last executing test programs: 3.000684925s ago: executing program 1 (id=153): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x4, 0x0, 0x3}, 0x2c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r10, &(0x7f0000002000)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="d501d544815ea4ad0df8fa6480854ebca50947353278ea4015c132632907ec9297c83226cb63aa193fedc6f46443f46e1f7ac19e537d422a33d3bd904e7eeabf0cd439c756d5b2a134103d12b926c9409a28fe8b94a0617b4de2b4aa840b01735acdcea909f92d87c002dc5e6d0f1a120bac48d4f71858a6e3a6d10783ea73ea827ac3cedc0fd0b72a2916d4", 0x8c}, {&(0x7f0000000580)="d1e8cf1731d7b788018dc28c5aaf6ec1799ea4921069a2b0c7f9c0caecf506d08d058a29c4974c3fb7690a8a8f5af47039038f8faae667e377a6eb039105cbd73eb8c0f4c6471a7c0c4b868e0350278611f9c9381a6eb8e59b09e19784dd0b47564acb47b82bd153ab471080247351b6145953edaf9a8b36139d3698b72b27c9708a5a13a698fc5e522de7507d028bc6622a62957cbabbf1516616e2", 0x9c}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000180)="4673f883709f58652499", 0xa}, {&(0x7f0000000640)="4686da326fbd3db2d13592c40ae8a99b6744555ea5d6147495cb77d1f635c2a045833091deb568be4cce51069a0d58cd493cfed5e9fee4cf5dc85607496da2760deb3b936ea86c6f42d92112d28cdeda6c2e298fea815d004045ec9f1395eb004acc85f8e25443262875a0f62e746fc961a7948476d207dede38c3944c6aad25a5b23f7d0933eeddd95d211041fdac091765f42cffbb74", 0x97}, {&(0x7f00000003c0)="ac8479795d2d2d3870bed5cda671e7fefc0bdec408e8f5a663be21a076581c7c2a15b314f9323571", 0x28}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r8, r1, r6]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [r6, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}], 0xb8, 0xa0}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000001dc0)="d9f9960316574a7b942351374c884f1a98b99acd09edf18629ee213f3fe6d2005a8d0f2a668c756d3a3eab157d19846b35579e4d695beca98d5006ee902874bcb9da9d0bd7f66ba9fc7a6c42f3b5dcc0a0dec767cd86d33d47a86e5b1fc7707b174a8e39eaae56fcbb9d3e1a92bc6b470e273c8062db87620fbbfe", 0x7b}], 0x1, &(0x7f0000001f40)=[@rights={{0x2c, 0x1, 0x1, [r1, r10, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x40880}}], 0x2, 0x400) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) 2.628756924s ago: executing program 4 (id=157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) getpriority(0x2, 0x0) 2.608790684s ago: executing program 4 (id=158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.589344744s ago: executing program 0 (id=159): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x5, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) syz_io_uring_setup(0x48c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x180050, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)) 2.569933835s ago: executing program 2 (id=160): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18006051633b800000000000b287410aef2f95fd", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x0, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='udf\x00', 0x36054, 0x0) capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x2, 0xfff, 0x80000000, 0x8, 0xa, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x500, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 2.552610844s ago: executing program 0 (id=161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000dc8cc455e52796382d8b27a9e03ff86887629a954e7a30c8fd8d6d2c468f492144c60fbf9ff899aed689"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r4, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = dup2(r5, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) syz_io_uring_setup(0x4c11, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) unshare(0x68060200) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000007fb000000faffffff"], 0xd) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x10, 0x11, &(0x7f0000000ac0)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, 0x0) 2.531279324s ago: executing program 2 (id=162): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x4, 0x0, 0x3}, 0x2c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r10, &(0x7f0000002000)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="d501d544815ea4ad0df8fa6480854ebca50947353278ea4015c132632907ec9297c83226cb63aa193fedc6f46443f46e1f7ac19e537d422a33d3bd904e7eeabf0cd439c756d5b2a134103d12b926c9409a28fe8b94a0617b4de2b4aa840b01735acdcea909f92d87c002dc5e6d0f1a120bac48d4f71858a6e3a6d10783ea73ea827ac3cedc0fd0b72a2916d4", 0x8c}, {&(0x7f0000000580)="d1e8cf1731d7b788018dc28c5aaf6ec1799ea4921069a2b0c7f9c0caecf506d08d058a29c4974c3fb7690a8a8f5af47039038f8faae667e377a6eb039105cbd73eb8c0f4c6471a7c0c4b868e0350278611f9c9381a6eb8e59b09e19784dd0b47564acb47b82bd153ab471080247351b6145953edaf9a8b36139d3698b72b27c9708a5a13a698fc5e522de7507d028bc6622a62957cbabbf1516616e2", 0x9c}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000180)="4673f883709f58652499", 0xa}, {&(0x7f0000000640)="4686da326fbd3db2d13592c40ae8a99b6744555ea5d6147495cb77d1f635c2a045833091deb568be4cce51069a0d58cd493cfed5e9fee4cf5dc85607496da2760deb3b936ea86c6f42d92112d28cdeda6c2e298fea815d004045ec9f1395eb004acc85f8e25443262875a0f62e746fc961a7948476d207dede38c3944c6aad25a5b23f7d0933eeddd95d211041fdac091765f42cffbb74", 0x97}, {&(0x7f00000003c0)="ac8479795d2d2d3870bed5cda671e7fefc0bdec408e8f5a663be21a076581c7c2a15b314f9323571", 0x28}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r8, r1, r6]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [r6, r4, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}], 0xc0, 0xa0}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000001dc0)="d9f9960316574a7b942351374c884f1a98b99acd09edf18629ee213f3fe6d2005a8d0f2a668c756d3a3eab157d19846b35579e4d695beca98d5006ee902874bcb9da9d0bd7f66ba9fc7a6c42f3b5dcc0a0dec767cd86d33d47a86e5b1fc7707b174a8e39eaae56fcbb9d3e1a92bc6b470e273c80", 0x74}], 0x1, &(0x7f0000001f40)=[@rights={{0x2c, 0x1, 0x1, [r1, r10, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x40880}}], 0x2, 0x400) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) 2.352127504s ago: executing program 0 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x8000, 0x80090, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc2, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x8082, 0x9, 0x1, 0x2, 0x5, 0xdba, 0x8, 0x0, 0x7, 0x0, 0x22}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000337}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000000)=0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r10, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x7fffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=tcp']) 2.104580454s ago: executing program 1 (id=164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 2.039973213s ago: executing program 1 (id=165): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r4, 0xa, 0x13) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) fcntl$setlease(r4, 0x400, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x800000000003}, 0x100100, 0x5dd8, 0x7, 0x0, 0x3, 0x401, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) io_uring_enter(r3, 0x1d7c, 0x4b46, 0x0, &(0x7f0000000240)={[0x500000000000000]}, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.694121473s ago: executing program 4 (id=167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu<\t\t') syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.644167843s ago: executing program 2 (id=168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x5, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) r4 = syz_io_uring_setup(0x48c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x180050, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xa4d5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') read$msr(r10, &(0x7f0000000040)=""/59, 0xffb5) 1.546799543s ago: executing program 4 (id=171): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0xfffffff8}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "1b7897b896d6160ddd77fd75b08e0c1e03decbd80ff2443418c1617550be077e59d3bca4121b8665da891ea10e57518fa13dce7b2901611ef05c84074f3b6417", 0x1a}, 0x48, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) setns(r7, 0x10000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000080), 0x80000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r10}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x2f, 0x0, @broadcast, @multicast1}}}}) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x50, r12, 0x1, 0x0, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000700)='./bus\x00', 0x0, 0x4008, r5}, 0x18) 1.541742393s ago: executing program 2 (id=172): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18006051633b800000000000b287410aef2f95fd", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x0, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='udf\x00', 0x36054, &(0x7f0000000300)='trans=rdma,') capset(0x0, &(0x7f0000000040)={0x2, 0xfff, 0x80000000, 0x8, 0xa, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x500, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 1.497118243s ago: executing program 0 (id=173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 1.484463302s ago: executing program 4 (id=174): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r4, 0xa, 0x13) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) fcntl$setlease(r4, 0x400, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x800000000003}, 0x100100, 0x5dd8, 0x7, 0x0, 0x3, 0x401, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) io_uring_enter(r3, 0x1d7c, 0x4b46, 0x0, &(0x7f0000000240)={[0x500000000000000]}, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.459010733s ago: executing program 2 (id=176): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.153234402s ago: executing program 0 (id=177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910200000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) setxattr$security_ima(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x5}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5}, {}, {}, {0x10000000}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a", 0xb5}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xe00}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb0, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20048004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r9, 0x6046f000) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a400000018001106000000000000000002000000fc020009000000000600150004000000800016807c00088078000180720003"], 0xa4}}, 0x0) r12 