4-fs: Ignoring removed oldalloc option [ 768.573911][T10696] siw: device registration error -23 [ 768.615062][T10684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.628051][T10684] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.717264][T10704] ip6erspan0: entered promiscuous mode [ 768.834639][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811861aa00: rx timeout, send abort [ 768.859014][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.995620][T10714] SELinux: ebitmap: truncated map [ 769.021417][T10714] SELinux: failed to load policy [ 769.094882][T10721] __nla_validate_parse: 14 callbacks suppressed [ 769.094897][T10721] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14375'. [ 769.194133][T10722] lo speed is unknown, defaulting to 1000 [ 769.244318][T10722] wg1 speed is unknown, defaulting to 1000 [ 769.250733][T10722] lo speed is unknown, defaulting to 1000 [ 769.334672][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811861a000: rx timeout, send abort [ 769.345315][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811861aa00: abort rx timeout. Force session deactivation [ 769.515037][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14379'. [ 769.524036][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14379'. [ 769.581678][T10732] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 769.697159][T10736] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14383'. [ 769.780657][T10751] xt_hashlimit: max too large, truncated to 1048576 [ 769.788044][T10751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 769.797338][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14389'. [ 769.806898][T10751] hsr_slave_0: left promiscuous mode [ 769.813080][T10751] hsr_slave_1: left promiscuous mode [ 769.827353][T10755] siw: device registration error -23 [ 769.842900][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811861a000: abort rx timeout. Force session deactivation [ 769.889747][T10762] tipc: Enabling of bearer rejected, failed to enable media [ 769.900601][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14394'. [ 769.938941][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14396'. [ 769.947907][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14396'. [ 770.005210][T10779] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 770.042065][T10783] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14403'. [ 770.083558][T10790] program syz.4.14402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.101405][T10792] netlink: 184 bytes leftover after parsing attributes in process `syz.1.14405'. [ 770.297805][T10808] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 771.001362][T10836] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 771.229833][T10856] ip6erspan0: entered promiscuous mode [ 771.301551][T10865] program syz.5.14433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.305285][T10864] ip6erspan0: entered promiscuous mode [ 771.368385][T10872] loop5: detected capacity change from 0 to 512 [ 771.402100][T10872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.418617][T10872] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.098457][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.189639][T10894] batman_adv: batadv0: Adding interface: dummy0 [ 772.195926][T10894] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.224742][T10894] batman_adv: batadv0: Interface activated: dummy0 [ 772.235955][T10908] netlink: 'syz.2.14451': attribute type 10 has an invalid length. [ 772.439808][T10931] ip6erspan0: entered promiscuous mode [ 772.561419][T10950] program syz.4.14461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 773.526223][T10991] FAULT_INJECTION: forcing a failure. [ 773.526223][T10991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.539397][T10991] CPU: 1 UID: 0 PID: 10991 Comm: syz.4.14471 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 773.539429][T10991] Tainted: [W]=WARN [ 773.539437][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 773.539449][T10991] Call Trace: [ 773.539456][T10991] [ 773.539465][T10991] __dump_stack+0x1d/0x30 [ 773.539562][T10991] dump_stack_lvl+0xe8/0x140 [ 773.539580][T10991] dump_stack+0x15/0x1b [ 773.539648][T10991] should_fail_ex+0x265/0x280 [ 773.539669][T10991] should_fail+0xb/0x20 [ 773.539686][T10991] should_fail_usercopy+0x1a/0x20 [ 773.539707][T10991] strncpy_from_user+0x25/0x230 [ 773.539757][T10991] ? kmem_cache_alloc_noprof+0x242/0x480 [ 773.539916][T10991] ? getname_flags+0x80/0x3b0 [ 773.539944][T10991] getname_flags+0xae/0x3b0 [ 773.539973][T10991] getname_uflags+0x21/0x30 [ 773.540011][T10991] __x64_sys_execveat+0x5d/0x90 [ 773.540089][T10991] x64_sys_call+0x1fec/0x3000 [ 773.540110][T10991] do_syscall_64+0xd2/0x200 [ 773.540132][T10991] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 773.540170][T10991] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 773.540198][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.540216][T10991] RIP: 0033:0x7fd519d7f749 [ 773.540229][T10991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.540247][T10991] RSP: 002b:00007fd5187df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 773.540264][T10991] RAX: ffffffffffffffda RBX: 00007fd519fd5fa0 RCX: 00007fd519d7f749 [ 773.540278][T10991] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 773.540292][T10991] RBP: 00007fd5187df090 R08: 0000000000001000 R09: 0000000000000000 [ 773.540303][T10991] R10: 0000200000004780 R11: 0000000000000246 R12: 0000000000000001 [ 773.540356][T10991] R13: 00007fd519fd6038 R14: 00007fd519fd5fa0 R15: 00007ffd97b578f8 [ 773.540377][T10991] [ 773.765575][T10989] netlink: 'syz.5.14470': attribute type 1 has an invalid length. [ 773.878179][T11006] netlink: 'syz.5.14477': attribute type 10 has an invalid length. [ 773.961501][T11023] program syz.4.14479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 773.996133][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 773.996147][ T29] audit: type=1326 audit(1764252770.897:134335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.026516][ T29] audit: type=1326 audit(1764252770.907:134336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.050455][ T29] audit: type=1326 audit(1764252770.907:134337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.074244][ T29] audit: type=1326 audit(1764252770.907:134338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.098028][ T29] audit: type=1326 audit(1764252770.907:134339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.121824][ T29] audit: type=1326 audit(1764252770.907:134340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.145617][ T29] audit: type=1326 audit(1764252770.907:134341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.167985][T11039] netlink: 'syz.1.14488': attribute type 1 has an invalid length. [ 774.169404][ T29] audit: type=1326 audit(1764252770.907:134342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.177132][T11039] __nla_validate_parse: 17 callbacks suppressed [ 774.177144][T11039] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14488'. [ 774.200854][ T29] audit: type=1326 audit(1764252770.907:134343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.200882][ T29] audit: type=1326 audit(1764252770.907:134344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.5.14486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 774.348792][T11047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14492'. [ 774.560056][T11080] tipc: Enabling of bearer rejected, failed to enable media [ 774.591827][T11081] program syz.1.14501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.055717][T11061] lo speed is unknown, defaulting to 1000 [ 775.095169][T11083] lo speed is unknown, defaulting to 1000 [ 775.128151][T11083] wg1 speed is unknown, defaulting to 1000 [ 775.134444][T11083] lo speed is unknown, defaulting to 1000 [ 775.161039][T11061] wg1 speed is unknown, defaulting to 1000 [ 775.167223][T11061] lo speed is unknown, defaulting to 1000 [ 775.311254][ T8689] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.344128][T11061] chnl_net:caif_netlink_parms(): no params data found [ 775.410946][ T8689] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.456984][T11114] loop5: detected capacity change from 0 to 512 [ 775.478060][T11114] EXT4-fs (loop5): 1 orphan inode deleted [ 775.485168][T11114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.506611][ T8689] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.532462][T11061] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.537610][T11114] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.539574][T11061] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.557192][T11061] bridge_slave_0: entered allmulticast mode [ 775.564026][T11061] bridge_slave_0: entered promiscuous mode [ 775.570780][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.571122][T11061] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.586784][T11061] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.594193][T11061] bridge_slave_1: entered allmulticast mode [ 775.600843][T11061] bridge_slave_1: entered promiscuous mode [ 775.616191][T11130] ip6erspan0: entered promiscuous mode [ 775.636639][ T8689] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.672425][T11061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.685070][T11061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.710702][T11061] team0: Port device team_slave_0 added [ 775.718915][T11061] team0: Port device team_slave_1 added [ 775.741933][T11061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.748976][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.775015][T11061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.956241][T11061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.963368][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.989410][T11061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.512434][ T8689] bond0 (unregistering): Released all slaves [ 776.528333][ T8689] bond1 (unregistering): Released all slaves [ 776.537597][ T8689] bond2 (unregistering): Released all slaves [ 776.546835][ T8689] bond3 (unregistering): Released all slaves [ 776.556169][ T8689] bond4 (unregistering): Released all slaves [ 776.568594][ T8689] bond5 (unregistering): Released all slaves [ 776.577141][ T8689] bond6 (unregistering): Released all slaves [ 776.624602][T11061] hsr_slave_0: entered promiscuous mode [ 776.633564][ T8686] Bluetooth: hci0: Frame reassembly failed (-84) [ 776.635276][T11061] hsr_slave_1: entered promiscuous mode [ 776.646054][T11061] debugfs: 'hsr0' already exists in 'hsr' [ 776.651862][T11061] Cannot create hsr debugfs directory [ 776.657305][T11182] ALSA: seq fatal error: cannot create timer (-19) [ 776.666610][ T8689] tipc: Left network mode [ 776.690938][T11192] netlink: 184 bytes leftover