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") open_tree(r12, &(0x7f0000000080)='./file0\x00', 0x8801) 997.475982ms ago: executing program 1 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) pipe(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) kexec_load(0x3cd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000480)="e7ac73b3ed69e0692bf806a568d69eb3da2c7ba941c0fcfc2b47a65695581a9197294ab48e4b230b613eec778772bb3f3715ac72a6dc3b0ef12f0affd6b19f654dcfc51f037ac0419b056c33c886cba4b2d7023ddafdd31b5248813d18a9811725f7f517d7eadd", 0x67, 0x4e, 0x100000000}], 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='cachefiles_mark_active\x00', r10}, 0x18) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 921.292671ms ago: executing program 1 (id=179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_io_uring_setup(0x2397, &(0x7f0000000400)={0x0, 0x91d1, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="02070409230000002cbd7000fbdbdf25040002000a00000003000000000000009b00000000000000070000000000000003000600ff00000002004e23ac14140a00000000000000001a001800e405c8000a7ffd4393333bb4b1352933015677184a54613ac6594a186df10207e0fbaadedea3a99303639b829492ae6a267f07000000000000009a05c179d8a96442cb9d9d8b75773e3f7745a5e7b3cd4aa4169c2ea0385be8bd95bcde3e94b51516c4e3e6430c54a83566b30183eb1d0da2d78a7beb088d6302dc778f58bf8f8ccede12493dffffff8794fe8cd1ec0a43e0ae6d5a758425b1486b89b741c5aaa5f6a2c9a9d16e84820f28b53c4e5bb10f1a1a61fc3c6a53e4faaac3ea9adb2c8b09723dec9bff3095f0d294aacb1be4dea51ccbad488acd8b479b8f483ef28962fdeae615900e7b4daaf93ae66d43a6a400244d60882e758e973c0822617db05c13121b0374f155a59635e7a98d3891ee1b08643cad90dc88895b24773df187e96dfb820a7d29b274bb055f46d81f13f0020592fee72510911a069a0591973d9a30104977119c6be89c8a626bb8352736baadf4ed7edf940dffeee8d73647d95706f6e34317a619f24563660cf397ba"], 0x118}}, 0xc0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", '\x00\t\x00', "066580001e00"}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) modify_ldt$read_default(0x2, 0xfffffffffffffffe, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 918.805911ms ago: executing program 3 (id=180): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) getpriority(0x2, 0x0) 861.563301ms ago: executing program 3 (id=181): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 799.773141ms ago: executing program 3 (id=182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x5, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) r4 = syz_io_uring_setup(0x48c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x180050, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xa4d5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') read$msr(r10, &(0x7f0000000040)=""/59, 0xffb5) 763.102471ms ago: executing program 0 (id=183): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x4, 0x0, 0x3}, 0x2c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r10, &(0x7f0000002000)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="d501d544815ea4ad0df8fa6480854ebca50947353278ea4015c132632907ec9297c83226cb63aa193fedc6f46443f46e1f7ac19e537d422a33d3bd904e7eeabf0cd439c756d5b2a134103d12b926c9409a28fe8b94a0617b4de2b4aa840b01735acdcea909f92d87c002dc5e6d0f1a120bac48d4f71858a6e3a6d10783ea73ea827ac3cedc0fd0b72a2916d4", 0x8c}, {&(0x7f0000000580)="d1e8cf1731d7b788018dc28c5aaf6ec1799ea4921069a2b0c7f9c0caecf506d08d058a29c4974c3fb7690a8a8f5af47039038f8faae667e377a6eb039105cbd73eb8c0f4c6471a7c0c4b868e0350278611f9c9381a6eb8e59b09e19784dd0b47564acb47b82bd153ab471080247351b6145953edaf9a8b36139d3698b72b27c9708a5a13a698fc5e522de7507d028bc6622a62957cbabbf1516616e2", 0x9c}, {&(0x7f0000000d40)="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", 0x1000}, {0x0}, {&(0x7f0000000640)="4686da326fbd3db2d13592c40ae8a99b6744555ea5d6147495cb77d1f635c2a045833091deb568be4cce51069a0d58cd493cfed5e9fee4cf5dc85607496da2760deb3b936ea86c6f42d92112d28cdeda6c2e298fea815d004045ec9f1395eb004acc85f8e25443262875a0f62e746fc961a7948476d207dede38c3944c6aad25a5b23f7d0933eeddd95d211041fdac091765f42cffbb74", 0x97}, {&(0x7f00000003c0)="ac8479795d2d2d3870bed5cda671e7fefc0bdec408e8f5a663be21a076581c7c2a15b314f9323571", 0x28}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r8, r1, r6]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [r6, r4, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}], 0xc0, 0xa0}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000001dc0)="d9f9960316574a7b942351374c884f1a98b99acd09edf18629ee213f3fe6d2005a8d0f2a668c756d3a3eab157d19846b35579e4d695beca98d5006ee902874bcb9da9d0bd7f66ba9fc7a6c42f3b5dcc0a0dec767cd86d33d47a86e5b1fc7707b174a8e39eaae56fcbb9d3e1a92bc6b470e273c8062db87620fbbfe", 0x7b}], 0x1, &(0x7f0000001f40)=[@rights={{0x2c, 0x1, 0x1, [r1, r10, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x40880}}], 0x2, 0x400) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) 590.037951ms ago: executing program 3 (id=184): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0xfffffff8}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "1b7897b896d6160ddd77fd75b08e0c1e03decbd80ff2443418c1617550be077e59d3bca4121b8665da891ea10e57518fa13dce7b2901611ef05c84074f3b6417", 0x1a}, 0x48, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) setns(r7, 0x10000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000080), 0x80000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r10}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x2f, 0x0, @broadcast, @multicast1}}}}) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x50, r12, 0x1, 0x0, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000700)='./bus\x00', 0x0, 0x4008, r5}, 0x18) 413.636691ms ago: executing program 2 (id=185): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0xcb3, 0x1000}, &(0x7f00000000c0), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014200000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 413.026781ms ago: executing program 3 (id=186): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18006051633b800000000000b287410aef2f95fd", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x6}, 0x18) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x0, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='udf\x00', 0x36054, &(0x7f0000000300)='trans=rdma,') capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x2, 0xfff, 0x80000000, 0x8, 0xa, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x500, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 52.84013ms ago: executing program 3 (id=187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read(r2, &(0x7f0000000040)=""/75, 0x4b) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) close(r1) 52.05207ms ago: executing program 4 (id=188): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x83500, &(0x7f00000003c0)="e94223931982d7e3bc774f850c1da74e7d17aee17328fae988bf9513efefc7f3ae025f89cd70500fb48c6d463b2e725d7a3433a4a9b9bb34fb15c43795d38b1c9138f127ab0fe172742c947e3129f027edea2414b714cbe9e81956d04ee51b8afb862ae10cfae830f8828d153f814389979481ca7a470531adcf14255e11a34b1a5f943f2568184e2f8dead64e0996e59fbf1e5f2acd5a2153229caaab881852e16161d34bfe7189ae63e493ba025813a1d57309eedbb282dbc5770d02756e9e57b30073cca4aea2ae5829ff4ca33a4178935b91", 0xd4, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="3622c640f0ce9d55c7be471a7078cfb7e436451139e34a8139f9bbc1a0f3992b") request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r0) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x7, 0x18400) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) 0s ago: executing program 1 (id=189): r0 = socket(0x21, 0x6, 0x7) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000f4f11014000180090001"], 0x118}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 34.164485][ T29] audit: type=1400 audit(1740906925.160:81): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.165498][ T3289] cgroup: Unknown subsys name 'net' [ 34.187588][ T29] audit: type=1400 audit(1740906925.160:82): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.215151][ T29] audit: type=1400 audit(1740906925.190:83): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.235094][ T29] audit: type=1400 audit(1740906925.200:84): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.357613][ T3289] cgroup: Unknown subsys name 'cpuset' [ 34.363765][ T3289] cgroup: Unknown subsys name 'rlimit' [ 34.484446][ T29] audit: type=1400 audit(1740906925.480:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.507777][ T29] audit: type=1400 audit(1740906925.480:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.516176][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.528355][ T29] audit: type=1400 audit(1740906925.480:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.557320][ T29] audit: type=1400 audit(1740906925.480:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.577594][ T29] audit: type=1400 audit(1740906925.480:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.602467][ T29] audit: type=1400 audit(1740906925.480:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.603101][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.737878][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.771113][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.795348][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.864095][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.871334][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.878723][ T3310] bridge_slave_0: entered allmulticast mode [ 35.885173][ T3310] bridge_slave_0: entered promiscuous mode [ 35.895012][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.913046][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.920177][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.927487][ T3310] bridge_slave_1: entered allmulticast mode [ 35.933944][ T3310] bridge_slave_1: entered promiscuous mode [ 35.981613][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.988707][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.995899][ T3303] bridge_slave_0: entered allmulticast mode [ 36.002355][ T3303] bridge_slave_0: entered promiscuous mode [ 36.015970][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 36.029266][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.036328][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.043510][ T3303] bridge_slave_1: entered allmulticast mode [ 36.049992][ T3303] bridge_slave_1: entered promiscuous mode [ 