after parsing attributes in process `syz.1.14536'. [ 776.712337][T11193] 9pnet_fd: Insufficient options for proto=fd [ 776.721535][T11197] FAULT_INJECTION: forcing a failure. [ 776.721535][T11197] name failslab, interval 1, probability 0, space 0, times 0 [ 776.734241][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.1.14538 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 776.734272][T11197] Tainted: [W]=WARN [ 776.734342][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 776.734355][T11197] Call Trace: [ 776.734361][T11197] [ 776.734370][T11197] __dump_stack+0x1d/0x30 [ 776.734391][T11197] dump_stack_lvl+0xe8/0x140 [ 776.734489][T11197] dump_stack+0x15/0x1b [ 776.734516][T11197] should_fail_ex+0x265/0x280 [ 776.734532][T11197] should_failslab+0x8c/0xb0 [ 776.734558][T11197] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 776.734645][T11197] ? sidtab_sid2str_get+0xa0/0x130 [ 776.734712][T11197] kmemdup_noprof+0x2b/0x70 [ 776.734734][T11197] sidtab_sid2str_get+0xa0/0x130 [ 776.734762][T11197] security_sid_to_context_core+0x1eb/0x2e0 [ 776.734842][T11197] security_sid_to_context+0x27/0x40 [ 776.734865][T11197] selinux_lsmprop_to_secctx+0x67/0xf0 [ 776.734890][T11197] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 776.734949][T11197] audit_log_subj_ctx+0xa4/0x3e0 [ 776.734971][T11197] ? skb_put+0xa9/0xf0 [ 776.734998][T11197] audit_log_task_context+0x48/0x70 [ 776.735016][T11197] audit_log_task+0xf4/0x250 [ 776.735111][T11197] audit_seccomp+0x61/0x100 [ 776.735153][T11197] ? __seccomp_filter+0x82d/0x1250 [ 776.735174][T11197] __seccomp_filter+0x83e/0x1250 [ 776.735199][T11197] ? rep_movs_alternative+0x4c/0x90 [ 776.735285][T11197] ? _copy_from_user+0x3b/0xb0 [ 776.735320][T11197] ? __se_sys_msgctl+0x22a/0x290 [ 776.735344][T11197] ? __fget_files+0x184/0x1c0 [ 776.735381][T11197] __secure_computing+0x82/0x150 [ 776.735407][T11197] syscall_trace_enter+0xcf/0x1e0 [ 776.735434][T11197] do_syscall_64+0xac/0x200 [ 776.735454][T11197] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 776.735548][T11197] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 776.735621][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.735643][T11197] RIP: 0033:0x7f6ac6e9e15c [ 776.735658][T11197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 776.735672][T11197] RSP: 002b:00007f6ac58ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 776.735689][T11197] RAX: ffffffffffffffda RBX: 00007f6ac70f5fa0 RCX: 00007f6ac6e9e15c [ 776.735752][T11197] RDX: 000000000000000f RSI: 00007f6ac58ff0a0 RDI: 0000000000000008 [ 776.735768][T11197] RBP: 00007f6ac58ff090 R08: 0000000000000000 R09: 0000000000000000 [ 776.735827][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.735885][T11197] R13: 00007f6ac70f6038 R14: 00007f6ac70f5fa0 R15: 00007fff9e2eac08 [ 776.735901][T11197] [ 777.020009][ T8689] hsr_slave_0: left promiscuous mode [ 777.028397][ T8689] hsr_slave_1: left promiscuous mode [ 777.034233][ T8689] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 777.041617][ T8689] batman_adv: batadv0: Removing interface: veth1_vlan [ 777.098551][ T8689] veth1_macvtap: left promiscuous mode [ 777.106023][T11214] netlink: 'syz.5.14541': attribute type 10 has an invalid length. [ 777.114103][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14541'. [ 777.117291][ T8689] veth0_macvtap: left promiscuous mode [ 777.132105][ T8689] veth1_vlan: left promiscuous mode [ 777.138005][ T8689] veth0_vlan: left promiscuous mode [ 777.256575][ T8689] team0 (unregistering): Port device dummy0 removed [ 777.843510][T11061] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 777.861934][T11061] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 777.873319][T11262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14549'. [ 777.904921][T11061] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 777.914488][T11061] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 777.954797][T11061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.969625][T11061] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.983089][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.990159][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.007947][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.015083][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.092863][T11061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.211477][T11334] 9pnet_fd: Insufficient options for proto=fd [ 778.229203][T11061] veth0_vlan: entered promiscuous mode [ 778.241849][T11061] veth1_vlan: entered promiscuous mode [ 778.261461][T11061] veth0_macvtap: entered promiscuous mode [ 778.273809][T11341] FAULT_INJECTION: forcing a failure. [ 778.273809][T11341] name failslab, interval 1, probability 0, space 0, times 0 [ 778.281018][T11061] veth1_macvtap: entered promiscuous mode [ 778.286628][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.1.14553 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 778.286738][T11341] Tainted: [W]=WARN [ 778.286744][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 778.286756][T11341] Call Trace: [ 778.286762][T11341] [ 778.286769][T11341] __dump_stack+0x1d/0x30 [ 778.286795][T11341] dump_stack_lvl+0xe8/0x140 [ 778.286842][T11341] dump_stack+0x15/0x1b [ 778.286876][T11341] should_fail_ex+0x265/0x280 [ 778.286902][T11341] ? tcp_sendmsg_fastopen+0x172/0x520 [ 778.286928][T11341] should_failslab+0x8c/0xb0 [ 778.286955][T11341] __kmalloc_cache_noprof+0x4c/0x4a0 [ 778.287045][T11341] tcp_sendmsg_fastopen+0x172/0x520 [ 778.287073][T11341] tcp_sendmsg_locked+0x26e1/0x2c00 [ 778.287106][T11341] ? trace_buffer_unlock_commit_regs+0x111/0x310 [ 778.287192][T11341] ? __rcu_read_unlock+0x4f/0x70 [ 778.287216][T11341] ? avc_has_perm_noaudit+0x1b1/0x200 [ 778.287252][T11341] ? avc_has_perm+0xf7/0x180 [ 778.287293][T11341] ? _raw_spin_unlock_bh+0x36/0x40 [ 778.287320][T11341] ? __pfx_tcp_sendmsg+0x10/0x10 [ 778.287344][T11341] tcp_sendmsg+0x2f/0x50 [ 778.287509][T11341] inet6_sendmsg+0x76/0xd0 [ 778.287535][T11341] __sock_sendmsg+0x8b/0x180 [ 778.287558][T11341] __sys_sendto+0x268/0x330 [ 778.287600][T11341] __x64_sys_sendto+0x76/0x90 [ 778.287626][T11341] x64_sys_call+0x2d14/0x3000 [ 778.287647][T11341] do_syscall_64+0xd2/0x200 [ 778.287666][T11341] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 778.287738][T11341] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 778.287787][T11341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.287807][T11341] RIP: 0033:0x7f6ac6e9f749 [ 778.287823][T11341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.287897][T11341] RSP: 002b:00007f6ac58ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 778.287916][T11341] RAX: ffffffffffffffda RBX: 00007f6ac70f5fa0 RCX: 00007f6ac6e9f749 [ 778.287930][T11341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 778.287942][T11341] RBP: 00007f6ac58ff090 R08: 0000200000b63fe4 R09: 000000000000001c [ 778.287954][T11341] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 778.287966][T11341] R13: 00007f6ac70f6038 R14: 00007f6ac70f5fa0 R15: 00007fff9e2eac08 [ 778.287985][T11341] [ 778.439715][T11345] netlink: 'syz.1.14555': attribute type 10 has an invalid length. [ 778.449700][T11061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.451817][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14555'. [ 778.558091][T11061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.573667][ T8703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.583116][ T8703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.596120][ T8703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.606264][ T8703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.619808][T11351] netlink: 'syz.5.14556': attribute type 1 has an invalid length. [ 778.627629][T11351] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14556'. [ 778.665686][T11361] netlink: 344 bytes leftover after parsing attributes in process `syz.6.14491'. [ 778.678352][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 778.682861][ T2190] Bluetooth: hci0: command 0x1003 tx timeout [ 778.689654][ T8703] Bluetooth: hci1: Frame reassembly failed (-84) [ 778.699476][T11358] ALSA: seq fatal error: cannot create timer (-19) [ 778.754919][T11373] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14564'. [ 778.754927][T11374] netlink: 'syz.5.14563': attribute type 1 has an invalid length. [ 778.754940][T11374] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14563'. [ 778.907079][T11394] serio: Serial port ttyS3 [ 779.019626][T11395] lo speed is unknown, defaulting to 1000 [ 779.046715][T11395] wg1 speed is unknown, defaulting to 1000 [ 779.052948][T11395] lo speed is unknown, defaulting to 1000 [ 779.252610][T11404] loop5: detected capacity change from 0 to 512 [ 779.270921][T11404] EXT4-fs (loop5): 1 orphan inode deleted [ 779.277562][T11404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.289735][T11404] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.308866][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.326867][T11409] siw: device registration error -23 [ 779.661809][T11414] netlink: 'syz.6.14577': attribute type 1 has an invalid length. [ 779.669707][T11414] __nla_validate_parse: 2 callbacks suppressed [ 779.669721][T11414] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14577'. [ 779.743626][T11424] program syz.4.14578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.749677][T11425] tipc: Enabling of bearer rejected, failed to enable media [ 779.812283][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 779.812360][ T29] audit: type=1326 audit(1764252776.717:134525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.842997][ T29] audit: type=1326 audit(1764252776.717:134526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.867183][ T29] audit: type=1326 audit(1764252776.717:134527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.891184][ T29] audit: type=1326 audit(1764252776.717:134528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.915113][ T29] audit: type=1326 audit(1764252776.717:134529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.938962][ T29] audit: type=1326 audit(1764252776.717:134530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.962834][ T29] audit: type=1326 audit(1764252776.717:134531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 779.986623][ T29] audit: type=1326 audit(1764252776.717:134532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 780.010310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3b6600: rx timeout, send abort [ 780.018523][ T29] audit: type=1326 audit(1764252776.717:134533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 780.042337][ T29] audit: type=1326 audit(1764252776.717:134534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.14584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 780.487810][T11440] loop5: detected capacity change from 0 to 128 [ 780.498879][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881152cb200: rx timeout, send abort [ 780.510355][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3b6600: abort rx timeout. Force session deactivation [ 780.521654][T11440] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 780.567574][T11440] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 780.577741][T11444] tipc: Enabling of bearer rejected, failed to enable media [ 780.600338][T11440] program syz.5.14586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.698799][T11455] SELinux: ebitmap: truncated map [ 780.708528][T11455] SELinux: failed to load policy [ 780.758251][ T4249] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 780.759858][ T3537] Bluetooth: hci1: command 0x1003 tx timeout [ 780.838402][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14598'. [ 780.914396][T11475] program syz.6.14595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.970020][T11440] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 780.978652][T11440] FAT-fs (loop5): Filesystem has been set read-only [ 781.007086][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881152cb200: abort rx timeout. Force session deactivation [ 781.104159][T11471] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14597'. [ 781.472173][T11488] loop5: detected capacity change from 0 to 512 [ 781.490128][T11488] EXT4-fs (loop5): 1 orphan inode deleted [ 781.496194][T11488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.508697][T11488] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.530697][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.566902][T11493] loop5: detected capacity change from 0 to 1024 [ 781.584038][T11493] EXT4-fs: Ignoring removed orlov option [ 781.594038][T11493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.680690][T11500] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14606'. [ 781.765168][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14609'. [ 781.811404][T11506] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14608'. [ 782.452675][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.493802][T11528] loop5: detected capacity change from 0 to 512 [ 782.503110][T11528] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 782.520746][T11528] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14615: inode has both inline data and extents flags [ 782.534655][T11528] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14615: couldn't read orphan inode 15 (err -117) [ 782.547372][T11528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.560446][T11528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.726038][T11542] SELinux: ebitmap: truncated map [ 782.738131][T11542] SELinux: failed to load policy [ 782.761108][T11545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14620'. [ 782.902316][T11547] lo speed is unknown, defaulting to 1000 [ 782.953863][T11547] wg1 speed is unknown, defaulting to 1000 [ 782.960322][T11547] lo speed is unknown, defaulting to 1000 [ 783.331366][T11556] netlink: 332 bytes leftover after parsing attributes in process `syz.5.14625'. [ 783.615070][T11563] tipc: Enabling of bearer rejected, already enabled [ 783.718979][T11567] serio: Serial port ttyS3 [ 783.851258][T11569] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14629'. [ 783.925121][T11569] hsr_slave_0: left promiscuous mode [ 783.963561][T11569] hsr_slave_1: left promiscuous mode [ 785.305104][T11606] lo speed is unknown, defaulting to 1000 [ 785.377462][T11606] wg1 speed is unknown, defaulting to 1000 [ 785.384366][T11606] lo speed is unknown, defaulting to 1000 [ 785.847235][ T8703] Bluetooth: hci0: Frame reassembly failed (-84) [ 785.904799][T11620] ALSA: seq fatal error: cannot create timer (-19) [ 785.997182][T11625] lo speed is unknown, defaulting to 1000 [ 786.068468][T11625] wg1 speed is unknown, defaulting to 1000 [ 786.075394][T11625] lo speed is unknown, defaulting to 1000 [ 787.212434][T11646] loop5: detected capacity change from 0 to 1024 [ 787.228640][T11646] EXT4-fs: inline encryption not supported [ 787.234489][T11646] EXT4-fs: Ignoring removed i_version option [ 787.240825][T11648] tipc: Enabling of bearer rejected, failed to enable media [ 787.263837][T11646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.284042][T11646] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 787.303960][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 787.304039][ T29] audit: type=1400 audit(1764252784.187:134720): avc: denied { read write } for pid=11645 comm="syz.5.14650" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 787.333535][ T29] audit: type=1400 audit(1764252784.187:134721): avc: denied { open } for pid=11645 comm="syz.5.14650" path="/581/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 787.357037][ T29] audit: type=1400 audit(1764252784.207:134722): avc: denied { ioctl } for pid=11645 comm="syz.5.14650" path="/581/file1/file1" dev="loop5" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 787.409055][T11646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14650'. [ 787.429937][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.461971][T11654] tipc: Enabling of bearer rejected, already enabled [ 787.476419][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a1e00: rx timeout, send abort [ 787.711336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a1400: rx timeout, send abort [ 787.804438][T11658] netlink: 332 bytes leftover after parsing attributes in process `syz.2.14654'. [ 787.878227][ T4249] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 787.878260][ T3537] Bluetooth: hci0: command 0x1003 tx timeout [ 787.917019][T11674] netlink: 332 bytes leftover after parsing attributes in process `syz.4.14661'. [ 787.937169][T11669] lo speed is unknown, defaulting to 1000 [ 787.976436][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a1000: rx timeout, send abort [ 787.983447][T11669] wg1 speed is unknown, defaulting to 1000 [ 787.988220][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a1e00: abort rx timeout. Force session deactivation [ 787.991215][T11669] lo speed is unknown, defaulting to 1000 [ 788.138873][T11681] ip6erspan0: entered promiscuous mode [ 788.211345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a0000: rx timeout, send abort [ 788.228234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a1400: abort rx timeout. Force session deactivation [ 788.379494][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14663'. [ 788.466104][T11689] loop5: detected capacity change from 0 to 128 [ 788.484706][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a1000: abort rx timeout. Force session deactivation [ 788.518422][T11689] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 788.719586][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3a0000: abort rx timeout. Force session deactivation [ 788.856152][T11694] SELinux: ebitmap: truncated map [ 788.902346][T11689] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 788.933423][T11694] SELinux: failed to load policy [ 788.997046][T11689] program syz.5.14664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.049912][T11710] program syz.6.14672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.059102][T11696] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11696 comm=syz.2.14666 [ 789.369319][ T8703] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.470440][ T8703] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.586958][T11729] lo speed is unknown, defaulting to 1000 [ 789.640695][ T8703] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.722205][T11729] wg1 speed is unknown, defaulting to 1000 [ 789.733699][T11740] SELinux: ebitmap: truncated map [ 789.745488][T11740] SELinux: failed to load policy [ 789.756129][T11729] lo speed is unknown, defaulting to 1000 [ 789.770077][T11689] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 789.772435][ T8703] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.778734][T11689] FAT-fs (loop5): Filesystem has been set read-only [ 789.876408][T11724] lo speed is unknown, defaulting to 1000 [ 790.030747][ T8703] bond0 (unregistering): Released all slaves [ 790.041240][ T8703] bond1 (unregistering): Released all slaves [ 790.050286][ T8703] bond2 (unregistering): Released all slaves [ 790.066281][ T8703] bond3 (unregistering): Released all slaves [ 790.076025][ T8703] bond4 (unregistering): Released all slaves [ 790.083877][T11724] wg1 speed is unknown, defaulting to 1000 [ 790.092704][T11757] SELinux: policydb magic number 0x77359400 does not match expected magic number 0xf97cff8c [ 790.103082][T11757] SELinux: failed to load policy [ 790.121001][T11724] lo speed is unknown, defaulting to 1000 [ 790.127128][ T8703] tipc: Left network mode [ 790.221993][ T8703] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 790.229338][ T8703] batman_adv: batadv0: Removing interface: veth1_vlan [ 790.237419][ T8703] batman_adv: batadv0: Interface deactivated: dummy0 [ 790.244404][ T8703] batman_adv: batadv0: Removing interface: dummy0 [ 790.253681][T11775] netlink: 'syz.1.14683': attribute type 10 has an invalid length. [ 790.253765][ T8703] veth1_macvtap: left promiscuous mode [ 790.267180][ T8703] veth0_macvtap: left promiscuous mode [ 790.272766][ T8703] veth1_vlan: left promiscuous mode [ 790.278148][ T8703] veth0_vlan: left promiscuous mode [ 790.313642][ T29] audit: type=1326 audit(1764252787.217:134723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.337603][ T29] audit: type=1326 audit(1764252787.217:134724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.338199][ T29] audit: type=1326 audit(1764252787.217:134725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.338223][ T29] audit: type=1326 audit(1764252787.217:134726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.338249][ T29] audit: type=1326 audit(1764252787.217:134727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.338276][ T29] audit: type=1326 audit(1764252787.217:134728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.338306][ T29] audit: type=1326 audit(1764252787.217:134729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.14683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 790.524230][T11783] program syz.6.14686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.530433][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.541935][T11775] bond0: (slave team0): Enslaving as an active interface with an up link [ 790.554069][T11724] chnl_net:caif_netlink_parms(): no params data found [ 790.605714][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.612927][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.620344][T11724] bridge_slave_0: entered allmulticast mode [ 790.627056][T11724] bridge_slave_0: entered