36.057070][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.086194][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.110272][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.117355][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.124470][ T3305] bridge_slave_0: entered allmulticast mode [ 36.131261][ T3305] bridge_slave_0: entered promiscuous mode [ 36.138056][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.145106][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.152518][ T3301] bridge_slave_0: entered allmulticast mode [ 36.158974][ T3301] bridge_slave_0: entered promiscuous mode [ 36.166396][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.185207][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.192474][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.199948][ T3305] bridge_slave_1: entered allmulticast mode [ 36.206376][ T3305] bridge_slave_1: entered promiscuous mode [ 36.212653][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.219767][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.226931][ T3301] bridge_slave_1: entered allmulticast mode [ 36.233296][ T3301] bridge_slave_1: entered promiscuous mode [ 36.245132][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.255212][ T3310] team0: Port device team_slave_0 added [ 36.261773][ T3310] team0: Port device team_slave_1 added [ 36.303257][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.317399][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.324464][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.350466][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.366476][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.381401][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.391143][ T3303] team0: Port device team_slave_0 added [ 36.398073][ T3303] team0: Port device team_slave_1 added [ 36.404098][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.411088][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.437024][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.451352][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.460680][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.467871][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.475108][ T3299] bridge_slave_0: entered allmulticast mode [ 36.481726][ T3299] bridge_slave_0: entered promiscuous mode [ 36.503023][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.510093][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.536109][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.556333][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.563459][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.570767][ T3299] bridge_slave_1: entered allmulticast mode [ 36.577273][ T3299] bridge_slave_1: entered promiscuous mode [ 36.590280][ T3301] team0: Port device team_slave_0 added [ 36.600718][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.607795][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.633888][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.645304][ T3305] team0: Port device team_slave_0 added [ 36.651935][ T3305] team0: Port device team_slave_1 added [ 36.662891][ T3301] team0: Port device team_slave_1 added [ 36.678176][ T3310] hsr_slave_0: entered promiscuous mode [ 36.683962][ T3310] hsr_slave_1: entered promiscuous mode [ 36.700728][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.725221][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.756694][ T3303] hsr_slave_0: entered promiscuous mode [ 36.762859][ T3303] hsr_slave_1: entered promiscuous mode [ 36.768754][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.776307][ T3303] Cannot create hsr debugfs directory [ 36.782206][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.789266][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.815317][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.830811][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.837803][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.863757][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.891692][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.898697][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.925006][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.939013][ T3299] team0: Port device team_slave_0 added [ 36.944980][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.951961][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.977917][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.000198][ T3299] team0: Port device team_slave_1 added [ 37.051565][ T3305] hsr_slave_0: entered promiscuous mode [ 37.057771][ T3305] hsr_slave_1: entered promiscuous mode [ 37.063495][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.071262][ T3305] Cannot create hsr debugfs directory [ 37.079496][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.086462][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.112601][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.125344][ T3301] hsr_slave_0: entered promiscuous mode [ 37.131415][ T3301] hsr_slave_1: entered promiscuous mode [ 37.137242][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.144865][ T3301] Cannot create hsr debugfs directory [ 37.158114][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.165244][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.191277][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.270305][ T3299] hsr_slave_0: entered promiscuous mode [ 37.276241][ T3299] hsr_slave_1: entered promiscuous mode [ 37.282368][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.289970][ T3299] Cannot create hsr debugfs directory [ 37.377022][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.392314][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.402881][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.414362][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.458645][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.469226][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.478004][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.489296][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.505593][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.522442][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.532332][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.553734][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.562725][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.571778][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.580438][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.591573][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.619189][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.628415][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.644208][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.653677][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.696282][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.735975][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.760036][ T1632] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.767135][ T1632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.779183][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.791748][ T1632] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.798820][ T1632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.817559][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.826858][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.842598][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.858982][ T1632] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.866037][ T1632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.890331][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.897501][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.915668][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.925262][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.943155][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.959003][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.966081][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.975979][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.983098][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.007339][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.015583][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.022784][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.032503][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.039625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.065472][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.074180][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.081255][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.090335][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.097535][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.126729][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.137463][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.162552][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.180245][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.234754][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.246246][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.287639][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.313475][ T3303] veth0_vlan: entered promiscuous mode [ 38.330531][ T3303] veth1_vlan: entered promiscuous mode [ 38.367940][ T3303] veth0_macvtap: entered promiscuous mode [ 38.375387][ T3303] veth1_macvtap: entered promiscuous mode [ 38.409424][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.420413][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.449262][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.459057][ T3310] veth0_vlan: entered promiscuous mode [ 38.474845][ T3299] veth0_vlan: entered promiscuous mode [ 38.482724][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.491555][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.500391][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.509222][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.530188][ T3299] veth1_vlan: entered promiscuous mode [ 38.545936][ T3310] veth1_vlan: entered promiscuous mode [ 38.575853][ T3299] veth0_macvtap: entered promiscuous mode [ 38.591738][ T3305] veth0_vlan: entered promiscuous mode [ 38.601506][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.603538][ T3310] veth0_macvtap: entered