promiscuous mode [ 790.634059][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.641470][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.649266][T11724] bridge_slave_1: entered allmulticast mode [ 790.659421][T11724] bridge_slave_1: entered promiscuous mode [ 790.689468][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.702138][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.725519][T11724] team0: Port device team_slave_0 added [ 790.734470][T11724] team0: Port device team_slave_1 added [ 790.756737][T11724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.763827][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.790168][T11724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.811740][T11724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.818857][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.844802][T11724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.860062][T11802] lo speed is unknown, defaulting to 1000 [ 790.886402][T11724] hsr_slave_0: entered promiscuous mode [ 790.905229][T11724] hsr_slave_1: entered promiscuous mode [ 790.927543][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14691'. [ 790.936661][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14691'. [ 791.128262][T11802] wg1 speed is unknown, defaulting to 1000 [ 791.186270][T11802] lo speed is unknown, defaulting to 1000 [ 791.223331][T11826] siw: device registration error -23 [ 791.290324][T11822] lo speed is unknown, defaulting to 1000 [ 791.522097][T11822] wg1 speed is unknown, defaulting to 1000 [ 791.550522][T11822] lo speed is unknown, defaulting to 1000 [ 791.692268][T11844] netlink: 'syz.1.14693': attribute type 10 has an invalid length. [ 791.700302][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14693'. [ 791.830669][T11865] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14698'. [ 791.945139][T11886] netlink: 'syz.5.14701': attribute type 1 has an invalid length. [ 791.953123][T11886] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14701'. [ 791.999255][T11724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.007804][T11724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.020145][T11724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 792.030448][T11724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 792.052151][T11892] loop5: detected capacity change from 0 to 512 [ 792.104217][T11892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.116025][T11724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.127957][T11724] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.157269][T11892] ext4 filesystem being mounted at /589/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.304305][T11913] lo speed is unknown, defaulting to 1000 [ 792.360395][T11913] wg1 speed is unknown, defaulting to 1000 [ 792.366881][T11913] lo speed is unknown, defaulting to 1000 [ 792.448254][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 792.448268][ T29] audit: type=1326 audit(1764252789.327:134769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 792.478090][ T29] audit: type=1326 audit(1764252789.327:134770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 792.501943][ T29] audit: type=1326 audit(1764252789.327:134771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 792.525699][ T29] audit: type=1326 audit(1764252789.327:134772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 792.549538][ T29] audit: type=1326 audit(1764252789.327:134773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 792.573302][ T29] audit: type=1326 audit(1764252789.327:134774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb15a39f749 code=0x7ffc0000 [ 792.597018][ T29] audit: type=1326 audit(1764252789.327:134775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb15a39f783 code=0x7ffc0000 [ 792.620683][ T29] audit: type=1326 audit(1764252789.337:134776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb15a39e1ff code=0x7ffc0000 [ 792.636708][T11724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 792.644233][ T29] audit: type=1326 audit(1764252789.337:134777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb15a39f7d7 code=0x7ffc0000 [ 792.654625][T11724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.678149][ T29] audit: type=1326 audit(1764252789.337:134778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.5.14702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb15a39df90 code=0x7ffc0000 [ 792.721696][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14700'. [ 792.731992][T31056] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.739070][T31056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.757548][T31056] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.764709][T31056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.783611][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.864759][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.923989][T11930] lo speed is unknown, defaulting to 1000 [ 792.958455][T11953] netlink: 4364 bytes leftover after parsing attributes in process `syz.6.14709'. [ 793.001504][T11959] loop5: detected capacity change from 0 to 512 [ 793.034665][T11930] wg1 speed is unknown, defaulting to 1000 [ 793.051524][T11930] lo speed is unknown, defaulting to 1000 [ 793.070361][T11959] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14711: inode has both inline data and extents flags [ 793.088708][T11724] veth0_vlan: entered promiscuous mode [ 793.099235][T11724] veth1_vlan: entered promiscuous mode [ 793.119515][T11959] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14711: couldn't read orphan inode 15 (err -117) [ 793.122579][T11724] veth0_macvtap: entered promiscuous mode [ 793.138080][T11959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.169157][T11724] veth1_macvtap: entered promiscuous mode [ 793.192157][T11724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.209677][T11724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.222376][ T8666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.252095][ T8666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.265523][ T8666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.276419][T11959] netlink: 332 bytes leftover after parsing attributes in process `syz.5.14711'. [ 793.282227][ T8666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.310809][T11987] netlink: 332 bytes leftover after parsing attributes in process `syz.2.14718'. [ 793.336392][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.410030][T11999] tipc: Enabling of bearer rejected, failed to enable media [ 793.419642][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14721'. [ 793.441161][T12000] SELinux: ebitmap: truncated map [ 793.455677][T12000] SELinux: failed to load policy [ 793.494155][T12004] netlink: 4364 bytes leftover after parsing attributes in process `syz.6.14722'. [ 793.599796][T12013] tipc: Enabling of bearer rejected, already enabled [ 793.610880][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14726'. [ 793.620958][T12015] program syz.6.14727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.895326][T12029] serio: Serial port ttyS3 [ 794.040992][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14732'. [ 794.052261][T12033] bridge_slave_1: left allmulticast mode [ 794.057948][T12033] bridge_slave_1: left promiscuous mode [ 794.063871][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.067638][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14731'. [ 794.080939][T12033] bridge_slave_0: left allmulticast mode [ 794.086586][T12033] bridge_slave_0: left promiscuous mode [ 794.092256][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.198754][T12039] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 794.249042][T12047] netlink: 4364 bytes leftover after parsing attributes in process `syz.4.14737'. [ 794.427816][T12055] lo speed is unknown, defaulting to 1000 [ 794.453825][T12055] wg1 speed is unknown, defaulting to 1000 [ 794.459886][T12055] lo speed is unknown, defaulting to 1000 [ 794.727334][T12030] serio: Serial port ttyS3 [ 794.781797][T12066] loop5: detected capacity change from 0 to 512 [ 794.794524][T12066] EXT4-fs: Ignoring removed bh option [ 794.930118][T12070] lo speed is unknown, defaulting to 1000 [ 794.979720][T12070] wg1 speed is unknown, defaulting to 1000 [ 794.986090][T12070] lo speed is unknown, defaulting to 1000 [ 795.464754][T12066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.537860][T12084] tipc: Enabling of bearer rejected, failed to enable media [ 795.577133][T12066] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.669709][ T2841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.780295][T17524] infiniband syb2: ib_query_port failed (-19) [ 795.839256][T12102] FAULT_INJECTION: forcing a failure. [ 795.839256][T12102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.852586][T12102] CPU: 1 UID: 0 PID: 12102 Comm: syz.6.14760 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 795.852615][T12102] Tainted: [W]=WARN [ 795.852622][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 795.852647][T12102] Call Trace: [ 795.852653][T12102] [ 795.852659][T12102] __dump_stack+0x1d/0x30 [ 795.852681][T12102] dump_stack_lvl+0xe8/0x140 [ 795.852701][T12102] dump_stack+0x15/0x1b [ 795.852719][T12102] should_fail_ex+0x265/0x280 [ 795.852738][T12102] should_fail_alloc_page+0xf2/0x100 [ 795.852833][T12102] alloc_pages_bulk_noprof+0xef/0x530 [ 795.852866][T12102] copy_splice_read+0xf3/0x660 [ 795.852894][T12102] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 795.853024][T12102] splice_direct_to_actor+0x290/0x680 [ 795.853047][T12102] ? __pfx_direct_splice_actor+0x10/0x10 [ 795.853128][T12102] do_splice_direct+0xda/0x150 [ 795.853150][T12102] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 795.853177][T12102] do_sendfile+0x380/0x650 [ 795.853208][T12102] __x64_sys_sendfile64+0x105/0x150 [ 795.853313][T12102] x64_sys_call+0x2bb4/0x3000 [ 795.853335][T12102] do_syscall_64+0xd2/0x200 [ 795.853355][T12102] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 795.853383][T12102] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 795.853483][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.853610][T12102] RIP: 0033:0x7f4c1f0ef749 [ 795.853625][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.853643][T12102] RSP: 002b:00007f4c1db4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 795.853664][T12102] RAX: ffffffffffffffda RBX: 00007f4c1f345fa0 RCX: 00007f4c1f0ef749 [ 795.853678][T12102] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 795.853760][T12102] RBP: 00007f4c1db4f090 R08: 0000000000000000 R09: 0000000000000000 [ 795.853773][T12102] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 795.853787][T12102] R13: 00007f4c1f346038 R14: 00007f4c1f345fa0 R15: 00007ffc4d3aa478 [ 795.853807][T12102] [ 795.911288][T12107] tipc: Enabling of bearer rejected, failed to enable media [ 796.080625][T12104] program syz.4.14758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 796.116671][T12113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.124369][T12113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.135547][T12113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.142980][T12113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.214696][ T8666] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.385730][ T8666] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.565159][ T8666] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.579273][T12135] binfmt_misc: register: failed to install interpreter file ./file2 [ 796.676560][T12134] lo speed is unknown, defaulting to 1000 [ 796.730007][T12134] wg1 speed is unknown, defaulting to 1000 [ 796.736592][T12134] lo speed is unknown, defaulting to 1000 [ 796.794647][T12105] lo speed is unknown, defaulting to 1000 [ 796.824506][ T8666] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.977072][T12105] wg1 speed is unknown, defaulting to 1000 [ 796.990796][ T8666] tipc: Resetting bearer [ 797.067673][ T8666] bond4 (unregistering): (slave ip6gretap3): Releasing backup interface [ 797.084655][T12159] serio: Serial port ttyS3 [ 797.122317][ T8666] tipc: Disabling bearer [ 797.170070][ T8666] bond0 (unregistering): Released all slaves [ 797.178085][ T8666] bond1 (unregistering): Released all slaves [ 797.186263][ T8666] bond2 (unregistering): Released all slaves [ 797.194600][ T8666] bond3 (unregistering): Released all slaves [ 797.203217][ T8666] bond4 (unregistering): Released all slaves [ 797.211974][ T8666] bond5 (unregistering): Released all slaves [ 797.219774][T12105] lo speed is unknown, defaulting to 1000 [ 797.296462][T12179] netlink: 'syz.2.14773': attribute type 39 has an invalid length. [ 797.324146][ T8666] tipc: Disabling bearer [ 797.329579][ T8666] tipc: Left network mode [ 797.329597][T12172] tipc: Started in network mode [ 797.329621][T12172] tipc: Node identity ceb870cb6cf3, cluster identity 4711 [ 797.329663][T12172] tipc: Enabled bearer , priority 0 [ 797.374823][T12181] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 797.384974][T12166] tipc: Resetting bearer [ 797.415624][T12166] tipc: Disabling bearer [ 797.461306][ T8666] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 797.468501][ T8666] batman_adv: batadv0: Removing interface: veth1_vlan [ 797.487976][ T8666] veth1_macvtap: left promiscuous mode [ 797.498521][ T8666] veth0_macvtap: left promiscuous mode [ 797.504016][T12196] program syz.1.14776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.507583][ T8666] veth1_vlan: left promiscuous mode [ 797.528495][ T8666] veth0_vlan: left promiscuous mode [ 797.767509][T12207] tipc: Enabling of bearer rejected, failed to enable media [ 797.924890][T12105] chnl_net:caif_netlink_parms(): no params data found [ 797.982559][T12227] ip6erspan0: entered promiscuous mode [ 798.073557][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.080746][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.124112][T12105] bridge_slave_0: entered allmulticast mode [ 798.135556][T12105] bridge_slave_0: entered promiscuous mode [ 798.143179][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.150280][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.178305][T12105] bridge_slave_1: entered allmulticast mode [ 798.184783][T12105] bridge_slave_1: entered promiscuous mode [ 798.254403][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.265675][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.366342][T12241] lo speed is unknown, defaulting to 1000 [ 798.417281][T12241] wg1 speed is unknown, defaulting to 1000 [ 798.423717][T12241] lo speed is unknown, defaulting to 1000 [ 798.640596][T12105] team0: Port device team_slave_0 added [ 798.669675][T12105] team0: Port device team_slave_1 added [ 798.703583][T12105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.710690][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.736684][T12105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.761768][T12258] siw: device registration error -23 [ 798.788706][T12105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.795733][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.821785][T12105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.852937][T12250] tipc: Enabled bearer , priority 0 [ 799.097625][T12275] netlink: 'syz.6.14790': attribute type 10 has an invalid length. [ 799.136490][T12248] tipc: Resetting bearer [ 799.151277][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 799.151364][ T29] audit: type=1326 audit(1764252796.057:135168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.208135][T12248] tipc: Disabling bearer [ 799.215259][ T29] audit: type=1326 audit(1764252796.087:135169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.239166][ T29] audit: type=1326 audit(1764252796.087:135170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.262980][ T29] audit: type=1326 audit(1764252796.087:135171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.286804][ T29] audit: type=1326 audit(1764252796.087:135172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.310550][ T29] audit: type=1326 audit(1764252796.087:135173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.334286][ T29] audit: type=1326 audit(1764252796.087:135174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.358232][ T29] audit: type=1326 audit(1764252796.087:135175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.382042][ T29] audit: type=1326 audit(1764252796.087:135176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.405843][ T29] audit: type=1326 audit(1764252796.087:135177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 799.437630][T12275] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.445986][T12275] bond0: (slave team0): Enslaving as an active interface with an up link [ 799.462082][T12105] hsr_slave_0: entered promiscuous mode [ 799.468883][T12105] hsr_slave_1: entered promiscuous mode [ 799.474884][T12105] debugfs: 'hsr0' already exists in 'hsr' [ 799.480679][T12105] Cannot create hsr debugfs directory [ 799.851477][T12292] __nla_validate_parse: 6 callbacks suppressed [ 799.851492][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14794'. [ 799.927538][T12291] tipc: Enabling of bearer rejected, failed to enable media [ 800.000020][T12288] lo speed is unknown, defaulting to 1000 [ 800.047338][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ae77000: rx timeout, send abort [ 800.061368][T12288] wg1 speed is unknown, defaulting to 1000 [ 800.067830][T12288] lo speed is unknown, defaulting to 1000 [ 800.616706][T12105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 800.641172][T12105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.647911][T12309] program syz.4.14797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 800.663204][T12105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 800.687405][T12105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 800.791792][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.823278][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.009358][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.016452][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.029309][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.036446][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.142371][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.195292][T12361] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14799'. [ 801.255822][T12371] serio: Serial port ttyS3 [ 801.437161][T12397] siw: device registration error -23 [ 801.446878][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14803'. [ 801.503072][T12406] program syz.1.14801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 801.529377][T12401] tipc: Started in network mode [ 801.534273][T12401] tipc: Node identity 72588703f9be, cluster identity 4711 [ 801.541724][T12401] tipc: Enabled bearer , priority 0 [ 801.555015][ T8691] tipc: Resetting bearer [ 801.609196][T12385] tipc: Resetting bearer [ 801.641379][T12385] tipc: Disabling bearer [ 801.769208][T12105] veth0_vlan: entered promiscuous mode [ 801.780189][T12105] veth1_vlan: entered promiscuous mode [ 801.800699][T12105] veth0_macvtap: entered promiscuous mode [ 801.819786][T12105] veth1_macvtap: entered promiscuous mode [ 801.858328][T12105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.867362][T12105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.894440][T12448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14809'. [ 801.908860][ T8666] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.920913][ T8703] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.941989][ T8686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.957977][T12449] serio: Serial port ttyS3 [ 801.969103][ T8666] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.004279][T12457] netlink: 'syz.5.14757': attribute type 1 has an invalid length. [ 802.012349][T12457] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14757'. [ 802.744107][T12468] lo speed is unknown, defaulting to 1000 [ 802.943898][T12482] program syz.1.14818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.954199][T12468] wg1 speed is unknown, defaulting to 1000 [ 802.966826][T12468] lo speed is unknown, defaulting to 1000 [ 803.057551][T12486] program syz.6.14819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.119164][T12488] loop5: detected capacity change from 0 to 128 [ 803.154677][T12468] chnl_net:caif_netlink_parms(): no params data found [ 803.170118][T12488] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 803.215652][T12488] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 803.281694][ T8688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.324477][T12488] program syz.5.14820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.363416][T12499] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14821'. [ 803.385322][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.392531][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.408519][T12468] bridge_slave_0: entered allmulticast mode [ 803.425202][T12468] bridge_slave_0: entered promiscuous mode [ 803.439245][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.446473][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.453979][T12468] bridge_slave_1: entered allmulticast mode [ 803.460604][T12468] bridge_slave_1: entered promiscuous mode [ 803.471587][ T8688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.527354][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.538639][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.557592][ T8688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.585433][T12468] team0: Port device team_slave_0 added [ 803.594914][T12468] team0: Port device team_slave_1 added [ 803.649093][T17529] wg1 speed is unknown, defaulting to 1000 [ 803.649751][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.654930][T17529] syz: Port: 1 Link DOWN [ 803.661862][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.692065][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.751672][T12488] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 803.760270][T12488] FAT-fs (loop5): Filesystem has been set read-only [ 803.832252][ T8688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.892047][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.899036][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.924934][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.055300][T12468] hsr_slave_0: entered promiscuous mode [ 804.062335][T12468] hsr_slave_1: entered promiscuous mode [ 804.068633][T12468] debugfs: 'hsr0' already exists in 'hsr' [ 804.074363][T12468] Cannot create hsr debugfs directory [ 804.092632][T12519] SELinux: ebitmap: truncated map [ 804.123601][T12518] loop5: detected capacity change from 0 to 512 [ 804.143662][T12519] SELinux: failed to load policy [ 804.149257][ T8688] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 804.196441][T12518] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14829: inode has both inline data and extents flags [ 804.252747][T12518] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14829: couldn't read orphan inode 15 (err -117) [ 804.275030][ T8688] bond0 (unregistering): Released all slaves [ 804.284426][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 804.284489][ T29] audit: type=1326 audit(1764252801.187:135465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.297553][ T8688] bond1 (unregistering): Released all slaves [ 804.321418][T12518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.336472][ T8688] bond2 (unregistering): Released all slaves [ 804.345329][ T8688] bond3 (unregistering): Released all slaves [ 804.354155][ T8688] bond4 (unregistering): Released all slaves [ 804.362875][ T29] audit: type=1326 audit(1764252801.227:135466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.386737][ T29] audit: type=1326 audit(1764252801.227:135467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.410545][ T29] audit: type=1326 audit(1764252801.227:135468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.434330][ T29] audit: type=1326 audit(1764252801.227:135469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.458124][ T29] audit: type=1326 audit(1764252801.227:135470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.481864][ T29] audit: type=1326 audit(1764252801.227:135471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.505561][ T29] audit: type=1326 audit(1764252801.227:135472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.529335][ T29] audit: type=1326 audit(1764252801.227:135473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.553118][ T29] audit: type=1326 audit(1764252801.227:135474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.1.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 804.578943][T12518] netlink: 332 bytes leftover after parsing attributes in process `syz.5.14829'. [ 804.616637][T12549] binfmt_misc: register: failed to install interpreter file ./file2 [ 804.654712][ T8688] tipc: Left network mode [ 804.679828][T12552] netlink: 332 bytes leftover after parsing attributes in process `syz.4.14838'. [ 804.808587][ T8688] hsr_slave_0: left promiscuous mode [ 804.814147][ T8688] hsr_slave_1: left promiscuous mode [ 804.823136][ T8688] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 804.830208][ T8688] batman_adv: batadv0: Removing interface: veth1_vlan [ 804.852491][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.861760][ T8688] veth1_macvtap: left promiscuous mode [ 804.867243][ T8688] veth0_macvtap: left promiscuous mode [ 804.883684][ T8688] veth1_vlan: left promiscuous mode [ 804.899856][ T8688] veth0_vlan: left promiscuous mode [ 804.907794][T12574] loop5: detected capacity change from 0 to 512 [ 804.928805][T12576] SELinux: ebitmap: truncated map [ 804.945244][T12574] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14841: inode has both inline data and extents flags [ 804.961786][T12571] program syz.4.14840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.975652][T12576] SELinux: failed to load policy [ 805.003199][T12574] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14841: couldn't read orphan inode 15 (err -117) [ 805.098810][T12574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.216904][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14842'. [ 805.247985][T12584] netlink: 332 bytes leftover after parsing attributes in process `syz.5.14841'. [ 805.278550][T12581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12581 comm=syz.1.14842 [ 805.420657][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.501357][T12468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 805.520865][T12608] SELinux: ebitmap: truncated map [ 805.527889][T12608] SELinux: failed to load policy [ 805.533169][T12468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 805.554210][T12468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.579860][T12468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 805.697091][T12617] netlink: 'syz.5.14847': attribute type 10 has an invalid length. [ 805.744836][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.763669][T12619] netlink: 332 bytes leftover after parsing attributes in process `syz.1.14849'. [ 805.785007][T12617] bond0: (slave team0): Enslaving as an active interface with an up link [ 805.854804][T12625] loop5: detected capacity change from 0 to 512 [ 805.901390][T12625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 805.923530][T12468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.931956][T12625] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14850: inode has both inline data and extents flags [ 805.950146][T12468] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.963480][T31056] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.970578][T31056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.978937][T12625] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14850: couldn't read orphan inode 15 (err -117) [ 805.998868][T12625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.024301][T12625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.067837][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.075019][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.229814][T12468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.254240][T12655] loop5: detected capacity change from 0 to 2048 [ 806.319410][T12655] loop5: p1 p3 p4 [ 806.324416][T12655] loop5: p4 size 589824 extends beyond EOD, truncated [ 806.389102][T12468] veth0_vlan: entered promiscuous mode [ 806.409625][T12468] veth1_vlan: entered promiscuous mode [ 806.450443][T12468] veth0_macvtap: entered promiscuous mode [ 806.464596][T12468] veth1_macvtap: entered promiscuous mode [ 806.491154][T12468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.514850][T12468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.568008][ T8689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.593004][T31056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.627744][T31056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.647665][ T8703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.900863][T12713] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14859'. [ 807.039170][T12723] SELinux: ebitmap: truncated map [ 807.047188][T12723] SELinux: failed to load policy [ 807.087167][T12725] netlink: 'syz.2.14866': attribute type 10 has an invalid length. [ 807.100165][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.107875][T12725] bond0: (slave team0): Enslaving as an active interface with an up link [ 807.207194][T12734] netlink: 'syz.5.14870': attribute type 1 has an invalid length. [ 807.215175][T12734] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14870'. [ 807.442143][T12742] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14872'. [ 807.582915][T12750] program syz.6.14874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 807.708593][T12759] netlink: 'syz.1.14878': attribute type 10 has an invalid length. [ 807.796763][T12760] program syz.4.14877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.148351][T12771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14883'. [ 808.552681][T12789] netlink: 'syz.2.14890': attribute type 1 has an invalid length. [ 808.560558][T12789] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14890'. [ 808.729864][T12800] netlink: 192 bytes leftover after parsing attributes in process `syz.4.14894'. [ 808.741440][T12799] loop5: detected capacity change from 0 to 512 [ 808.786966][T12799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 808.802853][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14895'. [ 808.825683][T12799] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14893: inode has both inline data and extents flags [ 808.839265][T12799] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14893: couldn't read orphan inode 15 (err -117) [ 808.854754][T12799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.869571][T12799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.891008][T12821] binfmt_misc: register: failed to install interpreter file ./file2 [ 809.060721][T12829] lo speed is unknown, defaulting to 1000 [ 809.161009][T12829] lo speed is unknown, defaulting to 1000 [ 809.364515][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 809.364557][ T29] audit: type=1326 audit(1764252806.237:135874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.394579][ T29] audit: type=1326 audit(1764252806.247:135875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.418415][ T29] audit: type=1326 audit(1764252806.257:135876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.453706][T12831] SELinux: ebitmap: truncated map [ 809.458996][ T29] audit: type=1326 audit(1764252806.357:135877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.482789][ T29] audit: type=1326 audit(1764252806.367:135878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.486403][T12831] SELinux: failed to load policy [ 809.514189][T12833] serio: Serial port ttyS3 [ 809.514337][ T29] audit: type=1326 audit(1764252806.417:135879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.562201][ T29] audit: type=1326 audit(1764252806.457:135880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.587462][ T29] audit: type=1326 audit(1764252806.467:135881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.611279][ T29] audit: type=1326 audit(1764252806.467:135882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.635115][ T29] audit: type=1326 audit(1764252806.467:135883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.4.