promiscuous mode [ 38.624866][ T3299] veth1_macvtap: entered promiscuous mode [ 38.635353][ T3305] veth1_vlan: entered promiscuous mode [ 38.642376][ T3301] veth0_vlan: entered promiscuous mode [ 38.657413][ T3310] veth1_macvtap: entered promiscuous mode [ 38.675037][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.685658][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.696932][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.704751][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.715316][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.715436][ T3439] loop2: detected capacity change from 0 to 8192 [ 38.725173][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.742074][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.752739][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.767411][ T3305] veth0_macvtap: entered promiscuous mode [ 38.774484][ T3301] veth1_vlan: entered promiscuous mode [ 38.779095][ T3439] loop2: p1 < > p2 < p5 > p3 p4 [ 38.787983][ T3439] loop2: p3 start 83890176 is beyond EOD, truncated [ 38.788825][ T3301] veth0_macvtap: entered promiscuous mode [ 38.794660][ T3439] loop2: p4 size 16776960 extends beyond EOD, truncated [ 38.809137][ T3439] loop2: p5 size 16776960 extends beyond EOD, truncated [ 38.813969][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.826599][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.840490][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.840922][ T3000] loop2: p1 < > p2 < p5 > p3 p4 [ 38.852941][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.854029][ T3000] loop2: p3 start 83890176 is beyond EOD, [ 38.863694][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.863712][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.869545][ T3000] truncated [ 38.869553][ T3000] loop2: p4 size 16776960 extends beyond EOD, [ 38.879479][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.883556][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.889921][ T3000] truncated [ 38.891804][ T3000] loop2: p5 size 16776960 extends beyond EOD, [ 38.894058][ T3305] veth1_macvtap: entered promiscuous mode [ 38.899275][ T3000] truncated [ 38.912587][ T3301] veth1_macvtap: entered promiscuous mode [ 38.942388][ T3440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3440 comm=syz.2.3 [ 38.961906][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.970893][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.979630][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.988401][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.010077][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.020897][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.030858][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.041381][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.051475][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.062081][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.072864][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.095920][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.106456][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.116430][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.126927][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.137083][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.147666][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.159058][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.170684][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.179568][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.188465][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.197316][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.220868][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.229764][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.238584][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247392][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.254242][ T3446] loop2: detected capacity change from 0 to 512 [ 39.269642][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.280217][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.290105][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.300586][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.310471][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.320929][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.330821][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.341372][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.353233][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.367739][ T3448] loop2: detected capacity change from 0 to 512 [ 39.374298][ T3448] EXT4-fs: Ignoring removed nobh option [ 39.380121][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.390648][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.392111][ T3448] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.400609][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.424411][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.434500][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.445009][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.451469][ T3448] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #3: comm syz.2.8: corrupted inode contents [ 39.454947][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.468650][ T3448] EXT4-fs (loop2): Remounting filesystem read-only [ 39.476840][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.483797][ T3448] __quota_error: 36 callbacks suppressed [ 39.483815][ T3448] Quota error (device loop2): write_blk: dquota write failed [ 39.496826][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.499503][ T3448] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 39.523869][ T3448] EXT4-fs (loop2): 1 truncate cleaned up [ 39.529403][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.530917][ T3448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.538363][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.550850][ T3448] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 39.559520][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.567170][ T3448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.574728][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.621106][ T3448] syz.2.8 (3448) used greatest stack depth: 9864 bytes left [ 39.660462][ T29] audit: type=1326 audit(1740906930.660:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a57d169 code=0x7ffc0000 [ 39.683710][ T29] audit: type=1326 audit(1740906930.660:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a57d169 code=0x7ffc0000 [ 39.774727][ T3463] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 39.784537][ T3464] loop0: detected capacity change from 0 to 256 [ 39.792581][ T3464] FAT-fs (loop0): bogus number of FAT sectors [ 39.795624][ T3467] FAULT_INJECTION: forcing a failure. [ 39.795624][ T3467] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.798720][ T3464] FAT-fs (loop0): Can't find a valid FAT filesystem [ 39.818647][ T3467] CPU: 1 UID: 0 PID: 3467 Comm: syz.4.5 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 39.818675][ T3467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.818694][ T3467] Call Trace: [ 39.818702][ T3467] [ 39.818710][ T3467] dump_stack_lvl+0xf2/0x150 [ 39.818781][ T3467] dump_stack+0x15/0x1a [ 39.818808][ T3467] should_fail_ex+0x24a/0x260 [ 39.818844][ T3467] should_fail+0xb/0x10 [ 39.818915][ T3467] should_fail_usercopy+0x1a/0x20 [ 39.818954][ T3467] strncpy_from_user+0x25/0x210 [ 39.818982][ T3467] ? __kmalloc_cache_noprof+0x186/0x320 [ 39.819013][ T3467] __se_sys_memfd_create+0x218/0x5a0 [ 39.819059][ T3467] __x64_sys_memfd_create+0x31/0x40 [ 39.819090][ T3467] x64_sys_call+0x2d4c/0x2dc0 [ 39.819188][ T3467] do_syscall_64+0xc9/0x1c0 [ 39.819221][ T3467] ? clear_bhb_loop+0x55/0xb0 [ 39.819250][ T3467] ? clear_bhb_loop+0x55/0xb0 [ 39.819329][ T3467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.819396][ T3467] RIP: 0033:0x7fd6f459d169 [ 39.819442][ T3467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.819459][ T3467] RSP: 002b:00007fd6f2c06e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 39.819477][ T3467] RAX: ffffffffffffffda RBX: 0000000000000513 RCX: 00007fd6f459d169 [ 39.819488][ T3467] RDX: 00007fd6f2c06ef0 RSI: 0000000000000000 RDI: 00007fd6f461ec3c [ 39.819579][ T3467] RBP: 0000400000000380 R08: 00007fd6f2c06bb7 R09: 00007fd6f2c06e40 [ 39.819595][ T3467] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000080 [ 39.819609][ T3467] R13: 00007fd6f2c06ef0 R14: 00007fd6f2c06eb0 R15: 0000400000000000 [ 39.819631][ T3467] [ 39.912555][ T3468] loop2: detected capacity change from 0 to 512 [ 40.017594][ T29] audit: type=1400 audit(1740906930.710:129): avc: denied { create } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.037874][ T29] audit: type=1400 audit(1740906930.710:130): avc: denied { write } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.058089][ T29] audit: type=1326 audit(1740906930.720:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e8a57d169 code=0x7ffc0000 [ 40.081359][ T29] audit: type=1326 audit(1740906930.720:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a57d169 code=0x7ffc0000 [ 40.104482][ T29] audit: type=1326 audit(1740906930.720:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e8a57d169 code=0x7ffc0000 [ 40.127866][ T29] audit: type=1326 audit(1740906930.720:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a57d169 code=0x7ffc0000 [ 40.161801][ T3471] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 40.272167][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 40.283286][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 40.303550][ T3468] EXT4-fs (loop2): mount failed [ 40.349577][ T3468] loop2: detected capacity change from 0 to 512 [ 40.471046][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 40.511631][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 40.574555][ T3495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.634116][ T3468] EXT4-fs (loop2): mount failed [ 40.836161][ T3508] loop3: detected capacity change from 0 to 1024 [ 40.848285][ T3508] EXT4-fs: Ignoring removed orlov option [ 40.854146][ T3508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.887590][ T3468] loop2: detected capacity change from 0 to 512 [ 40.918048][ T3508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.918233][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 