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 809.717042][T12846] ip6erspan0: entered promiscuous mode [ 809.796642][T12840] program syz.1.14905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.910353][T12863] netlink: 'syz.4.14915': attribute type 10 has an invalid length. [ 809.921189][T12863] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.929746][T12863] bond0: (slave team0): Enslaving as an active interface with an up link [ 810.137921][T12872] serio: Serial port ttyS3 [ 810.242051][T12880] tipc: Started in network mode [ 810.247026][T12880] tipc: Node identity 5e623dc221ce, cluster identity 4711 [ 810.254251][T12880] tipc: Enabled bearer , priority 0 [ 810.266207][T12873] tipc: Resetting bearer [ 810.299860][T12873] tipc: Disabling bearer [ 810.348424][T12886] binfmt_misc: register: failed to install interpreter file ./file2 [ 810.427632][T12898] program syz.6.14926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 810.544462][T12908] loop5: detected capacity change from 0 to 512 [ 810.569931][T12909] __nla_validate_parse: 3 callbacks suppressed [ 810.569946][T12909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14931'. [ 810.602408][T12911] loop5: detected capacity change from 0 to 512 [ 810.614112][T12911] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 810.626501][T12911] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14933: inode has both inline data and extents flags [ 810.640332][T12911] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14933: couldn't read orphan inode 15 (err -117) [ 810.653551][T12911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.677726][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.703220][T12914] ip6erspan0: entered promiscuous mode [ 810.732961][T12917] loop5: detected capacity change from 0 to 512 [ 810.746859][T12917] EXT4-fs: Ignoring removed bh option [ 810.761741][T12918] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14936'. [ 810.772472][T12917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.785460][T12917] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 810.806769][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.874878][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14943'. [ 810.883906][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14943'. [ 810.896980][T12935] loop5: detected capacity change from 0 to 128 [ 810.903808][T12935] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 810.921697][T12935] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 810.932493][T12935] program syz.5.14939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 810.975865][T12941] ip6erspan0: entered promiscuous mode [ 811.020101][T12944] program syz.2.14946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.035773][T12942] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 811.044403][T12942] FAT-fs (loop5): Filesystem has been set read-only [ 811.089005][T12948] netlink: 192 bytes leftover after parsing attributes in process `syz.4.14947'. [ 811.575449][T12965] netlink: 332 bytes leftover after parsing attributes in process `syz.4.14953'. [ 811.731970][T12969] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14955'. [ 811.855819][T12978] loop5: detected capacity change from 0 to 128 [ 811.866224][T12967] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14954'. [ 811.920796][T12982] program syz.4.14959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.981046][T12986] netlink: 192 bytes leftover after parsing attributes in process `syz.2.14960'. [ 812.151386][T12992] tipc: Enabling of bearer rejected, failed to enable media [ 812.171216][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14963'. [ 812.276152][T12998] SELinux: ebitmap: truncated map [ 812.292548][T12998] SELinux: failed to load policy [ 812.477470][T13018] program syz.4.14973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.733847][T13035] siw: device registration error -23 [ 812.767134][T13036] SELinux: ebitmap: truncated map [ 812.791661][T13036] SELinux: failed to load policy [ 812.976918][T13058] netlink: 'syz.2.14989': attribute type 1 has an invalid length. [ 813.031028][T13063] netlink: 'syz.2.14991': attribute type 10 has an invalid length. [ 813.103374][T13073] serio: Serial port ttyS3 [ 813.239661][T13077] lo speed is unknown, defaulting to 1000 [ 813.292123][T13077] lo speed is unknown, defaulting to 1000 [ 813.652576][T13091] netlink: 'syz.5.15002': attribute type 1 has an invalid length. [ 813.661616][T13089] binfmt_misc: register: failed to install interpreter file ./file2 [ 813.811339][T13098] netlink: 'syz.1.15003': attribute type 10 has an invalid length. [ 813.847630][T13102] netlink: 'syz.6.15005': attribute type 10 has an invalid length. [ 813.956817][T13115] tipc: Enabling of bearer rejected, failed to enable media [ 814.002578][T13122] binfmt_misc: register: failed to install interpreter file ./file2 [ 814.014033][T13119] SELinux: ebitmap: truncated map [ 814.020798][T13119] SELinux: failed to load policy [ 814.114210][T13137] program syz.4.15019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.301464][T13147] serio: Serial port ttyS3 [ 814.374758][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 814.374773][ T29] audit: type=1326 audit(1764252811.277:136329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.404791][ T29] audit: type=1326 audit(1764252811.287:136330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.409562][T13153] binfmt_misc: register: failed to install interpreter file ./file2 [ 814.429009][ T29] audit: type=1326 audit(1764252811.317:136331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9ef29f783 code=0x7ffc0000 [ 814.460350][ T29] audit: type=1326 audit(1764252811.317:136332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9ef29f783 code=0x7ffc0000 [ 814.484564][ T29] audit: type=1326 audit(1764252811.317:136333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.508335][ T29] audit: type=1326 audit(1764252811.317:136334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.532176][ T29] audit: type=1326 audit(1764252811.317:136335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.555922][ T29] audit: type=1326 audit(1764252811.317:136336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.579714][ T29] audit: type=1326 audit(1764252811.317:136337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.603517][ T29] audit: type=1326 audit(1764252811.337:136338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.4.15026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 814.712751][T13180] loop5: detected capacity change from 0 to 512 [ 814.732707][T13180] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.15031: inode has both inline data and extents flags [ 814.759216][T13180] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.15031: couldn't read orphan inode 15 (err -117) [ 814.772562][T13180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.880858][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.950590][T13203] program syz.1.15035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 815.058897][T13208] serio: Serial port ttyS3 [ 815.207140][T13223] lo speed is unknown, defaulting to 1000 [ 815.242994][T13223] lo speed is unknown, defaulting to 1000 [ 815.891247][T13265] __nla_validate_parse: 17 callbacks suppressed [ 815.891264][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15046'. [ 815.906585][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15046'. [ 815.945164][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15048'. [ 815.954322][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15048'. [ 815.982305][T13267] program syz.4.15045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.004705][T13278] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15051'. [ 816.066912][T13280] loop5: detected capacity change from 0 to 512 [ 816.086727][T13283] siw: device registration error -23 [ 816.100818][T13280] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 816.174109][T13280] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.15052: inode has both inline data and extents flags [ 816.197785][T13280] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.15052: couldn't read orphan inode 15 (err -117) [ 816.228819][T13296] program syz.1.15058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.239185][T13280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.266540][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.330220][T13291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15055'. [ 816.527248][T13312] lo speed is unknown, defaulting to 1000 [ 816.593691][T13312] lo speed is unknown, defaulting to 1000 [ 816.783157][T13314] SELinux: ebitmap: truncated map [ 816.949666][T13314] SELinux: failed to load policy [ 817.004421][T13321] netlink: 332 bytes leftover after parsing attributes in process `syz.2.15066'. [ 817.088919][T13334] netlink: 'syz.1.15068': attribute type 10 has an invalid length. [ 817.096947][T13334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15068'. [ 817.132977][T13338] program syz.2.15073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.210203][T13350] siw: device registration error -23 [ 817.240792][T13333] netlink: 44 bytes leftover after parsing attributes in process `syz.6.15071'. [ 817.258475][T13352] program syz.1.15076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.496171][T13363] tipc: Enabling of bearer rejected, failed to enable media [ 817.507830][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15080'. [ 817.550859][T13371] serio: Serial port ttyS3 [ 817.633991][T13374] netlink: 'syz.6.15085': attribute type 10 has an invalid length. [ 817.655575][T13374] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 817.674780][T13376] FAULT_INJECTION: forcing a failure. [ 817.674780][T13376] name failslab, interval 1, probability 0, space 0, times 0 [ 817.687581][T13376] CPU: 1 UID: 0 PID: 13376 Comm: syz.2.15086 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 817.687685][T13376] Tainted: [W]=WARN [ 817.687691][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 817.687700][T13376] Call Trace: [ 817.687706][T13376] [ 817.687711][T13376] __dump_stack+0x1d/0x30 [ 817.687778][T13376] dump_stack_lvl+0xe8/0x140 [ 817.687794][T13376] dump_stack+0x15/0x1b [ 817.687878][T13376] should_fail_ex+0x265/0x280 [ 817.687896][T13376] should_failslab+0x8c/0xb0 [ 817.687997][T13376] kmem_cache_alloc_noprof+0x50/0x480 [ 817.688020][T13376] ? security_inode_alloc+0x37/0x100 [ 817.688039][T13376] security_inode_alloc+0x37/0x100 [ 817.688106][T13376] inode_init_always_gfp+0x4b7/0x500 [ 817.688128][T13376] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 