40.953041][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 40.969600][ T3508] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.978358][ T3468] EXT4-fs (loop2): mount failed [ 40.992517][ T3468] loop2: detected capacity change from 0 to 512 [ 41.103075][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 41.194381][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 41.249682][ T3468] EXT4-fs (loop2): mount failed [ 41.316220][ T3468] loop2: detected capacity change from 0 to 512 [ 41.426549][ T3587] loop4: detected capacity change from 0 to 164 [ 41.505346][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 41.546099][ T3587] loop4: detected capacity change from 0 to 512 [ 41.556090][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 41.580614][ T3468] EXT4-fs (loop2): mount failed [ 41.590531][ T3468] loop2: detected capacity change from 0 to 512 [ 41.638912][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 41.660145][ T3616] FAULT_INJECTION: forcing a failure. [ 41.660145][ T3616] name failslab, interval 1, probability 0, space 0, times 1 [ 41.661326][ T3587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.672807][ T3616] CPU: 0 UID: 0 PID: 3616 Comm: syz.3.20 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 41.672835][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.672887][ T3616] Call Trace: [ 41.672897][ T3616] [ 41.672907][ T3616] dump_stack_lvl+0xf2/0x150 [ 41.672950][ T3616] dump_stack+0x15/0x1a [ 41.672977][ T3616] should_fail_ex+0x24a/0x260 [ 41.673049][ T3616] should_failslab+0x8f/0xb0 [ 41.673087][ T3616] kmem_cache_alloc_noprof+0x52/0x320 [ 41.673129][ T3616] ? security_file_alloc+0x32/0x100 [ 41.673164][ T3616] security_file_alloc+0x32/0x100 [ 41.673257][ T3616] init_file+0x5d/0x1b0 [ 41.673281][ T3616] alloc_empty_file+0xea/0x200 [ 41.673307][ T3616] dentry_open+0x2d/0x90 [ 41.673328][ T3616] __se_sys_open_tree+0x1a7/0x700 [ 41.673364][ T3616] ? fput+0x1c4/0x200 [ 41.673387][ T3616] ? ksys_write+0x176/0x1b0 [ 41.673494][ T3616] __x64_sys_open_tree+0x43/0x50 [ 41.673529][ T3616] x64_sys_call+0x2011/0x2dc0 [ 41.673562][ T3616] do_syscall_64+0xc9/0x1c0 [ 41.673600][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 41.673711][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 41.673763][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.673797][ T3616] RIP: 0033:0x7fc6d673d169 [ 41.673817][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.673840][ T3616] RSP: 002b:00007fc6d4da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 41.673863][ T3616] RAX: ffffffffffffffda RBX: 00007fc6d6955fa0 RCX: 00007fc6d673d169 [ 41.673898][ T3616] RDX: 0000000000000000 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 41.673915][ T3616] RBP: 00007fc6d4da7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.673930][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.673951][ T3616] R13: 0000000000000001 R14: 00007fc6d6955fa0 R15: 00007ffcc0259a48 [ 41.673973][ T3616] [ 41.776561][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 41.784808][ T3587] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.800801][ T3468] EXT4-fs (loop2): mount failed [ 41.925595][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 41.934467][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.941911][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.943548][ T3510] syz.1.16 (3510) used greatest stack depth: 6368 bytes left [ 41.953584][ T3626] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 41.966421][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.973942][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.983716][ T3468] loop2: detected capacity change from 0 to 512 [ 41.991706][ T3625] loop3: detected capacity change from 0 to 512 [ 41.998623][ T3625] journal_path: Lookup failure for './file0/../file0' [ 42.005830][ T3625] EXT4-fs: error: could not find journal device path [ 42.028820][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 42.048785][ T3624] netlink: 'syz.0.24': attribute type 4 has an invalid length. [ 42.060286][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 42.062181][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.088674][ T3468] EXT4-fs (loop2): mount failed [ 42.111063][ T3468] loop2: detected capacity change from 0 to 512 [ 42.124908][ T3635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3635 comm=syz.4.26 [ 42.140674][ T3635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3635 comm=syz.4.26 [ 42.154400][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 42.170806][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 42.177933][ T3631] bond_slave_1: mtu less than device minimum [ 42.200240][ T3468] EXT4-fs (loop2): mount failed [ 42.217277][ T3468] loop2: detected capacity change from 0 to 512 [ 42.238514][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 42.263174][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 42.292190][ T3468] EXT4-fs (loop2): mount failed [ 42.307303][ T3648] xt_NFQUEUE: number of total queues is 0 [ 42.314836][ T3468] loop2: detected capacity change from 0 to 512 [ 42.351246][ T3648] ======================================================= [ 42.351246][ T3648] WARNING: The mand mount option has been deprecated and [ 42.351246][ T3648] and is ignored by this kernel. Remove the mand [ 42.351246][ T3648] option from the mount to silence this warning. [ 42.351246][ T3648] ======================================================= [ 42.354769][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 42.400776][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 42.416060][ T3648] capability: warning: `syz.1.30' uses 32-bit capabilities (legacy support in use) [ 42.430041][ T3468] EXT4-fs (loop2): mount failed [ 42.517849][ T3468] loop2: detected capacity change from 0 to 512 [ 42.548666][ T3468] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.10: Bad quota inum: 1, type: 2 [ 42.560661][ T3468] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 42.695429][ T3669] netlink: 'syz.1.36': attribute type 13 has an invalid length. [ 42.827965][ T3669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.960226][ T3468] EXT4-fs (loop2): mount failed [ 43.101171][ T3675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 43.116575][ T3675] loop2: detected capacity change from 0 to 1024 [ 43.125536][ T3675] EXT4-fs: Ignoring removed orlov option [ 43.131344][ T3675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.158525][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.171853][ T3675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.580546][ T3758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.597492][ T3758] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 43.632810][ T3758] bond0: (slave sit0): Error -95 calling set_mac_address [ 43.682615][ T3791] xt_NFQUEUE: number of total queues is 0 [ 43.785568][ T3809] netlink: 'syz.3.46': attribute type 4 has an invalid length. [ 43.822326][ T3817] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.875032][ T3377] IPVS: starting estimator thread 0... [ 43.944663][ T3838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.49'. [ 43.997055][ T3830] IPVS: using max 1872 ests per chain, 93600 per kthread [ 44.059863][ T3853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3853 comm=syz.3.55 [ 44.108455][ T3856] loop2: detected capacity change from 0 to 2048 [ 44.128169][ T3853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3853 comm=syz.3.55 [ 44.178269][ T3867] loop0: detected capacity change from 0 to 1024 [ 44.187119][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.188233][ T3867] EXT4-fs: Ignoring removed orlov option [ 44.205625][ T3867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.258803][ T3867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.293623][ T3856] syz_tun: entered allmulticast mode [ 44.302464][ T3854] syz_tun: left allmulticast mode [ 44.345153][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.394048][ T3885] xt_NFQUEUE: number of total queues is 0 [ 44.454389][ T3887] xt_NFQUEUE: number of total queues is 0 [ 44.456689][ C0] hrtimer: interrupt took 37582 ns [ 44.530737][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 44.530753][ T29] audit: type=1326 audit(1740906935.530:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3858 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f459d169 code=0x7ffc0000 [ 44.574312][ T29] audit: type=1326 audit(1740906935.530:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3858 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f459d169 code=0x7ffc0000 [ 44.655921][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 44.664806][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.672321][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.719981][ T3900] loop2: detected capacity change from 0 to 512 [ 44.747741][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.755599][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.788244][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.827747][ T3900] journal_path: Lookup failure for './file0/../file0' [ 44.834674][ T3900] EXT4-fs: error: could not find journal device path [ 44.860645][ T3907] loop0: detected capacity change from 0 to 1024 [ 44.887751][ T3909] netlink: 'syz.4.65': attribute type 4 has an invalid length. [ 44.905958][ T3907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.926290][ T29] audit: type=1400 audit(1740906935.920:486): avc: denied { append } for pid=3904 comm="syz.0.64" path="/15/file1/blkio.bfq.avg_queue_size" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.968997][ T29] audit: type=1400 audit(1740906935.970:487): avc: denied { create } for pid=3912 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.000964][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.010876][ T29] audit: type=1400 audit(1740906936.000:488): avc: denied { bind } for pid=3912 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.030212][ T29] audit: type=1400 audit(1740906936.000:489): avc: denied { write } for pid=3912 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.060383][ T3913] loop1: detected capacity change from 0 to 512 [ 45.067199][ T3913] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 45.079848][ T3917] xt_NFQUEUE: number of total queues is 0 [ 45.097018][ T29] audit: type=1400 audit(1740906936.100:490): avc: denied { setopt } for pid=3912 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.121362][ T29] audit: type=1326 audit(1740906936.120:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 45.144637][ T29] audit: type=1326 audit(1740906936.120:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 45.145915][ T3922] xt_NFQUEUE: number of total queues is 0 [ 45.167813][ T29] audit: type=1326 audit(1740906936.120:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 45.175293][ T3921] usb usb8: usbfs: process 3921 (syz.4.73) did not claim interface 0 before use [ 45.235978][ T3921] syz_tun: entered allmulticast mode [ 45.242380][ T3921] syz_tun: left allmulticast mode [ 45.314930][ T3930] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 45.325612][ T3930] loop2: detected capacity change from 0 to 1024 [ 45.332834][ T3930] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.343852][ T3930] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.353782][ T3930] JBD2: no valid journal superblock found [ 45.360133][ T3930] EXT4-fs (loop2): Could not load journal inode [ 45.493894][ T3946] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 45.502193][ T3946] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 45.512470][ T3946] lo speed is unknown, defaulting to 1000 [ 45.520273][ T3946] lo speed is unknown, defaulting to 1000 [ 45.533261][ T3946] lo speed is unknown, defaulting to 1000 [ 45.570733][ T3946] infiniband sz1: set active [ 45.575494][ T3946] infiniband sz1: added lo [ 45.580070][ T8] lo speed is unknown, defaulting to 1000 [ 45.601073][ T3946] RDS/IB: sz1: added [ 45.610839][ T3946] smc: adding ib device sz1 with port count 1 [ 45.614739][ T3952] loop1: detected capacity change from 0 to 1024 [ 45.617095][ T3946] smc: ib device sz1 port 1 has pnetid [ 45.617128][ T3377] lo speed is unknown, defaulting to 1000 [ 45.635629][ T3946] lo speed is unknown, defaulting to 1000 [ 45.649483][ T3952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.669436][ T3946] lo speed is unknown, defaulting to 1000 [ 45.703587][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.705262][ T3946] lo speed is unknown, defaulting to 1000 [ 45.730846][ T3957] netlink: 'syz.1.81': attribute type 4 has an invalid length. [ 45.758107][ T3946] lo speed is unknown, defaulting to 1000 [ 45.792060][ T3946] lo speed is unknown, defaulting to 1000 [ 45.817030][ T3959] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 45.825354][ T3959] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 45.835350][ T3959] rdma_rxe: rxe_newlink: failed to add lo [ 45.874799][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 45.883884][ T3961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.891597][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.899284][ T3961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.906789][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.930565][ T3968] loop1: detected capacity change from 0 to 512 [ 45.932677][ T3969] wg1 speed is unknown, defaulting to 1000 [ 45.938284][ T3968] journal_path: Lookup failure for './file0/../file0' [ 45.942803][ T3969] wg1 speed is unknown, defaulting to 1000 [ 45.949668][ T3968] EXT4-fs: error: could not find journal device path [ 45.955828][ T3969] wg1 speed is unknown, defaulting to 1000 [ 45.970129][ T3969] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.977879][ T3969] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 45.988818][ T3969] wg1 speed is unknown, defaulting to 1000 [ 45.995178][ T3969] wg1 speed is unknown, defaulting to 1000 [ 46.001748][ T3969] wg1 speed is unknown, defaulting to 1000 [ 46.008037][ T3969] wg1 speed is unknown, defaulting to 1000 [ 46.016118][ T3969] wg1 speed is unknown, defaulting to 1000 [ 46.031997][ T3971] loop3: detected capacity change from 0 to 1024 [ 46.052875][ T3971] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 46.063935][ T3971] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 46.094201][ T3971] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.117407][ T3971] EXT4-fs (loop3): invalid journal inode [ 46.123181][ T3971] EXT4-fs (loop3): can't get journal size [ 46.137740][ T3977] xt_NFQUEUE: number of total queues is 0 [ 46.208895][ T3983] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 46.218956][ T3971] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.85: blocks 2-2 from inode overlap system zone [ 46.325476][ T3971] EXT4-fs (loop3): failed to initialize system zone (-117) [ 46.340218][ T3971] EXT4-fs (loop3): mount failed [ 46.875317][ T4007] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 46.977262][ T4009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4009 comm=syz.0.98 [ 47.000250][ T4009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4009 comm=syz.0.98 [ 47.049584][ T4010] loop1: detected capacity change from 0 to 512 [ 47.056122][ T4010] EXT4-fs: Ignoring removed i_version option [ 47.062177][ T4010] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.078709][ T4010] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.103089][ T4010] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.116510][ T4010] EXT4-fs (loop1): 1 truncate cleaned up [ 47.122689][ T4010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.152771][ T4020] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 47.161158][ T4020] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 47.170243][ T4020] rdma_rxe: rxe_newlink: failed to add lo [ 47.203914][ T4023] loop3: detected capacity change from 0 to 1024 [ 47.215438][ T4023] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 47.226496][ T4023] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 47.236237][ T4026] loop4: detected capacity change from 0 to 128 [ 47.240643][ T4023] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.252271][ T4026] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 47.256701][ T4023] EXT4-fs (loop3): invalid journal inode [ 47.260252][ T4026] FAT-fs (loop4): Filesystem has been set read-only [ 47.266009][ T4023] EXT4-fs (loop3): can't get journal size [ 47.281793][ T4023] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.103: blocks 2-2 from inode overlap system zone [ 47.296043][ T4023] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.303732][ T4023] EXT4-fs (loop3): mount failed [ 47.304309][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 47.321970][ T4028] loop2: detected capacity change from 0 to 512 [ 47.329211][ T4028] journal_path: Lookup failure for './file0/../file0' [ 47.336127][ T4028] EXT4-fs: error: could not find journal device path [ 47.394390][ T4038] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 47.401043][ T4038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.408741][ T4038] vhci_hcd vhci_hcd.0: Device attached [ 47.416314][ T4041] vhci_hcd: cannot find the pending unlink 5 [ 47.427475][ T4044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4044 comm=syz.2.107 [ 47.428193][ T4041] vhci_hcd: connection closed [ 47.440883][ T3574] vhci_hcd: stop threads [ 47.441860][ T4044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4044 comm=syz.2.107 [ 47.445591][ T3574] vhci_hcd: release socket [ 47.466960][ T3574] vhci_hcd: disconnect device [ 47.477635][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4047 comm=syz.2.108 [ 47.492142][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.2.108 [ 47.546942][ T4052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4052 comm=syz.2.110 [ 47.560790][ T4052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4052 comm=syz.2.110 [ 47.600231][ T4055] loop2: detected capacity change from 0 to 1024 [ 47.607749][ T4055] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.618794][ T4055] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.628947][ T4055] JBD2: no valid journal superblock found [ 47.634853][ T4055] EXT4-fs (loop2): Could not load journal inode [ 47.646723][ T4055] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 47.694740][ T4057] FAULT_INJECTION: forcing a failure. [ 47.694740][ T4057] name failslab, interval 1, probability 0, space 0, times 0 [ 47.707533][ T4057] CPU: 0 UID: 0 PID: 4057 Comm: syz.2.112 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 47.707581][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.707594][ T4057] Call Trace: [ 47.707601][ T4057] [ 47.707608][ T4057] dump_stack_lvl+0xf2/0x150 [ 47.707649][ T4057] dump_stack+0x15/0x1a [ 47.707675][ T4057] should_fail_ex+0x24a/0x260 [ 47.707708][ T4057] should_failslab+0x8f/0xb0 [ 47.707769][ T4057] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 47.707798][ T4057] ? sidtab_sid2str_get+0xb8/0x140 [ 47.707849][ T4057] kmemdup_noprof+0x2b/0x70 [ 47.707879][ T4057] sidtab_sid2str_get+0xb8/0x140 [ 47.707910][ T4057] security_sid_to_context_core+0x1eb/0x2f0 [ 47.708023][ T4057] security_sid_to_context+0x27/0x30 [ 47.708069][ T4057] selinux_lsmprop_to_secctx+0x68/0xf0 [ 47.708100][ T4057] security_lsmprop_to_secctx+0x40/0x80 [ 47.708127][ T4057] audit_log_task_context+0x76/0x180 [ 47.708172][ T4057] audit_log_task+0xf9/0x250 [ 47.708215][ T4057] audit_seccomp+0x68/0x130 [ 47.708244][ T4057] __seccomp_filter+0x6fa/0x1180 [ 47.708297][ T4057] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.708328][ T4057] ? vfs_write+0x644/0x920 [ 47.708366][ T4057] __secure_computing+0x9f/0x1c0 [ 47.708429][ T4057] syscall_trace_enter+0xd1/0x1f0 [ 47.708453][ T4057] ? fpregs_assert_state_consistent+0x83/0xa0 [ 47.708481][ T4057] do_syscall_64+0xaa/0x1c0 [ 47.708593][ T4057] ? clear_bhb_loop+0x55/0xb0 [ 47.708631][ T4057] ? clear_bhb_loop+0x55/0xb0 [ 47.708657][ T4057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.708683][ T4057] RIP: 0033:0x7ff74661d169 [ 47.708729][ T4057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.708754][ T4057] RSP: 002b:00007ff744c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 47.708775][ T4057] RAX: ffffffffffffffda RBX: 00007ff746835fa0 RCX: 00007ff74661d169 [ 47.708787][ T4057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000040 [ 47.708798][ T4057] RBP: 00007ff744c87090 R08: 0000000000000000 R09: 0000000000000000 [ 47.708809][ T4057] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 47.708820][ T4057] R13: 0000000000000000 R14: 00007ff746835fa0 R15: 00007fffa17f1bb8 [ 47.708913][ T4057] [ 