817.688188][T13376] alloc_inode+0x58/0x170 [ 817.688222][T13376] new_inode+0x1d/0xe0 [ 817.688243][T13376] shmem_get_inode+0x244/0x750 [ 817.688262][T13376] __shmem_file_setup+0x113/0x210 [ 817.688282][T13376] shmem_file_setup+0x3b/0x50 [ 817.688391][T13376] __se_sys_memfd_create+0x2c3/0x590 [ 817.688427][T13376] __x64_sys_memfd_create+0x31/0x40 [ 817.688471][T13376] x64_sys_call+0x2ac2/0x3000 [ 817.688566][T13376] do_syscall_64+0xd2/0x200 [ 817.688585][T13376] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 817.688728][T13376] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 817.688759][T13376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.688777][T13376] RIP: 0033:0x7fefb52cf749 [ 817.688843][T13376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.688866][T13376] RSP: 002b:00007fefb3d2ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 817.688941][T13376] RAX: ffffffffffffffda RBX: 0000000000000480 RCX: 00007fefb52cf749 [ 817.688955][T13376] RDX: 00007fefb3d2eef0 RSI: 0000000000000000 RDI: 00007fefb5354960 [ 817.688966][T13376] RBP: 0000200000000a40 R08: 00007fefb3d2ebb7 R09: 00007fefb3d2ee40 [ 817.688977][T13376] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000a00 [ 817.688989][T13376] R13: 00007fefb3d2eef0 R14: 00007fefb3d2eeb0 R15: 0000200000000540 [ 817.689006][T13376] [ 818.491393][T13408] loop5: detected capacity change from 0 to 4096 [ 818.511866][T13408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 818.533733][T13408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.793751][T13422] SELinux: ebitmap: truncated map [ 818.805296][T13422] SELinux: failed to load policy [ 819.201139][T13443] netlink: 'syz.2.15107': attribute type 1 has an invalid length. [ 819.439796][T12105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.731861][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 819.731877][ T29] audit: type=1326 audit(1764252816.637:136449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 819.998312][T13458] binfmt_misc: register: failed to install interpreter file ./file2 [ 820.034643][ T29] audit: type=1326 audit(1764252816.667:136450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.058532][ T29] audit: type=1326 audit(1764252816.777:136451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.082363][ T29] audit: type=1326 audit(1764252816.777:136452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9ef29f783 code=0x7ffc0000 [ 820.105928][ T29] audit: type=1326 audit(1764252816.777:136453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9ef29f783 code=0x7ffc0000 [ 820.130733][ T29] audit: type=1326 audit(1764252816.777:136454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.154777][ T29] audit: type=1326 audit(1764252816.777:136455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.178526][ T29] audit: type=1326 audit(1764252816.787:136456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.202297][ T29] audit: type=1326 audit(1764252816.787:136457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.226205][ T29] audit: type=1326 audit(1764252816.787:136458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.15111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef29f749 code=0x7ffc0000 [ 820.279612][T13468] netlink: 'syz.1.15115': attribute type 1 has an invalid length. [ 820.290300][T13472] serio: Serial port ttyS3 [ 820.389057][T13485] binfmt_misc: register: failed to install interpreter file ./file2 [ 820.607855][T13512] serio: Serial port ttyS3 [ 820.758664][T13517] binfmt_misc: register: failed to install interpreter file ./file2 [ 821.090166][T13525] __nla_validate_parse: 11 callbacks suppressed [ 821.090183][T13525] netlink: 4364 bytes leftover after parsing attributes in process `syz.4.15139'. [ 821.126686][T13528] netlink: 'syz.6.15138': attribute type 10 has an invalid length. [ 821.189824][T13530] binfmt_misc: register: failed to install interpreter file ./file2 [ 821.225695][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15141'. [ 821.234696][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15141'. [ 821.387783][T13539] lo speed is unknown, defaulting to 1000 [ 821.599657][T13545] lo speed is unknown, defaulting to 1000 [ 821.649430][T13545] lo speed is unknown, defaulting to 1000 [ 821.774897][T13539] lo speed is unknown, defaulting to 1000 [ 821.897915][T13554] tipc: Enabling of bearer rejected, failed to enable media [ 821.907263][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15148'. [ 822.000151][T13560] netlink: 4364 bytes leftover after parsing attributes in process `syz.4.15150'. [ 822.021190][T13561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15149'. [ 822.080921][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15152'. [ 822.089954][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15152'. [ 822.232817][T13582] loop5: detected capacity change from 0 to 128 [ 822.260464][T13582] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 822.335199][T13582] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 822.442656][T13612] program syz.4.15161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.457873][T13582] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 822.466542][T13582] FAT-fs (loop5): Filesystem has been set read-only [ 822.468215][T13615] program syz.1.15163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.521615][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15165'. [ 822.530748][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15165'. [ 822.558325][T13622] netlink: 'syz.6.15166': attribute type 10 has an invalid length. [ 822.566957][T13622] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 822.794977][T13635] netlink: 'syz.1.15171': attribute type 10 has an invalid length. [ 822.812932][T13628] lo speed is unknown, defaulting to 1000 [ 822.880521][T13628] lo speed is unknown, defaulting to 1000 [ 823.046302][T13648] serio: Serial port ttyS3 [ 823.163609][T13660] program syz.4.15180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.422691][T13669] netlink: 'syz.4.15182': attribute type 10 has an invalid length. [ 823.743573][T13675] lo speed is unknown, defaulting to 1000 [ 823.861977][T13675] lo speed is unknown, defaulting to 1000 [ 824.668151][T13690] serio: Serial port ttyS3 [ 824.679521][T13685] binfmt_misc: register: failed to install interpreter file ./file2 [ 824.750513][T13698] program syz.4.15188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 824.753529][T13696] serio: Serial port ttyS3 [ 824.838760][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 824.838775][ T29] audit: type=1326 audit(1764252821.727:136804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.1.15187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 824.868950][ T29] audit: type=1326 audit(1764252821.737:136805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ac6e3b829 code=0x7ffc0000 [ 824.892034][ T29] audit: type=1326 audit(1764252821.737:136806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 824.915120][ T29] audit: type=1326 audit(1764252821.737:136807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac6e9f749 code=0x7ffc0000 [ 824.974599][T13706] tipc: Enabling of bearer rejected, failed to enable media [ 825.670421][T13756] lo speed is unknown, defaulting to 1000 [ 825.722224][T13756] lo speed is unknown, defaulting to 1000 [ 825.898977][T13754] program syz.2.15209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.325166][ T29] audit: type=1326 audit(1764252823.227:136808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.6.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 826.467446][T13768] binfmt_misc: register: failed to install interpreter file ./file2 [ 826.475534][ T29] audit: type=1326 audit(1764252823.227:136809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.6.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 826.475610][T13768] ================================================================== [ 826.499375][ T29] audit: type=1326 audit(1764252823.367:136810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.6.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 826.507353][T13768] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 826.531031][ T29] audit: type=1326 audit(1764252823.367:136811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.6.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 826.537997][T13768] [ 826.538003][T13768] write to 0xffffffff86925440 of 88 bytes by task 29 on cpu 1: [ 826.538018][T13768] prb_reserve+0x695/0xaf0 [ 826.538034][T13768] vprintk_store+0x56d/0x860 [ 826.561744][ T29] audit: type=1326 audit(1764252823.367:136812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.6.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 826.564006][T13768] vprintk_emit+0x10d/0x580 [ 826.571557][ T29] audit: type=1326 audit(1764252823.367:136813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.6.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c1f0ef749 code=0x7ffc0000 [ 826.575925][T13768] vprintk_default+0x26/0x30 [ 826.636675][T13768] vprintk+0x1d/0x30 [ 826.640563][T13768] _printk+0x79/0xa0 [ 826.644449][T13768] kauditd_hold_skb+0x1b1/0x1c0 [ 826.649286][T13768] kauditd_send_queue+0x273/0x2c0 [ 826.654296][T13768] kauditd_thread+0x421/0x630 [ 826.658958][T13768] kthread+0x489/0x510 [ 826.663012][T13768] ret_from_fork+0x122/0x1b0 [ 826.667586][T13768] ret_from_fork_asm+0x1a/0x30 [ 826.672337][T13768] [ 826.674642][T13768] read to 0xffffffff86925440 of 8 bytes by task 13768 on cpu 0: [ 826.682253][T13768] _prb_read_valid+0x383/0x920 [ 826.686997][T13768] prb_read_valid+0x3c/0x60 [ 826.691483][T13768] console_unlock+0x164/0x2e0 [ 826.696144][T13768] vprintk_emit+0x3b5/0x580 [ 826.700630][T13768] vprintk_default+0x26/0x30 [ 826.705208][T13768] vprintk+0x1d/0x30 [ 826.709093][T13768] _printk+0x79/0xa0 [ 826.712976][T13768] bm_register_write+0xbdb/0xc10 [ 826.717901][T13768] vfs_write+0x269/0x960 [ 826.722126][T13768] ksys_write+0xda/0x1a0 [ 826.726353][T13768] __x64_sys_write+0x40/0x50 [ 826.730928][T13768] x64_sys_call+0x2802/0x3000 [ 826.735589][T13768] do_syscall_64+0xd2/0x200 [ 826.740076][T13768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.745951][T13768] [ 826.748256][T13768] value changed: 0x00000000000039a6 -> 0x00000000000059a6 [ 826.755343][T13768] [ 826.757648][T13768] Reported by Kernel Concurrency Sanitizer on: [ 826.763778][T13768] CPU: 0 UID: 0 PID: 13768 Comm: syz.6.15203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 826.775219][T13768] Tainted: [W]=WARN [ 826.779005][T13768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 826.789043][T13768] ================================================================== [ 826.856270][T13769] SELinux: ebitmap: truncated map [ 826.861940][T13773] serio: Serial port ttyS3 [ 826.884476][T13769] SELinux: failed to load policy