47.979878][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.008215][ T4062] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 48.016592][ T4062] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 48.025697][ T4062] rdma_rxe: rxe_newlink: failed to add lo [ 48.054641][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 48.058386][ T4071] loop0: detected capacity change from 0 to 1024 [ 48.069883][ T4061] loop2: detected capacity change from 0 to 512 [ 48.078336][ T4061] journal_path: Lookup failure for './file0/../file0' [ 48.085148][ T4061] EXT4-fs: error: could not find journal device path [ 48.099368][ T4071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.114177][ T4074] xt_NFQUEUE: number of total queues is 0 [ 48.217305][ T4079] lo speed is unknown, defaulting to 1000 [ 48.240866][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.316441][ T4079] wg1 speed is unknown, defaulting to 1000 [ 48.362447][ T4092] lo speed is unknown, defaulting to 1000 [ 48.440829][ T4092] wg1 speed is unknown, defaulting to 1000 [ 48.840982][ T4097] team0 (unregistering): Port device team_slave_0 removed [ 48.868372][ T4097] team0 (unregistering): Port device team_slave_1 removed [ 48.902990][ T4084] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 48.915991][ T4100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.936206][ T4100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.951870][ T4084] bond0: (slave sit0): Error -95 calling set_mac_address [ 49.008122][ T4103] FAULT_INJECTION: forcing a failure. [ 49.008122][ T4103] name failslab, interval 1, probability 0, space 0, times 0 [ 49.020978][ T4103] CPU: 0 UID: 0 PID: 4103 Comm: syz.2.124 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 49.021064][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.021076][ T4103] Call Trace: [ 49.021084][ T4103] [ 49.021093][ T4103] dump_stack_lvl+0xf2/0x150 [ 49.021126][ T4103] dump_stack+0x15/0x1a [ 49.021152][ T4103] should_fail_ex+0x24a/0x260 [ 49.021187][ T4103] should_failslab+0x8f/0xb0 [ 49.021265][ T4103] kmem_cache_alloc_node_noprof+0x59/0x320 [ 49.021293][ T4103] ? __alloc_skb+0x10b/0x310 [ 49.021327][ T4103] __alloc_skb+0x10b/0x310 [ 49.021354][ T4103] netlink_alloc_large_skb+0xad/0xe0 [ 49.021428][ T4103] netlink_sendmsg+0x3b4/0x6e0 [ 49.021473][ T4103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.021549][ T4103] __sock_sendmsg+0x140/0x180 [ 49.021581][ T4103] ____sys_sendmsg+0x326/0x4b0 [ 49.021615][ T4103] __sys_sendmsg+0x19d/0x230 [ 49.021725][ T4103] __x64_sys_sendmsg+0x46/0x50 [ 49.021753][ T4103] x64_sys_call+0x2734/0x2dc0 [ 49.021850][ T4103] do_syscall_64+0xc9/0x1c0 [ 49.021889][ T4103] ? clear_bhb_loop+0x55/0xb0 [ 49.021923][ T4103] ? clear_bhb_loop+0x55/0xb0 [ 49.022002][ T4103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.022029][ T4103] RIP: 0033:0x7ff74661d169 [ 49.022045][ T4103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.022064][ T4103] RSP: 002b:00007ff744c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.022147][ T4103] RAX: ffffffffffffffda RBX: 00007ff746835fa0 RCX: 00007ff74661d169 [ 49.022308][ T4103] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 49.022320][ T4103] RBP: 00007ff744c87090 R08: 0000000000000000 R09: 0000000000000000 [ 49.022334][ T4103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.022403][ T4103] R13: 0000000000000000 R14: 00007ff746835fa0 R15: 00007fffa17f1bb8 [ 49.022426][ T4103] [ 49.472877][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 49.501872][ T4110] lo speed is unknown, defaulting to 1000 [ 49.555712][ T4110] wg1 speed is unknown, defaulting to 1000 [ 50.062701][ T4113] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 50.071143][ T4113] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 50.170064][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 50.180845][ T4119] rdma_rxe: rxe_newlink: failed to add lo [ 50.226121][ T4115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.233778][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.309851][ T4121] loop4: detected capacity change from 0 to 512 [ 50.321997][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 50.322013][ T29] audit: type=1400 audit(1740906941.320:697): avc: denied { getopt } for pid=4122 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.363757][ T4121] journal_path: Lookup failure for './file0/../file0' [ 50.370641][ T4121] EXT4-fs: error: could not find journal device path [ 50.417861][ T4115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.425306][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.462251][ T4128] xt_NFQUEUE: number of total queues is 0 [ 50.516847][ T4130] xt_NFQUEUE: number of total queues is 0 [ 50.580576][ T4139] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 50.689976][ T4143] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 50.824560][ T4139] loop2: detected capacity change from 0 to 512 [ 50.831244][ T4139] EXT4-fs: Ignoring removed i_version option [ 50.837331][ T4139] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.867980][ T4148] loop1: detected capacity change from 0 to 512 [ 50.874564][ T4148] EXT4-fs: Ignoring removed i_version option [ 50.882059][ T4148] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.889130][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 50.895954][ T4139] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.900926][ T4148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.922895][ T4148] EXT4-fs (loop1): 1 truncate cleaned up [ 50.929206][ T4148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.958372][ T4139] EXT4-fs (loop2): 1 truncate cleaned up [ 50.964609][ T4139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.113620][ T4155] netlink: 'syz.0.137': attribute type 13 has an invalid length. [ 51.143063][ T4155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.309868][ T29] audit: type=1400 audit(1740906942.310:698): avc: denied { setopt } for pid=4156 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.315444][ T4157] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 51.330039][ T29] audit: type=1400 audit(1740906942.310:699): avc: denied { bind } for pid=4156 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.356386][ T29] audit: type=1400 audit(1740906942.310:700): avc: denied { name_bind } for pid=4156 comm="syz.3.138" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.377988][ T29] audit: type=1400 audit(1740906942.310:701): avc: denied { node_bind } for pid=4156 comm="syz.3.138" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 51.399679][ T29] audit: type=1400 audit(1740906942.310:702): avc: denied { write } for pid=4156 comm="syz.3.138" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.448735][ T29] audit: type=1326 audit(1740906942.450:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 51.472147][ T29] audit: type=1326 audit(1740906942.450:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 51.525848][ T29] audit: type=1326 audit(1740906942.450:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 51.549225][ T29] audit: type=1326 audit(1740906942.450:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 51.574927][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.590086][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.599219][ T4165] FAULT_INJECTION: forcing a failure. [ 51.599219][ T4165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.612375][ T4165] CPU: 0 UID: 0 PID: 4165 Comm: syz.4.142 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 51.612466][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.612558][ T4165] Call Trace: [ 51.612565][ T4165] [ 51.612574][ T4165] dump_stack_lvl+0xf2/0x150 [ 51.612608][ T4165] dump_stack+0x15/0x1a [ 51.612661][ T4165] should_fail_ex+0x24a/0x260 [ 51.612698][ T4165] should_fail+0xb/0x10 [ 51.612729][ T4165] should_fail_usercopy+0x1a/0x20 [ 51.612840][ T4165] _copy_from_iter+0xd5/0xd00 [ 51.612879][ T4165] ? alloc_pages_mpol+0x208/0x260 [ 51.612932][ T4165] copy_page_from_iter+0x14f/0x280 [ 51.612975][ T4165] tun_get_user+0x68b/0x25c0 [ 51.613060][ T4165] ? _parse_integer+0x27/0x30 [ 51.613100][ T4165] ? ref_tracker_alloc+0x1f5/0x2f0 [ 51.613142][ T4165] tun_chr_write_iter+0x188/0x240 [ 51.613170][ T4165] vfs_write+0x77b/0x920 [ 51.613203][ T4165] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 51.613301][ T4165] ksys_write+0xe8/0x1b0 [ 51.613335][ T4165] __x64_sys_write+0x42/0x50 [ 51.613363][ T4165] x64_sys_call+0x287e/0x2dc0 [ 51.613389][ T4165] do_syscall_64+0xc9/0x1c0 [ 51.613427][ T4165] ? clear_bhb_loop+0x55/0xb0 [ 51.613525][ T4165] ? clear_bhb_loop+0x55/0xb0 [ 51.613557][ T4165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.613589][ T4165] RIP: 0033:0x7fd6f459bc1f [ 51.613604][ T4165] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 51.613621][ T4165] RSP: 002b:00007fd6f2c07000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 51.613669][ T4165] RAX: ffffffffffffffda RBX: 00007fd6f47b5fa0 RCX: 00007fd6f459bc1f [ 51.613683][ T4165] RDX: 000000000000007e RSI: 0000400000000800 RDI: 00000000000000c8 [ 51.613697][ T4165] RBP: 00007fd6f2c07090 R08: 0000000000000000 R09: 0000000000000000 [ 51.613711][ T4165] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 51.613724][ T4165] R13: 0000000000000000 R14: 00007fd6f47b5fa0 R15: 00007ffc4c8e40e8 [ 51.613746][ T4165] [ 51.850587][ T4173] xt_NFQUEUE: number of total queues is 0 [ 51.889565][ T4177] xt_NFQUEUE: number of total queues is 0 [ 51.916524][ T4178] netlink: 'syz.2.140': attribute type 11 has an invalid length. [ 51.924819][ T4183] netlink: 56 bytes leftover after parsing attributes in process `syz.4.148'. [ 51.950546][ T4183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.148'. [ 51.971353][ T4167] loop2: detected capacity change from 0 to 2048 [ 52.098062][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 52.106985][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 52.121319][ T4183] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 52.132545][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 52.161417][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 52.170782][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 52.217418][ T4193] lo speed is unknown, defaulting to 1000 [ 52.309734][ T4193] wg1 speed is unknown, defaulting to 1000 [ 52.999581][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 53.018446][ T4167] GPT:first_usable_lbas don't match. [ 53.023778][ T4167] GPT:34 != 290 [ 53.027331][ T4167] GPT: Use GNU Parted to correct GPT errors. [ 53.033490][ T4167] loop2: p1 p2 p3 [ 53.118356][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 53.132613][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 53.816610][ T4201] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.979443][ T4205] loop1: detected capacity change from 0 to 512 [ 53.986091][ T4205] EXT4-fs: Ignoring removed i_version option [ 53.992171][ T4205] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.999054][ T4205] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.072072][ T4205] EXT4-fs (loop1): 1 truncate cleaned up [ 54.079659][ T4205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.188907][ T4218] xt_NFQUEUE: number of total queues is 0 [ 54.229391][ T4223] xt_NFQUEUE: number of total queues is 0 [ 54.268052][ T4228] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 54.299530][ T4227] lo speed is unknown, defaulting to 1000 [ 54.334376][ T4227] wg1 speed is unknown, defaulting to 1000 [ 54.401193][ T4227] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 54.411981][ T4227] bond0: (slave sit0): Error -95 calling set_mac_address [ 54.471922][ T4230] loop2: detected capacity change from 0 to 512 [ 54.478723][ T4230] EXT4-fs: Ignoring removed i_version option [ 54.484754][ T4230] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.492083][ T4230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.503634][ T4230] EXT4-fs (loop2): 1 truncate cleaned up [ 54.509794][ T4230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.686359][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.858898][ T4241] GUP no longer grows the stack in syz.1.165 (4241): 400000004000-400000008000 (400000002000) [ 54.869675][ T4241] CPU: 1 UID: 0 PID: 4241 Comm: syz.1.165 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 54.869711][ T4241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.869762][ T4241] Call Trace: [ 54.869769][ T4241] [ 54.869778][ T4241] dump_stack_lvl+0xf2/0x150 [ 54.869807][ T4241] dump_stack+0x15/0x1a [ 54.869828][ T4241] __get_user_pages+0x1de5/0x2350 [ 54.869863][ T4241] ? __rcu_read_unlock+0x4e/0x70 [ 54.869944][ T4241] get_user_pages_remote+0x1df/0x790 [ 54.869978][ T4241] __access_remote_vm+0x15b/0x580 [ 54.870008][ T4241] access_remote_vm+0x34/0x50 [ 54.870029][ T4241] proc_pid_cmdline_read+0x3e5/0x6b0 [ 54.870097][ T4241] vfs_readv+0x3e2/0x660 [ 54.870116][ T4241] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 54.870154][ T4241] __x64_sys_preadv+0xf4/0x1c0 [ 54.870185][ T4241] x64_sys_call+0x2680/0x2dc0 [ 54.870303][ T4241] do_syscall_64+0xc9/0x1c0 [ 54.870336][ T4241] ? clear_bhb_loop+0x55/0xb0 [ 54.870364][ T4241] ? clear_bhb_loop+0x55/0xb0 [ 54.870435][ T4241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.870461][ T4241] RIP: 0033:0x7f0e8a57d169 [ 54.870477][ T4241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.870495][ T4241] RSP: 002b:00007f0e88ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 54.870513][ T4241] RAX: ffffffffffffffda RBX: 00007f0e8a796160 RCX: 00007f0e8a57d169 [ 54.870526][ T4241] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000009 [ 54.870537][ T4241] RBP: 00007f0e8a5fe2a0 R08: 0000000000000000 R09: 0000000000000000 [ 54.870592][ T4241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.870604][ T4241] R13: 0000000000000000 R14: 00007f0e8a796160 R15: 00007ffec0be63e8 [ 54.870628][ T4241] [ 55.146850][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.265624][ T4258] xt_NFQUEUE: number of total queues is 0 [ 55.270066][ T4257] xt_NFQUEUE: number of total queues is 0 [ 55.340327][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 55.340344][ T29] audit: type=1326 audit(1740906946.340:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.372199][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.375693][ T29] audit: type=1326 audit(1740906946.370:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.406188][ T29] audit: type=1326 audit(1740906946.370:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.429794][ T29] audit: type=1326 audit(1740906946.370:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.458720][ T29] audit: type=1326 audit(1740906946.430:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.482066][ T29] audit: type=1326 audit(1740906946.430:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.505410][ T29] audit: type=1326 audit(1740906946.430:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.528770][ T29] audit: type=1326 audit(1740906946.430:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.552125][ T29] audit: type=1326 audit(1740906946.430:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.575462][ T29] audit: type=1326 audit(1740906946.430:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d673d169 code=0x7ffc0000 [ 55.659749][ T4264] lo speed is unknown, defaulting to 1000 [ 55.695984][ T4264] wg1 speed is unknown, defaulting to 1000 [ 55.703053][ T4272] siw: device registration error -23 [ 55.715514][ T4273] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 55.726651][ T4273] bond0: (slave sit0): Error -95 calling set_mac_address [ 55.751106][ T4272] loop0: detected capacity change from 0 to 1024 [ 55.768563][ T4272] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 55.779646][ T4272] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 55.790581][ T4272] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.801225][ T4272] EXT4-fs (loop0): invalid journal inode [ 55.825295][ T4275] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 55.833548][ T4275] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 55.843463][ T4275] rdma_rxe: rxe_newlink: failed to add lo [ 55.850037][ T4272] EXT4-fs (loop0): can't get journal size [ 55.880800][ T4272] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.177: blocks 2-2 from inode overlap system zone [ 55.936950][ T4272] EXT4-fs (loop0): failed to initialize system zone (-117) [ 55.958537][ T4272] EXT4-fs (loop0): mount failed [ 56.053864][ T4291] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 56.061005][ T4289] loop1: detected capacity change from 0 to 1024 [ 56.077078][ T4289] EXT4-fs: Ignoring removed orlov option [ 56.082773][ T4289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.208092][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.250329][ T4294] loop0: detected capacity change from 0 to 512 [ 56.257097][ T4294] EXT4-fs: Ignoring removed i_version option [ 56.263753][ T4294] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.272357][ T4294] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.294698][ T4294] EXT4-fs (loop0): 1 truncate cleaned up [ 56.301037][ T4294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.417303][ T4289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.436556][ T4304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 56.443287][ T4304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.450929][ T4304] vhci_hcd vhci_hcd.0: Device attached [ 56.462309][ T4317] xt_NFQUEUE: number of total queues is 0 [ 56.472909][ T4314] vhci_hcd: connection closed [ 56.473180][ T11] vhci_hcd: stop threads [ 56.482265][ T11] vhci_hcd: release socket [ 56.486698][ T11] vhci_hcd: disconnect device [ 56.710593][ T4267] syz.4.174 (4267) used greatest stack depth: 6096 bytes left [ 56.825450][ T3301] ================================================================== [ 56.833677][ T3301] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 56.841170][ T3301] [ 56.843505][ T3301] read-write to 0xffff888118f029b8 of 8 bytes by task 4381 on cpu 0: [ 56.851608][ T3301] inode_add_bytes+0x45/0xd0 [ 56.856237][ T3301] __dquot_alloc_space+0x181/0x8a0 [ 56.861490][ T3301] shmem_inode_acct_blocks+0x124/0x230 [ 56.866987][ T3301] shmem_get_folio_gfp+0x5be/0xd90 [ 56.872136][ T3301] shmem_write_begin+0xa2/0x180 [ 56.877091][ T3301] generic_perform_write+0x1a8/0x4a0 [ 56.882404][ T3301] shmem_file_write_iter+0xc2/0xe0 [ 56.887533][ T3301] __kernel_write_iter+0x247/0x4c0 [ 56.892659][ T3301] dump_user_range+0x3ac/0x550 [ 56.897481][ T3301] elf_core_dump+0x1d17/0x1ea0 [ 56.902265][ T3301] do_coredump+0x17fe/0x1f40 [ 56.906867][ T3301] get_signal+0xd4f/0x1000 [ 56.911287][ T3301] arch_do_signal_or_restart+0x95/0x4b0 [ 56.916850][ T3301] irqentry_exit_to_user_mode+0xa7/0x120 [ 56.922499][ T3301] irqentry_exit+0x12/0x50 [ 56.926933][ T3301] asm_exc_page_fault+0x26/0x30 [ 56.931910][ T3301] [ 56.934238][ T3301] read to 0xffff888118f029b8 of 8 bytes by task 3301 on cpu 1: [ 56.941784][ T3301] generic_fillattr+0x274/0x330 [ 56.946663][ T3301] shmem_getattr+0x17b/0x200 [ 56.951260][ T3301] vfs_getattr+0x172/0x1b0 [ 56.955695][ T3301] vfs_statx+0x12d/0x320 [ 56.959955][ T3301] vfs_fstatat+0xe4/0x130 [ 56.964305][ T3301] __se_sys_newfstatat+0x58/0x260 [ 56.969333][ T3301] __x64_sys_newfstatat+0x55/0x70 [ 56.974362][ T3301] x64_sys_call+0x236d/0x2dc0 [ 56.979056][ T3301] do_syscall_64+0xc9/0x1c0 [ 56.983579][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.989484][ T3301] [ 56.991811][ T3301] value changed: 0x00000000000004a8 -> 0x00000000000004b0 [ 56.998916][ T3301] [ 57.001247][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 57.007412][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 57.018276][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.028337][ T3301] ================================================================== [ 57.099960][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.118389][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.127325][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.146677][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.170376][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.179264][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.188455][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.214372][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.223261][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 57.232931][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 59.207116][ T3586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.117252][ T310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.957283][ T3586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.597665][ T3379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration