last executing test programs: 9.245396608s ago: executing program 4 (id=102): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0xd40, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000780)=""/241, 0xf1}, {&(0x7f0000000880)=""/170, 0xaa}], 0x4}, 0xffffffff}], 0x1, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x60004) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x1, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b257f00000047e500f61681905db88235f8a5447dd2a2ed6e91626feeb40a646e63b5df2b21a100efb76cba37ff3111d6847e0c7f719e169a3b6e5fc008daefba68f6222103472bc55704cdb72b4b996bd82ccb1eaae27969d008000070001113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363910f70da60f47e33085c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394bae39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) sendmsg$nl_route_sched(r1, 0x0, 0x20001880) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x44f0) 8.997220622s ago: executing program 4 (id=104): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x547a, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x103041, 0x1ae) pwritev2(r3, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000440)={@local, @remote, @void, {@x25={0x805, {0x2, 0xc, 0xf3, "29ea6ee6180361d9e43d2244d609054f8800f6d497638f8925b24b4d5ac48b2762872a33c8ced8eace188ca2ad1f4d27a8bf8c7d1bf509914d9a5e81ddb3a75de0e58874e50882e6527e0eb38e4ea31849362bdbee1fa104b48df079106c76224f39fba7f70fadeb0d19f82cfec475b1d7c638c90d74c734bffe80c54608cc59e8667a446f56d2c081"}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = getpid() ptrace(0x8, r8) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 7.76909981s ago: executing program 4 (id=110): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000fd00000000f4bb310300004500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r5, &(0x7f00000000c0)='./mnt\x00', 0x200) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mlxsw_sp_acl_tcam_vregion_rehash\x00', r9, 0x0, 0x8000008}, 0x18) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r10, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="64a1000001"]) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.867364245s ago: executing program 4 (id=115): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a320000000005000100070000001400078008001340000000000800124009"], 0x64}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500000002000000180000000101000000000000ea8c93009500000000000000540300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70400000800000002000000950000009500000000000000bc3f892195195876bd656070fe6cbe9358af966bce924c46469371cc50bfc07b973ae8f947683d21cf4abf66c413b2f9"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 3.572689315s ago: executing program 0 (id=144): syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000100b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="ceb1db6a8d1fbf411e0e4e8df3ebcd14f374d5996cd6b504d65fec32b00ddb6ef1f324b0274adb8f8fe8fba211c832fc4d8521132ba7d5519f95143fb2146fb26f65a2cb8a945672ca2e3de6a88c739865995149baf9765523cab480cb270f2dba45225d54b1e7061e82a9f620998d606d6f03b7b43675af825d358a1bf16e37eca3cc03c10bc3fa973d2acc53899b07afc3458a3e47fec8525c63f95b90447bd5e25142a7fd82d43a497e61e13081c9761f8110e5ee7c193df81e2f6941aa715f61d64c3ea3a0b4c0be8c834734b02b5ed528", @ANYRES64=r1, @ANYBLOB="a36c2f5c17e1a8f4b5c03f41f423723fc006de9bef72d4136fdd7577a645a64f4fa861ac6ced5feccacc6a5d18441979b65c8c8820e668b91879bee4d5f54344829020505d1b8348ffd307d509153257d01eda4c441d06bfda711a0757b2974e96544e93fcc441b5b2aebfb37dc7cfabfbf0d2bd5d5c4ec00a2815c48379a552a1a37cc605b2416c31af017450a8b2a1196a7957c3a9a23dd5eb1d281a747a8e0a03ea4a48fccd6f3bf8820a24c68273449ba542", @ANYRESDEC=r2, @ANYRES16=0x0], &(0x7f00000004c0)='syzkaller\x00', 0x3c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x408cd, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f00000003c0)={0x0, 0x76, &(0x7f00000007c0)="21c1b8c0589a2093ec5d8c604c33815d9bc8a63d175126e2ee970d780c3a45cc65e4a8754e8212a33a5f9018b49f0e655ede74024609a51274d59d3fbe5f684ae71204dfc3fe956b9f788acc2663a5c38c45e7102a3e13555484923a1f303c01e015dc8e193c48cb731f52156f50b574eaba08b8326b"}) timer_settime(r4, 0x0, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400002, 0x2, @perf_bp={&(0x7f0000000500), 0x9}, 0x1000, 0x5dd8, 0x100000, 0x5, 0x0, 0xb, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x3ff) shutdown(0xffffffffffffffff, 0x1) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='btrfs_add_block_group\x00'}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800000, 0x4000010, 0xffffffffffffffff, 0xb961f000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="23c4b639d52d591c44bfe0fb103b0adcde93a81c1b785cc3155b5873d630dacf854f005859677209e52a9595012212e340c7685770eef18eafa012", @ANYRES32=r10, @ANYRESHEX=r9, @ANYRES32=r3], 0x84}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) listen(r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) 3.411488787s ago: executing program 1 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2000000000000131, &(0x7f00000002c0)=[{0x5b6b, 0x4, 0x6, 0x5}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) mq_unlink(0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd07b8b90acb4432e, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00ffffffffffff78fd0001000004a3a8dc95d70de764507bba1ddb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000010", @ANYRES16=r8, @ANYBLOB="00032abd7000fddbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRES8=r5, @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r6, @ANYRESHEX, @ANYRES64=0x0, @ANYRES16=r7, @ANYRESHEX, @ANYBLOB="57ba1e54646a3a6ef4b009fb6208b9849c3be072efa1255a771e395f800db936207ecba048baf272739507059bf9f6c7c7994a3814229a78041f3e13cd51e8d80df694c95b6de5e3f5f4cbd0dd38f5c5bbf78e5298326a19a63e5fd0fcf5065639dd7822abe53c5b0ff6f9144ec91e3d4dfeafd1cb50b4548bc9a4f4da32910873d02ff7a2753f0b8b8c05cb36697ba23b138b32650bf4c16ac07e7b0fdbb1559f8106190d32b5881993454de713bf022149eeb5755a64786b3810a5f2b83d0c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000300008500000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) sync() syz_read_part_table(0x61f, &(0x7f0000000a00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 3.058471173s ago: executing program 1 (id=149): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8a07, &(0x7f0000000480)={[{@bh}, {@grpquota}, {@nouid32}, {@nodelalloc}, {@abort}, {@noblock_validity}, {@barrier}, {@noquota}]}, 0x1, 0x643, &(0x7f0000000b40)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 2.936370525s ago: executing program 2 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xb, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2/file0\x00', 0x2100410, &(0x7f0000000580)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@sysvgroups}, {@jqfmt_vfsv1}], [{@measure}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, '\x9f'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise}, {@fsname={'fsname', 0x3d, 'f\t#+\x00\x00\x00\x00\x00\x00\x02'}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'sched_switch\x00'}}]}, 0xc1, 0x7e4, &(0x7f00000017c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) r3 = epoll_create1(0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000300000000000000001a0595701cef5e1cdc62b973cc7f64b07b6462f7c2844069efbf2c07", @ANYRES32=r4, @ANYBLOB="305cd2ba2ae614c1cf4af0d51582f0ca4d16aaa9e290b86bc6c43e27bd16b825ad71d3e4ee0624866ee4579a60842e967f9997b8c1fd436b5c41050d3b6ad8c2b1c8950f58218dd91f4755d85a7780d2280ee536a8200609dca55c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup2(0xffffffffffffffff, r6) r8 = timerfd_create(0x1, 0x400) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000380)=@buf={0x77, &(0x7f0000000900)="56ddc48b4feda27a5bd4a838465a62ae60c864233c52e4875047bc404913049134c0954a66484e31b6fbbef02f220358ce2fce89b3b3dbdf8c62a022cf2c02b1685a645c6cb737f2c5c69c9c36a3a4d63376dbe120ee807fe13b2a51be460c457d9eb2708ef2328b0d7d92c9a98610dce037875931b861"}) timerfd_settime(r7, 0x2, &(0x7f0000000440)={{0x0, 0x989680}, {0x77359400}}, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0xa4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3, 0xfffffffffffffffe}) unshare(0x26050100) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x5, 0x100000009, 0x3}, 0x6}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 2.755724558s ago: executing program 2 (id=152): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff11000300686173683a69702c706f72740000000083fbcf88"], 0x58}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000540)="61009d1648bfe4ae429e3e3e3908be9719ab8c212aa3d6cd036b668fa786f9e576bfde7cb74551280dbc694494f7b6d0e839ecf04c91639c470cf1f25b4479f310d782b695243e1d669c33d3569cdb0d152a69b7a5d169435b189b4094e4dd03c395c10391d535884dfbc05060be6df0", 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="3a7b5478c1dbd6e9215bb77c7313b249d85936d21503c625f98e0d137d59a1b17330c63cc320b3f0553513d84ad14524416f2aa2ed7a00f214fb5aaa828d65822035ae7fc21a132a89454d2a0a2690049c66e89d45e2fa08421855cd039b65a0f0db67695b560c3afbdce298f6716ed75c15edd9ab81b5bb8a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xfffffe86) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) unshare(0x40020000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b0000000e000000080000000900000005000000", @ANYRES32, @ANYBLOB="000000000000000023000d4acd5c0000", @ANYRES16=r4, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = timerfd_create(0x7, 0x80000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {r7, r8+60000000}}, &(0x7f0000000500)) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f00000005c0)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0xa, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) fchdir(r11) bind$unix(r11, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900"], 0x34}}, 0x0) 2.5707112s ago: executing program 0 (id=153): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000009980)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$eJzs3U1sHOX5APBnjU3yN39FiKKQRiFMApWCFMx6DaYWB1jWY2fA3rV215WjtoKIOMiKAwiKWnxoyAXaiqrqqUfaK7deqlaVWqmHtqdK5dBLb0icKlq1UtWqquRqZncdf6w/QuIkwO9nxfN69pn3fd7xZJ4d2zsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECUapPl8mgpZrL6/EKyxUBEJPd2Y2e3PLy6urraafX6+/WGxQ7jRpTyf3HwYBzprDpy79WHD+efTsaxzlfH4mC+OBgrdx2++8kvDA70tt+a8HU7sce4UsRbeVIXzy0vL762D4ncRN/75U6PDvZb+e/i+z6d1rNWI5utTqdJ1mokE+Pj5UfPTLWSqWwmbZ1ttdPZpNZMq+1GMzlVezgZnZgYS9KRs435+vRkdSbtrXzikUq5PJ48O3I5IlqN+qPPjrRqZ7KZmaw+XcRUyt+MPOaJpDbZfC5rJ+20OpskF5aWF8d2m10eNLpl7VB+ZBeOPXT3R298+I+lxfyA3K6TUvfArIyOViqj449PPP5EuTxYKVc2rihvEmsRMRCRR+zLQcvtYyC2P4oKN+bEDTfAQLf+x0xkUY/5WIikz8dQ1GIymtGI2fzrPw1tiejq1f8vPfrXP+w07vr636vyR64+fDSK+n+889Xx7ep/31xv5MdAN5/tHn893oyVuBjnYjmWYzFe2/eMrvNjYM+RJ/5/D1HTkUY9smhFI7KYjWqxJumuSWIixmM8yvF8nImpaEUSU5HFTKTRirPRinakxRFVi2akUY12NKIZSZyKWjwcSYzGREzEWCSRxkicjUbMRz2mYzKqRS8XYqnY72Ob8jr87Rd+8dIfP3ovb68Fje4wkVL+ZC4P+vsOQVvK/d7r/2p0I9T/z7sbfAaHT261V/8BAACAz6xS8dP3/Pp/KO4vWlPZTPrVW50WAAAAcAMVv/k/li+G8tb9Ucqv/8t9Ij+46bkBAAAAN0apeI1dKSKG44FOq/dyqX4/BAAAAAA+hYrf/x/PF8MRl4sVrv8BAADgM+Y7291j/8PePXZbcwdKv/pbNJtDpStzCw+VLlXzuOqlOzrbdRdfWeuxPXW0dDA6nRR9jQ+u3FWKiMFaeqzUu/vlfw90lh8Xn48Orm2+3b3+S5sSWNvijs1TyhM4tLIpgcPFwO/GiU7MifOd5WA30e4diYensngrojHzZHFLxPxf+42Xl74VxfS/W589VIoLS8uLIy++sny+yOVK3suVS90bKG65j2L/XIoRV7t7IO7vP+Oh4oUY3XGHO+OW138DBp4uNh/YeczS+jHfjpOdmJPDneXwyob5H8zHHB15cjSq1UMD7XSh/cbqutl3sxi9zpm/HQ92Yh489WBn0SeLyoYsXt6aRWV9Ft2dsMu+2DWLoe6B9d6Jywv//G2jlI7tlsXYpiwOXmMWALfKheKuP1er0P8VVeg/qx15/b9ad5NOQFf3LHffWlf5Wa5XBjad5S7E2iO97dfVusHYUt03P72ITaNsc0Y/1Yk51Xk+MXi0T10p9zmjv7r06u+6Z/TH3v/Rj79+/Pc//eTV7f14uBPTXcQ9v9mmxuZz/n59drjX6cJT3cZPth23NVMpxVDEHd+49Gocfv3NlUeWLp17afGlxZcrlbHx8mPl8uOVGCqeKnQXag8Afez+Hju7RpQe23xVfX5j3b1n7U8KRuLFeCWW43ycLl5tEBEP9O91eN2fIZyOk1FcLG9z1Tq87h1eTu9ybTm0FlvZGluKbfodW7fH7vthsfjXPn5TAGCfndylDu+l/p/e5bp7Yy3fdHUc29fyfr68r3sDAD4f0ubHpeH2O6VmM5t7fnRiYrTaPpMmzUbtuaSZTU6nSVZvp83amWp9Ok3mmo12o9b7wfFk2kpa83NzjWY7mWo0k7lGK1so3vk96b71eyudrdbbWa01N5NWW2lSa9Tb1Vo7mcxatWTuzmdmstaZtFls3JpLa9lUVqu2s0Y9aTXmm7V0JElaaZrMzfcCs8m03s6msrxZT+aa2Wy1eSUiZuZn02QybdWa2Vy70fxi3mGtEcVYWX2q0Zwtuh3ZOv2/3Oz9DQC3g9ffXLl4bnl58bWNjUOxec2mxmAUjT/vFNNr3Oo5AgAbqdIAAAAAAAAAAAAAAHD72/pyvXztri/p69c4ENe+1YG4piGus5FPrbvm3Z997cVPPNNPRyOf3m2Qxj40Snuf1wtPPXVxu5hnLh85s7d++v9P6fdS13cORdz58x901jx9s3bLB1cP7GvZfLW0Q8ytPS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQD//CwAA///461Or") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='xdp_cpumap_enqueue\x00', r2}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x80000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x5460, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x15) close(0xffffffffffffffff) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_usbip_server_init(0x5) 2.245920216s ago: executing program 2 (id=155): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) unshare(0x20000400) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000005bcb00001860000000010000680000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a6970009e85d5f9050004bf3674d2a2f778dd0073797a310000000005000500020000000500010006000000"], 0x44}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x5, 0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) 2.073452788s ago: executing program 1 (id=157): pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @local, 0xffffffffffffffff, "5409013aff5460392e674fd1c2292c9a59e279ae96fb4677a2bbe9b05bc0c846", 0x5, 0x3, 0x3, 0xfffffffc}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xa8, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe77d49c6769b4e71}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x20000881) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000040)={0x4, 0x8000000, 0x100000, 0x1d, 0x100, &(0x7f0000001340)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 1.96895196s ago: executing program 1 (id=158): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000698000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0xa1889800, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000000000000000006bc5aad7eb940000000000bc63627416c50b2a9235ae016bb48951cd2851bc7679d954b4ca8bb73470940c1318e451eab7daa97dfc82ab4c9caa5b69a6ee14afa92ca9a33144d82f607d8814912e54609b2bbe44ea3536a553435ede2b5a423219df4a6c531ac2c7646422ecb4ac2b0364a4ac7624ae0fc0bf39d07e00ba4cd72b3d2656ae54ec90864d40567a66ad74fa6c157820e3bfae977ccfd235fcae48a92566cddabc39e39b2715f2787499bfd3b22280363b8bd4a68007d0faf4f4ea08ef"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000ac0), 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") 1.398857728s ago: executing program 0 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x40902, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100004d6ca4429e0bc1ec9f1741a18008bd2f03efafa60e4c0402d45b875e00c48385099fe03b68c2fe5686b38938c98a790452ceb1faf43788c9d256f6f1839d248db77b60b2c90b572a286fb076783468728ae132f1936ef396315febecb07125f190ce573a3f32ae62b436fc17fdf1a03d8c04be307d4b9f74f35ae687afacfb807c562232ae308e6573f257bb0a5430261d97587e2c83cb4653c77fd6532f8d6839ea7d7a87e3a6619880c1d7674d2dba66d0338f06ff070a5e89735e902775341335115f4691b410657e8f0f4761cf548f1af946dfb84823519a", @ANYRES32=r4, @ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, 0x0, 0x0) renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, 0x0, 0x0) unlinkat(r6, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3ecdd087e166ad94, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) socket$pppoe(0x18, 0x1, 0x0) 1.370142869s ago: executing program 3 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYRES16=0xffffffffffffffff, @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x8004004}, 0xc010) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r5, @ANYRES64=r6, @ANYRES64=r0, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4d8c4}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="001006c774854b1798584b940448deefc07f2fe975755a547ebb801346746c16d9b58fbd3f3314c2032c4ca572682bfc3b9f06816778a9179f25c77264193439ea391362f51fff1cbaa06f675904a3f810b89ec59a4f635a3afd57f4a182c9de52dc64ba9bffe350041f1c295e8db0d341aa3a1a98f514de552b41b4e70b8b0dc094592713cadcb007e98d08380af4c4bf563ade3a2394efe7261267838dac9ac333bd136bd1a58aacaca4580282e2fe2732f60a9914133c47b3df86c873784b88996126a574af15417c1e2636300549", @ANYRES16=r4, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) unshare(0x20000400) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$SCSI_IOCTL_GET_PCI(r13, 0x5393, &(0x7f00000001c0)) getrlimit(0x0, &(0x7f0000000000)) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000400)={'pimreg0\x00', 0xe, 0x9f}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYRESOCT=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91b7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r14}, 0x18) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000280)={0x4, 0x8, 0xde0}) io_setup(0x6, &(0x7f0000001000)=0x0) pipe(&(0x7f00000002c0)) io_getevents(r15, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) 1.361192529s ago: executing program 2 (id=162): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012000100000000efffffff00fe80000000540000000000000000002bfff4fffd0000000014000d00200100000400000000000000000000000c000300ff"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x547a, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000440)={@local, @remote, @void, {@x25={0x805, {0x2, 0xc, 0xf3, "29ea6ee6180361d9e43d2244d609054f8800f6d497638f8925b24b4d5ac48b2762872a33c8ced8eace188ca2ad1f4d27a8bf8c7d1bf509914d9a5e81ddb3a75de0e58874e50882e6527e0eb38e4ea31849362bdbee1fa104b48df079106c76224f39fba7f70fadeb0d19f82cfec475b1d7c638c90d74c734bffe80c54608cc59e8667a446f56d2c081"}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = getpid() ptrace(0x8, r8) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) 1.31463438s ago: executing program 0 (id=163): unshare(0x28000600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x73}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000680)={[&(0x7f0000000300)='/dev/ppp\x00', &(0x7f0000000340)='#*\\\x00', &(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', &(0x7f0000000640)='\x00']}, &(0x7f00000009c0)={[&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', &(0x7f0000000980)='/dev/ppp\x00']}) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) unshare(0x20400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000f8b72d788d6a729f108e1fa05d4dad0718469414805f27348d9965af9f2f17f2d4a02bf770"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = socket$inet(0xa, 0x801, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r6, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) accept4(r5, 0x0, 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000540)={0xf97cff8c, 0x8, 'SE Linux', "30af48fcc5b195a0ff439b4baa396967b0b4c3998ae8cc9b59413d3302117f15daf84a16a69a7d43c18a2a35e97c1d7231b0179c741a1532fd53eec1b3b11f13eacd2890e008488f31c7fa01fb9638b2eafc1d9d1b0418e6e4c746263b78ce772d3b42704890de661b80a1d1f1aa00b78ad140f106fe010fbc2eea3d9ee91c56ffe07e9393cc7442a7364800ef7d12d70505c1a299e4318b605addd5d985dd348fbf6390d6b4542bd581e71bbc4528e70c47e86f8f6a8851a250654b09427178953729b0ae96e8e77b5679eaae023b9dbff69b9c97badd133553d601d99e3e13958943aeda04466a6c0ecaeb9d3f1758a8f3251b0e62091ef2"}, 0x109) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.197285322s ago: executing program 3 (id=164): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='//\x00', 0xffffffffffffffff) move_mount(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x72) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a050001000777"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0xc3, 0x8, 0x3, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x40, 0x20, 0x8, 0x8}}) sendto$packet(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0xff0, 0x40000, &(0x7f0000000400)={0x11, 0x19, r10, 0x1, 0x8, 0x6, @local}, 0x14) vmsplice(r2, 0x0, 0x0, 0x1) creat(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x125) 1.131612072s ago: executing program 3 (id=165): r0 = creat(0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x20) r1 = open$dir(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000)="dd", 0x1, 0x4080, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x57, 0xc9110062, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bind$packet(r0, &(0x7f0000000280)={0x11, 0x11, 0x0, 0x1, 0xb, 0x6, @local}, 0x14) syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1}, 0x10, 0x0, 0x57}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4a42, &(0x7f00000004c0)={0x0, 0x5949, 0x1, 0x1, 0xd9}, &(0x7f0000000380), &(0x7f0000000540)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.000130315s ago: executing program 1 (id=166): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x1}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r2, 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000780)={0x3, &(0x7f0000000440)=[{0x44, 0xc4, &(0x7f0000000580)="5e452cdf87cf92a64aa4f67a477dc509a507c2865552c361bb84b20c7bc49f2b1ac5cc926bd90746ddb269de99b397c25b6ab9547d403c3f3b785d4e5fda19617101b971778aa3ed97f05dafaa2d822c17436a825209890064f5666107ef96ee2bd75742ef853df68bb2c9735e714eea7e0527244e19510646b121de96f128954f54a6f95d4adc7fe41f4342bd83a27b107e4a3a8955184e256cf99a01dc4f5c733e2c96a72e40005463790763d6d325c87d0efefa90d519ff95de7d8bd7f9faa0070806", 0x0, 0x1}, {0x7, 0x0, &(0x7f0000000400), 0x0, 0x1}, {0x1, 0xf6, &(0x7f0000000680)="52b929561d3dda1e02c0be55acc625365ac7bfc606e74a78f8d0f06afb4d477daabe3d1d760e2b9799576e39460a7601c25b5d7f3c56825b7e528f1fa19db716070089053669ff0343ffd0fab93cb61a90aa1cc40575a4c7fc0e576fb5f5a9ab93e09ba4ffe6f275bb662111b0b8e1a11b0503fb59422e68e6c8599b6c18155eccc849699e1c1146afee5aa46ac77ab93ba633788f09e5794e35b5836c86064ad39423c286cf2dd69762ffb187a09ddbeafbfc660380539292c25c9f69e24f646f536c5fa024cefb6165318cc04e1bfb08095c635e18da71f5cabba9822574eb7d9577aea9ba7e8fa9736b82a571619637040fe1c754"}]}) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r8 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x8, r8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000340)=[{0x4, 0xd2, 0x9, 0x5ec8}]}) wait4(r8, 0x0, 0x80000000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) clock_gettime(0x0, &(0x7f0000000100)) 895.262986ms ago: executing program 4 (id=167): clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) io_uring_setup(0x229b, &(0x7f0000000b40)={0x0, 0xb363, 0x2240, 0xfffffffc, 0x21e}) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='hrtimer_init\x00', r3, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") lsetxattr$security_selinux(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x9d73ed5f0a5c92ea) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x239, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x52f}, 0x18) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x2b, 0x0, 0xe, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) read(r0, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x891a, 0x0) 716.747099ms ago: executing program 3 (id=168): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000015c0)='leases_conflict\x00'}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x16, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x74, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2000000000000000}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x74}}, 0x2400c050) r6 = socket(0x8000000010, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write(r6, &(0x7f0000000c40)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af0000d71da56c721dc51c3349f0d4796f00000905", 0xf9) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSW(r10, 0x5435, 0x0) 680.20458ms ago: executing program 3 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaab6e7dd1b2c0643003b0088ca7ad0"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$smc(0x0, r1) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, 0x0, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r11, @ANYRESDEC, @ANYRESOCT=r11, @ANYRES32=r6, @ANYRES8=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r11, 0x608, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r13}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 483.891283ms ago: executing program 2 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @private1, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000008000000ff07000000000003"], 0x18}}], 0x1, 0x24044034) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x0, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd7000000000000101"], 0x114}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f00000003c0)={[{@quota}]}, 0x6, 0x515, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r10, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[], 0x1, 0x2a1, &(0x7f0000000f40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') 412.607574ms ago: executing program 3 (id=171): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r10, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 393.691634ms ago: executing program 0 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001e00), 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x8, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) sendmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)=@can, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x20}}], 0x1, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000028a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 387.124374ms ago: executing program 2 (id=173): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$tun(0xffffffffffffffff, 0x0, 0x7a) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="07000000930cca25d86133de00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0xc0085504, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r6}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f0000000040)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@nodelalloc}, {@delalloc}, {@prjquota}]}, 0x0, 0x448, &(0x7f0000000bc0)="$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") 355.247394ms ago: executing program 0 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0000229ac9d99901d7d8b38bfa2abd7000fedbc9250200000002ade7c550b604dd93ab69a1fb7c852d795258aab01ee15cc329cc07030d507ee56a68f8a8c4cb8e5c46"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000259400"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000001240)=ANY=[@ANYBLOB="0000001907000100000014000000452000280068000003069078e0000002e00000014e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="084031ef65134008"], 0x36) 120.197118ms ago: executing program 1 (id=175): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r2, 0x0, 0x2000}, 0x18) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@min_batch_time}, {@noload}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) write$tun(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xf4) socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf71, 0x0, 0x1, 0x10000000}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=176): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) writev(r4, &(0x7f0000000100)=[{0x0, 0x20}, {&(0x7f0000001180)='.', 0x1}], 0x2) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 33.802222][ T29] audit: type=1400 audit(1752438646.175:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.803268][ T3295] cgroup: Unknown subsys name 'net' [ 33.824973][ T29] audit: type=1400 audit(1752438646.175:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.852442][ T29] audit: type=1400 audit(1752438646.205:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.000868][ T3295] cgroup: Unknown subsys name 'cpuset' [ 34.007230][ T3295] cgroup: Unknown subsys name 'rlimit' [ 34.129126][ T29] audit: type=1400 audit(1752438646.495:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.153600][ T29] audit: type=1400 audit(1752438646.505:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.174270][ T29] audit: type=1400 audit(1752438646.505:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.194810][ T29] audit: type=1400 audit(1752438646.505:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.203660][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.215285][ T29] audit: type=1400 audit(1752438646.505:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.248737][ T29] audit: type=1400 audit(1752438646.505:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.272111][ T29] audit: type=1400 audit(1752438646.595:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.274456][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.497721][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.548247][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.571135][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.621782][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.628869][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.636049][ T3308] bridge_slave_0: entered allmulticast mode [ 35.642514][ T3308] bridge_slave_0: entered promiscuous mode [ 35.669457][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.676746][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.684031][ T3308] bridge_slave_1: entered allmulticast mode [ 35.690604][ T3308] bridge_slave_1: entered promiscuous mode [ 35.705355][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.712608][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.719721][ T3306] bridge_slave_0: entered allmulticast mode [ 35.726191][ T3306] bridge_slave_0: entered promiscuous mode [ 35.744170][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.751321][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.758457][ T3306] bridge_slave_1: entered allmulticast mode [ 35.764942][ T3306] bridge_slave_1: entered promiscuous mode [ 35.781542][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.793899][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.808472][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.836886][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.853439][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.860560][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.867834][ T3305] bridge_slave_0: entered allmulticast mode [ 35.874229][ T3305] bridge_slave_0: entered promiscuous mode [ 35.887318][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.906197][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.918038][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.925186][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.932335][ T3305] bridge_slave_1: entered allmulticast mode [ 35.938949][ T3305] bridge_slave_1: entered promiscuous mode [ 35.945785][ T3308] team0: Port device team_slave_0 added [ 35.972083][ T3308] team0: Port device team_slave_1 added [ 35.983180][ T3306] team0: Port device team_slave_0 added [ 35.990508][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.009465][ T3306] team0: Port device team_slave_1 added [ 36.021218][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.045142][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.052240][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.078309][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.101515][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.108499][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.134525][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.145797][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.152875][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.178828][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.204162][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.211181][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.237145][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.252001][ T3305] team0: Port device team_slave_0 added [ 36.258576][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.265774][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.273091][ T3315] bridge_slave_0: entered allmulticast mode [ 36.279720][ T3315] bridge_slave_0: entered promiscuous mode [ 36.298641][ T3305] team0: Port device team_slave_1 added [ 36.304615][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.311709][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.318909][ T3315] bridge_slave_1: entered allmulticast mode [ 36.325405][ T3315] bridge_slave_1: entered promiscuous mode [ 36.331504][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.338563][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.346005][ T3311] bridge_slave_0: entered allmulticast mode [ 36.352416][ T3311] bridge_slave_0: entered promiscuous mode [ 36.359367][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.366475][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.373763][ T3311] bridge_slave_1: entered allmulticast mode [ 36.380290][ T3311] bridge_slave_1: entered promiscuous mode [ 36.411275][ T3306] hsr_slave_0: entered promiscuous mode [ 36.417310][ T3306] hsr_slave_1: entered promiscuous mode [ 36.428583][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.435608][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.461801][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.492343][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.499323][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.525264][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.537253][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.549544][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.564543][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.576091][ T3308] hsr_slave_0: entered promiscuous mode [ 36.582122][ T3308] hsr_slave_1: entered promiscuous mode [ 36.588098][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.595762][ T3308] Cannot create hsr debugfs directory [ 36.617401][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.648603][ T3315] team0: Port device team_slave_0 added [ 36.670296][ T3311] team0: Port device team_slave_0 added [ 36.676586][ T3315] team0: Port device team_slave_1 added [ 36.691590][ T3305] hsr_slave_0: entered promiscuous mode [ 36.697518][ T3305] hsr_slave_1: entered promiscuous mode [ 36.703375][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.710963][ T3305] Cannot create hsr debugfs directory [ 36.717162][ T3311] team0: Port device team_slave_1 added [ 36.754533][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.761596][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.787610][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.798779][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.805794][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.831786][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.843063][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.850061][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.876003][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.892075][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.899047][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.925132][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.981458][ T3315] hsr_slave_0: entered promiscuous mode [ 36.987476][ T3315] hsr_slave_1: entered promiscuous mode [ 36.993365][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.000968][ T3315] Cannot create hsr debugfs directory [ 37.043548][ T3311] hsr_slave_0: entered promiscuous mode [ 37.049564][ T3311] hsr_slave_1: entered promiscuous mode [ 37.055706][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.063468][ T3311] Cannot create hsr debugfs directory [ 37.141612][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.158998][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.168050][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.183502][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.215105][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.231573][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.249472][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.258232][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.282341][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.291334][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.305152][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.316287][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.350764][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.366430][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.384938][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.395039][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.417646][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.430130][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.444026][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.455241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.472841][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.482097][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.492490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.499559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.512256][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.545402][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.563070][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.590974][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.604272][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.615867][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.638762][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.647398][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.657080][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.664203][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.676690][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.683867][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.700514][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.707682][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.717538][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.724661][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.741483][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.748563][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.769764][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.776972][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.799868][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.822216][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.871462][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.890228][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.908829][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.915927][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.925740][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.932883][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.991412][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.018063][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.079357][ T3306] veth0_vlan: entered promiscuous mode [ 38.099826][ T3315] veth0_vlan: entered promiscuous mode [ 38.115227][ T3306] veth1_vlan: entered promiscuous mode [ 38.137141][ T3315] veth1_vlan: entered promiscuous mode [ 38.153558][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.167077][ T3306] veth0_macvtap: entered promiscuous mode [ 38.188465][ T3315] veth0_macvtap: entered promiscuous mode [ 38.198695][ T3315] veth1_macvtap: entered promiscuous mode [ 38.211333][ T3306] veth1_macvtap: entered promiscuous mode [ 38.225645][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.236771][ T3308] veth0_vlan: entered promiscuous mode [ 38.248817][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.261285][ T3308] veth1_vlan: entered promiscuous mode [ 38.272321][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.281202][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.289914][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298765][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318694][ T3308] veth0_macvtap: entered promiscuous mode [ 38.327052][ T3308] veth1_macvtap: entered promiscuous mode [ 38.346356][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.357398][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.371747][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.381823][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.390462][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.399262][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.408137][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.416915][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.430013][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.438803][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.447639][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.456426][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.509913][ T3305] veth0_vlan: entered promiscuous mode [ 38.522542][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.522982][ T3305] veth1_vlan: entered promiscuous mode [ 38.556831][ T3311] veth0_vlan: entered promiscuous mode [ 38.585622][ T3305] veth0_macvtap: entered promiscuous mode [ 38.596370][ T3311] veth1_vlan: entered promiscuous mode [ 38.607299][ T3305] veth1_macvtap: entered promiscuous mode [ 38.618207][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.625554][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.635113][ T3476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.653099][ T3476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.668232][ T3476] loop0: detected capacity change from 0 to 256 [ 38.676645][ T3479] bridge0: entered allmulticast mode [ 38.729798][ T3311] veth0_macvtap: entered promiscuous mode [ 38.766119][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.794586][ T3311] veth1_macvtap: entered promiscuous mode [ 38.804021][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.811435][ T3479] bridge_slave_1: left allmulticast mode [ 38.817118][ T3479] bridge_slave_1: left promiscuous mode [ 38.823000][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.830321][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 38.830333][ T29] audit: type=1326 audit(1752438651.185:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 38.859544][ T29] audit: type=1326 audit(1752438651.185:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 38.889681][ T3479] bridge_slave_0: left allmulticast mode [ 38.895476][ T3479] bridge_slave_0: left promiscuous mode [ 38.901230][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.914281][ T29] audit: type=1326 audit(1752438651.205:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 38.937375][ T29] audit: type=1326 audit(1752438651.205:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 38.960550][ T29] audit: type=1326 audit(1752438651.205:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 38.983559][ T29] audit: type=1400 audit(1752438651.205:151): avc: denied { setopt } for pid=3475 comm="syz.0.1" lport=34501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.006928][ T29] audit: type=1326 audit(1752438651.205:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 39.030122][ T29] audit: type=1326 audit(1752438651.205:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 39.053300][ T29] audit: type=1400 audit(1752438651.205:154): avc: denied { write } for pid=3475 comm="syz.0.1" lport=34501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.076581][ T29] audit: type=1326 audit(1752438651.205:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 39.161178][ T3494] loop2: detected capacity change from 0 to 512 [ 39.171784][ T3494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.184970][ T3494] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.224140][ T3494] EXT4-fs (loop2): 1 truncate cleaned up [ 39.231566][ T3494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.294301][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.330758][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339509][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.348446][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.357322][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.368001][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.379837][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.388654][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.397472][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.406216][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575089][ T3503] loop3: detected capacity change from 0 to 1024 [ 39.585560][ T3503] ======================================================= [ 39.585560][ T3503] WARNING: The mand mount option has been deprecated and [ 39.585560][ T3503] and is ignored by this kernel. Remove the mand [ 39.585560][ T3503] option from the mount to silence this warning. [ 39.585560][ T3503] ======================================================= [ 39.646268][ T3503] EXT4-fs: Ignoring removed oldalloc option [ 39.653307][ T3503] EXT4-fs: Ignoring removed orlov option [ 39.659164][ T3503] ext4: Unknown parameter 'fowner<0000000000' [ 39.684457][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.787405][ C0] hrtimer: interrupt took 27270 ns [ 40.078495][ T3508] Zero length message leads to an empty skb [ 40.155035][ T3508] loop2: detected capacity change from 0 to 512 [ 40.205839][ T3508] EXT4-fs (loop2): too many log groups per flexible block group [ 40.213786][ T3508] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 40.222483][ T3508] EXT4-fs (loop2): mount failed [ 40.236640][ T3508] tipc: Started in network mode [ 40.241609][ T3508] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 40.248915][ T3508] tipc: Enabled bearer , priority 0 [ 40.324588][ T3522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'. [ 40.432802][ T3529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.451827][ T3531] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 40.516117][ T3532] random: crng reseeded on system resumption [ 40.929307][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 41.068689][ T3548] loop3: detected capacity change from 0 to 512 [ 41.075624][ T3548] EXT4-fs: Ignoring removed bh option [ 41.084046][ T3548] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.093130][ T3548] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 41.102717][ T3548] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 41.115447][ T3548] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 41.124558][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.360785][ T3408] tipc: Node number set to 11578026 [ 41.432617][ T3553] xt_hashlimit: size too large, truncated to 1048576 [ 41.439395][ T3553] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 41.444848][ T3542] syz.1.12 (3542) used greatest stack depth: 10192 bytes left [ 41.715561][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.797758][ T3572] loop1: detected capacity change from 0 to 2048 [ 41.833073][ T3572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.847114][ T3572] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.18: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.863842][ T3572] EXT4-fs (loop1): Remounting filesystem read-only [ 41.871774][ T3572] netlink: 100 bytes leftover after parsing attributes in process `syz.1.18'. [ 42.042622][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.254390][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.270964][ T3381] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.418204][ T3588] loop2: detected capacity change from 0 to 512 [ 42.421823][ T3592] loop0: detected capacity change from 0 to 512 [ 42.467203][ T3588] EXT4-fs (loop2): 1 orphan inode deleted [ 42.479281][ T3588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.492266][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 42.513882][ T3588] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.940370][ T3597] Set syz1 is full, maxelem 65536 reached [ 43.104807][ T3606] rdma_op ffff888118f3d980 conn xmit_rdma 0000000000000000 [ 43.161914][ T3606] loop0: detected capacity change from 0 to 512 [ 43.172919][ T3606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.223406][ T3606] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.25: Bad quota inum: 29696, type: 1 [ 43.245610][ T3606] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 43.271827][ T3606] EXT4-fs (loop0): mount failed [ 43.300666][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.565240][ T3601] loop3: detected capacity change from 0 to 8192 [ 43.694242][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 43.817107][ T3601] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 43.827929][ T3601] FAT-fs (loop3): Filesystem has been set read-only [ 44.028704][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 44.028721][ T29] audit: type=1400 audit(1752438656.395:662): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.127338][ T29] audit: type=1326 audit(1752438656.495:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.176415][ T3639] loop3: detected capacity change from 0 to 2048 [ 44.186745][ T29] audit: type=1326 audit(1752438656.525:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.210458][ T29] audit: type=1326 audit(1752438656.525:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.233999][ T29] audit: type=1326 audit(1752438656.525:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.257202][ T29] audit: type=1326 audit(1752438656.525:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.280704][ T29] audit: type=1326 audit(1752438656.525:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.304144][ T29] audit: type=1326 audit(1752438656.525:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.327347][ T29] audit: type=1326 audit(1752438656.525:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.329726][ T3642] bridge_slave_0: left allmulticast mode [ 44.350728][ T29] audit: type=1326 audit(1752438656.525:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174a95e929 code=0x7ffc0000 [ 44.356242][ T3642] bridge_slave_0: left promiscuous mode [ 44.356400][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.449374][ T3647] loop3: detected capacity change from 0 to 128 [ 44.506616][ T3647] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.521971][ T3647] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.702254][ T3642] bridge_slave_1: left allmulticast mode [ 44.708065][ T3642] bridge_slave_1: left promiscuous mode [ 44.713842][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.738772][ T3643] loop2: detected capacity change from 0 to 2048 [ 44.890944][ T3642] bond0: (slave bond_slave_0): Releasing backup interface [ 45.196733][ T3642] bond0: (slave bond_slave_1): Releasing backup interface [ 45.256747][ T3642] team0: Port device team_slave_0 removed [ 45.479922][ T3642] team0: Port device team_slave_1 removed [ 45.501544][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.509041][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.538350][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.545915][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.594747][ T293] tipc: Resetting bearer [ 45.630188][ T3651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.31'. [ 45.639093][ T3651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.31'. [ 45.699782][ T3643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.826095][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 45.835029][ T3659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.32'. [ 45.843834][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 45.915693][ T3662] random: crng reseeded on system resumption [ 45.953987][ T3659] netlink: 'syz.4.32': attribute type 10 has an invalid length. [ 45.976789][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.027618][ T3659] team0: Port device dummy0 added [ 46.062667][ T3662] netlink: 'syz.4.32': attribute type 10 has an invalid length. [ 46.100974][ T3662] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.130330][ T3662] team0: Failed to send options change via netlink (err -105) [ 46.152356][ T3662] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.171407][ T3662] team0: Port device dummy0 removed [ 46.204726][ T3662] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.237955][ T3670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 46.246823][ T3670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 46.258330][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.375771][ T3677] lo speed is unknown, defaulting to 1000 [ 46.381790][ T3677] lo speed is unknown, defaulting to 1000 [ 46.387818][ T3677] lo speed is unknown, defaulting to 1000 [ 46.400519][ T3677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.420769][ T3677] infiniband qyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 46.451067][ T3677] lo speed is unknown, defaulting to 1000 [ 46.457143][ T3677] lo speed is unknown, defaulting to 1000 [ 46.470595][ T3677] lo speed is unknown, defaulting to 1000 [ 46.476775][ T3677] lo speed is unknown, defaulting to 1000 [ 46.486568][ T3677] lo speed is unknown, defaulting to 1000 [ 46.492821][ T3679] loop2: detected capacity change from 0 to 1024 [ 46.519937][ T3679] EXT4-fs: inline encryption not supported [ 46.525910][ T3679] EXT4-fs: Ignoring removed i_version option [ 46.552715][ T3679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.563018][ T3679] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.584520][ T3679] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.37: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.587027][ T3682] netlink: 'syz.4.38': attribute type 3 has an invalid length. [ 46.601347][ T3679] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.37: Failed to acquire dquot type 0 [ 46.617254][ T3679] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.37: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.632388][ T3679] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.37: Invalid inode bitmap blk 0 in block_group 0 [ 46.645406][ T3679] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 46.654344][ T56] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.655655][ T3679] EXT4-fs (loop2): 1 orphan inode deleted [ 46.687283][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 46.699251][ T3679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.733701][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.771898][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.868639][ T3632] syz.0.27 (3632) used greatest stack depth: 7160 bytes left [ 46.963084][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.997079][ T3682] loop4: detected capacity change from 0 to 128 [ 47.047547][ T3682] syz.4.38: attempt to access beyond end of device [ 47.047547][ T3682] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 47.099319][ T3682] syz.4.38: attempt to access beyond end of device [ 47.099319][ T3682] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 47.112682][ T3682] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 47.125056][ T3688] vhci_hcd: invalid port number 96 [ 47.130347][ T3688] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 47.202753][ T3682] syz.4.38: attempt to access beyond end of device [ 47.202753][ T3682] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 47.216096][ T3682] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 47.285908][ T3682] syz.4.38: attempt to access beyond end of device [ 47.285908][ T3682] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 47.299209][ T3682] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 47.350280][ T3682] syz.4.38: attempt to access beyond end of device [ 47.350280][ T3682] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 47.363605][ T3682] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 47.395368][ T3698] loop1: detected capacity change from 0 to 764 [ 47.423602][ T3682] syz.4.38: attempt to access beyond end of device [ 47.423602][ T3682] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 47.436988][ T3682] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 47.502382][ T3682] syz.4.38: attempt to access beyond end of device [ 47.502382][ T3682] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 47.515170][ T3706] bridge0: port 1(syz_tun) entered blocking state [ 47.515722][ T3682] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 47.522179][ T3706] bridge0: port 1(syz_tun) entered disabled state [ 47.557938][ T3706] syz_tun: entered allmulticast mode [ 47.580820][ T3706] syz_tun: entered promiscuous mode [ 47.587186][ T3706] bridge0: port 1(syz_tun) entered blocking state [ 47.593704][ T3706] bridge0: port 1(syz_tun) entered forwarding state [ 47.613518][ T3706] syz_tun: left allmulticast mode [ 47.618610][ T3706] syz_tun: left promiscuous mode [ 47.623747][ T3706] bridge0: port 1(syz_tun) entered disabled state [ 47.632315][ T3682] syz.4.38: attempt to access beyond end of device [ 47.632315][ T3682] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 47.639852][ T3706] tipc: Resetting bearer [ 47.645663][ T3682] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 47.676796][ T3682] syz.4.38: attempt to access beyond end of device [ 47.676796][ T3682] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 47.690180][ T3682] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 47.707635][ T3682] syz.4.38: attempt to access beyond end of device [ 47.707635][ T3682] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 47.720959][ T3682] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 47.739445][ T3682] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 47.780945][ T3710] loop1: detected capacity change from 0 to 512 [ 47.788032][ T3710] EXT4-fs: Ignoring removed orlov option [ 47.801354][ T3710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.820393][ T3710] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.830110][ T3710] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.43: bg 0: block 248: padding at end of block bitmap is not set [ 47.854539][ T3710] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.43: Failed to acquire dquot type 1 [ 47.875521][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 47.898116][ T3728] bridge0: port 1(macvlan2) entered blocking state [ 47.904894][ T3728] bridge0: port 1(macvlan2) entered disabled state [ 47.913371][ T3728] macvlan2: entered allmulticast mode [ 47.918785][ T3728] bridge0: entered allmulticast mode [ 47.924263][ T3710] EXT4-fs (loop1): 1 truncate cleaned up [ 47.930754][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.944686][ T3728] macvlan2: left allmulticast mode [ 47.949859][ T3728] bridge0: left allmulticast mode [ 47.958226][ T3710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.974580][ T3730] loop2: detected capacity change from 0 to 512 [ 48.047658][ T3759] 9pnet_fd: Insufficient options for proto=fd [ 48.073275][ T3710] loop1: detected capacity change from 0 to 1024 [ 48.153002][ T3750] loop0: detected capacity change from 0 to 512 [ 48.185401][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.186486][ T3730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.213153][ T3750] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.46: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 48.218918][ T3730] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.252371][ T3710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.280547][ T3728] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #4: comm syz.2.44: corrupted inode contents [ 48.294684][ T3728] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #4: comm syz.2.44: mark_inode_dirty error [ 48.310648][ T3750] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.46: Bad quota inode: 3, type: 0 [ 48.323278][ T3750] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 48.339564][ T3728] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #4: comm syz.2.44: corrupted inode contents [ 48.392857][ T3750] EXT4-fs (loop0): mount failed [ 48.398987][ T3728] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.44: mark_inode_dirty error [ 48.434141][ T3728] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.44: Failed to acquire dquot type 1 [ 48.485318][ T3844] lo speed is unknown, defaulting to 1000 [ 48.501438][ T3839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.502898][ T3844] lo speed is unknown, defaulting to 1000 [ 48.522361][ T3844] lo speed is unknown, defaulting to 1000 [ 48.529186][ T3844] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.568540][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.618133][ T3844] lo speed is unknown, defaulting to 1000 [ 48.634433][ T3844] lo speed is unknown, defaulting to 1000 [ 48.642353][ T3844] lo speed is unknown, defaulting to 1000 [ 48.648606][ T3844] lo speed is unknown, defaulting to 1000 [ 48.654792][ T3844] lo speed is unknown, defaulting to 1000 [ 48.742554][ T3852] loop1: detected capacity change from 0 to 512 [ 48.769592][ T3850] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 48.769592][ T3850] program syz.2.50 not setting count and/or reply_len properly [ 48.799415][ T3852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.856067][ T3852] EXT4-fs (loop1): 1 truncate cleaned up [ 48.874095][ T3852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.936267][ T3859] SELinux: Context Ü is not valid (left unmapped). [ 48.938323][ T3862] netlink: 'syz.0.52': attribute type 6 has an invalid length. [ 48.997628][ T3864] lo speed is unknown, defaulting to 1000 [ 49.004066][ T3864] lo speed is unknown, defaulting to 1000 [ 49.021540][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 49.053940][ T3867] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.071528][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 49.071545][ T29] audit: type=1400 audit(1752438661.445:1005): avc: denied { create } for pid=3863 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.107106][ T3874] netlink: '¬í': attribute type 10 has an invalid length. [ 49.126145][ T3873] loop0: detected capacity change from 0 to 2048 [ 49.140109][ T3874] team0: Port device dummy0 added [ 49.163643][ T29] audit: type=1400 audit(1752438661.475:1006): avc: denied { write } for pid=3866 comm="syz.3.55" name="kcm" dev="proc" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.178483][ T3874] netlink: '¬í': attribute type 10 has an invalid length. [ 49.186138][ T29] audit: type=1400 audit(1752438661.475:1007): avc: denied { bind } for pid=3866 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.213435][ T29] audit: type=1400 audit(1752438661.475:1008): avc: denied { setopt } for pid=3866 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.215503][ T3874] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.272678][ T29] audit: type=1400 audit(1752438661.645:1009): avc: denied { create } for pid=3876 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.292222][ T29] audit: type=1400 audit(1752438661.645:1010): avc: denied { write } for pid=3876 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.312107][ T29] audit: type=1400 audit(1752438661.645:1011): avc: denied { setopt } for pid=3863 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.331526][ T29] audit: type=1400 audit(1752438661.645:1012): avc: denied { map } for pid=3866 comm="syz.3.55" path="/proc/38/net/kcm" dev="proc" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.354893][ T29] audit: type=1400 audit(1752438661.645:1013): avc: denied { execute } for pid=3866 comm="syz.3.55" path="/proc/38/net/kcm" dev="proc" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.378878][ T29] audit: type=1400 audit(1752438661.725:1014): avc: denied { ioctl } for pid=3876 comm="syz.4.56" path="socket:[5169]" dev="sockfs" ino=5169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.383593][ T3874] team0: Failed to send options change via netlink (err -105) [ 49.431544][ T3864] loop2: detected capacity change from 0 to 512 [ 49.456062][ T3874] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.481902][ T3864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.500537][ T3874] team0: Port device dummy0 removed [ 49.518637][ T3874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.529731][ T3864] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.571237][ T3864] EXT4-fs (loop2): 1 truncate cleaned up [ 49.577435][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.599944][ T3867] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.692840][ T3877] bond0: (slave dummy0): Releasing backup interface [ 49.706686][ T3877] bridge_slave_0: left allmulticast mode [ 49.712449][ T3877] bridge_slave_0: left promiscuous mode [ 49.718213][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.738222][ T3877] bridge_slave_1: left allmulticast mode [ 49.743990][ T3877] bridge_slave_1: left promiscuous mode [ 49.749748][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.763622][ T3877] bond0: (slave bond_slave_0): Releasing backup interface [ 49.777781][ T3877] bond0: (slave bond_slave_1): Releasing backup interface [ 49.798794][ T3877] team0: Port device team_slave_0 removed [ 49.823582][ T3877] team0: Port device team_slave_1 removed [ 49.840131][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.847594][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.858545][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 49.873912][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.881397][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.980207][ T3414] lo speed is unknown, defaulting to 1000 [ 50.012139][ T3867] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.050939][ T3892] hsr_slave_1 (unregistering): left promiscuous mode [ 50.092897][ T3867] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.103993][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.216388][ T3867] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.234702][ T3867] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.280508][ T3899] loop2: detected capacity change from 0 to 256 [ 50.294762][ T3867] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.317555][ T3867] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.678597][ T3908] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 50.734718][ T3910] loop0: detected capacity change from 0 to 512 [ 50.752935][ T3911] netlink: 'syz.3.62': attribute type 10 has an invalid length. [ 50.789520][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.809703][ T3906] loop2: detected capacity change from 0 to 4096 [ 50.810521][ T3910] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.819209][ T3908] bond0: (slave dummy0): Releasing backup interface [ 50.855291][ T3906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.868034][ T3910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'. [ 50.868651][ T3908] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.892381][ T3906] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.61: corrupted inode contents [ 50.920176][ T3908] team0: Failed to send options change via netlink (err -105) [ 50.927746][ T3908] team0: Port device dummy0 added [ 50.934163][ T3911] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.947719][ T3906] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.61: mark_inode_dirty error [ 50.969932][ T3911] team0: Failed to send options change via netlink (err -105) [ 51.030467][ T3906] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.61: corrupted inode contents [ 51.043875][ T3911] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 51.061194][ T3906] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.61: mark_inode_dirty error [ 51.091055][ T3926] loop4: detected capacity change from 0 to 256 [ 51.098854][ T3911] team0: Port device dummy0 removed [ 51.135387][ T3911] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.150511][ T3906] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.61: corrupted inode contents [ 51.170740][ T3914] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.173358][ T3906] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.61: mark_inode_dirty error [ 51.200668][ T3918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 51.226241][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.247507][ T3906] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.61: corrupted inode contents [ 51.261441][ T3906] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.61: mark_inode_dirty error [ 51.272626][ T3906] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem [ 51.341569][ T3914] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.356686][ T3926] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.365500][ T3926] FAT-fs (loop4): Filesystem has been set read-only [ 51.462107][ T3914] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.578798][ T3945] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.613246][ T3914] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.632274][ T3906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.712117][ T3945] lo speed is unknown, defaulting to 1000 [ 51.745025][ T3944] loop7: detected capacity change from 0 to 16384 [ 51.772341][ T3945] lo speed is unknown, defaulting to 1000 [ 51.972542][ T3948] loop2: detected capacity change from 0 to 8192 [ 51.998614][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.027475][ T3951] netlink: 96 bytes leftover after parsing attributes in process `syz.1.68'. [ 52.039138][ T3951] loop1: detected capacity change from 0 to 164 [ 52.039661][ T3948] loop2: p2 p3 p4 [ 52.056841][ T3951] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.060821][ T3948] loop2: p2 start 2936012800 is beyond EOD, truncated [ 52.067745][ T3951] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.071885][ T3948] loop2: p3 start 1912602624 is beyond EOD, truncated [ 52.081471][ T3951] Symlink component flag not implemented [ 52.086915][ T3948] loop2: p4 size 656640 extends beyond EOD, [ 52.092593][ T3951] Symlink component flag not implemented [ 52.093015][ T3951] Symlink component flag not implemented (7) [ 52.098604][ T3948] truncated [ 52.104280][ T3951] Symlink component flag not implemented (116) [ 52.717783][ T3962] lo speed is unknown, defaulting to 1000 [ 52.735546][ T3958] capability: warning: `syz.2.69' uses 32-bit capabilities (legacy support in use) [ 52.746404][ T3962] lo speed is unknown, defaulting to 1000 [ 52.930476][ T3980] loop2: detected capacity change from 0 to 1024 [ 52.980135][ T3980] EXT4-fs: Ignoring removed orlov option [ 53.070865][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.179526][ T3999] lo speed is unknown, defaulting to 1000 [ 53.185896][ T3999] lo speed is unknown, defaulting to 1000 [ 53.287952][ T3999] loop4: detected capacity change from 0 to 1024 [ 53.295246][ T3999] EXT4-fs: Ignoring removed nobh option [ 53.300854][ T3999] EXT4-fs: Ignoring removed bh option [ 53.363385][ T3999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.522562][ T4007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 53.574033][ T4008] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.73: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.595985][ T4010] IPv4: Oversized IP packet from 127.202.26.0 [ 53.640190][ T4013] loop0: detected capacity change from 0 to 2048 [ 53.654686][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.782179][ T4019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.835838][ T4019] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1924 with error 28 [ 53.848452][ T4019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.848452][ T4019] [ 53.858395][ T4019] EXT4-fs (loop0): Total free blocks count 0 [ 53.864430][ T4019] EXT4-fs (loop0): Free/Dirty block details [ 53.870374][ T4019] EXT4-fs (loop0): free_blocks=2415919104 [ 53.876105][ T4019] EXT4-fs (loop0): dirty_blocks=1936 [ 53.881621][ T4019] EXT4-fs (loop0): Block reservation details [ 53.887629][ T4019] EXT4-fs (loop0): i_reserved_data_blocks=121 [ 53.897363][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.040591][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.081024][ T29] kauditd_printk_skb: 2372 callbacks suppressed [ 54.081042][ T29] audit: type=1326 audit(1752438666.455:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4f10158e7 code=0x7ffc0000 [ 54.131173][ T29] audit: type=1326 audit(1752438666.455:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4f0fbab19 code=0x7ffc0000 [ 54.154550][ T29] audit: type=1326 audit(1752438666.455:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 54.178136][ T29] audit: type=1326 audit(1752438666.455:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4f10158e7 code=0x7ffc0000 [ 54.201313][ T29] audit: type=1326 audit(1752438666.455:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4f0fbab19 code=0x7ffc0000 [ 54.224480][ T29] audit: type=1326 audit(1752438666.455:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 54.247775][ T29] audit: type=1326 audit(1752438666.455:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4f10158e7 code=0x7ffc0000 [ 54.271004][ T29] audit: type=1326 audit(1752438666.455:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4f0fbab19 code=0x7ffc0000 [ 54.294198][ T29] audit: type=1326 audit(1752438666.455:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 54.317548][ T29] audit: type=1326 audit(1752438666.455:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4f10158e7 code=0x7ffc0000 [ 54.356065][ T4028] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 54.567180][ T3834] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 54.631421][ T4030] netlink: 76 bytes leftover after parsing attributes in process `syz.1.80'. [ 54.634563][ T4032] netlink: 'syz.0.79': attribute type 10 has an invalid length. [ 54.648448][ T4030] loop1: detected capacity change from 0 to 512 [ 54.652291][ T4032] team0: Port device dummy0 added [ 54.669788][ T4032] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 54.679071][ T4032] netlink: 'syz.0.79': attribute type 10 has an invalid length. [ 54.688870][ T4030] EXT4-fs (loop1): 1 orphan inode deleted [ 54.695147][ T4032] team0: Port device dummy0 removed [ 54.695190][ T4030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.703808][ T4032] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.713529][ T4030] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.730277][ T3813] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1 [ 54.813796][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.835677][ T4026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.849476][ T4038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 54.853791][ T4026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.858290][ T4038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 54.869435][ T4026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 54.959097][ T4051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 54.985991][ T4054] xt_hashlimit: size too large, truncated to 1048576 [ 55.017391][ T4051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.033545][ T4051] netlink: 'syz.2.84': attribute type 27 has an invalid length. [ 55.083579][ T4051] tipc: Resetting bearer [ 55.170059][ T4051] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.179169][ T4051] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.188559][ T4051] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.197863][ T4051] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.316930][ T4063] random: crng reseeded on system resumption [ 55.374316][ T4062] lo speed is unknown, defaulting to 1000 [ 55.381164][ T4062] lo speed is unknown, defaulting to 1000 [ 55.675289][ T4066] mmap: syz.4.87 (4066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.699128][ T4068] openvswitch: netlink: Message has 6 unknown bytes. [ 55.734886][ T4066] loop4: detected capacity change from 0 to 1024 [ 55.751512][ T4066] EXT4-fs: Ignoring removed orlov option [ 55.762036][ T4066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.771755][ T4066] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.839921][ T4066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 55.853781][ T4066] System zones: 0-1, 3-12 [ 55.859049][ T4066] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.87: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.877878][ T4066] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.87: Failed to acquire dquot type 0 [ 55.926858][ T4066] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.87: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.944251][ T4066] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.87: Invalid inode bitmap blk 0 in block_group 0 [ 55.959348][ T4066] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 55.973631][ T3813] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.034601][ T3813] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 0 [ 56.084933][ T4076] lo speed is unknown, defaulting to 1000 [ 56.091492][ T4076] lo speed is unknown, defaulting to 1000 [ 56.238663][ T4066] EXT4-fs (loop4): 1 orphan inode deleted [ 56.251104][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.311107][ T4066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.347683][ T4080] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 56.354278][ T4080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.361889][ T4080] vhci_hcd vhci_hcd.0: Device attached [ 56.434890][ T4066] loop4: detected capacity change from 0 to 2048 [ 56.471428][ T3561] Alternate GPT is invalid, using primary GPT. [ 56.477877][ T3561] loop4: p1 p2 p3 [ 56.487909][ T4066] Alternate GPT is invalid, using primary GPT. [ 56.494371][ T4066] loop4: p1 p2 p3 [ 56.533382][ T4081] vhci_hcd: connection closed [ 56.534707][ T4085] lo speed is unknown, defaulting to 1000 [ 56.537382][ T3820] vhci_hcd: stop threads [ 56.539842][ T4085] lo speed is unknown, defaulting to 1000 [ 56.545213][ T3820] vhci_hcd: release socket [ 56.545239][ T3820] vhci_hcd: disconnect device [ 56.739261][ T4093] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 56.747776][ T4093] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 56.756058][ T4093] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 56.767484][ T4093] netlink: 5 bytes leftover after parsing attributes in process `syz.1.92'. [ 56.797112][ T3914] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.806804][ T4097] loop1: detected capacity change from 0 to 512 [ 56.809084][ T3914] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.816780][ T4097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.838070][ T3914] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.844662][ T4097] EXT4-fs (loop1): 1 truncate cleaned up [ 56.851348][ T3914] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.853075][ T4097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.885447][ T4095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 56.900497][ T4101] sd 0:0:1:0: device reset [ 56.932294][ T4103] openvswitch: netlink: Message has 6 unknown bytes. [ 57.008410][ T4109] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 57.099108][ T4111] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.151072][ T4112] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.165930][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.171238][ T4114] loop2: detected capacity change from 0 to 128 [ 57.190645][ T4111] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.195856][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.220224][ T4116] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 57.226875][ T4116] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.231734][ T4114] lo speed is unknown, defaulting to 1000 [ 57.234473][ T4116] vhci_hcd vhci_hcd.0: Device attached [ 57.244631][ T4114] lo speed is unknown, defaulting to 1000 [ 57.251822][ T4116] loop0: detected capacity change from 0 to 164 [ 57.262572][ T4111] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.276667][ T4119] syz.2.99 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.324282][ T4111] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.464513][ T4116] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 57.473036][ T4117] vhci_hcd: connection closed [ 57.473418][ T3784] vhci_hcd: stop threads [ 57.482539][ T3784] vhci_hcd: release socket [ 57.487004][ T3784] vhci_hcd: disconnect device [ 57.561272][ T4124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 57.677987][ T4131] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.102'. [ 57.689453][ T4128] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.102'. [ 57.719473][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.731540][ T4128] SELinux: ebitmap: truncated map [ 57.738265][ T4128] SELinux: failed to load policy [ 58.019364][ T4139] netlink: 'syz.4.104': attribute type 10 has an invalid length. [ 58.098115][ T4137] netlink: 'syz.4.104': attribute type 10 has an invalid length. [ 58.176986][ T4139] team0: Port device dummy0 added [ 58.274638][ T4141] loop0: detected capacity change from 0 to 1024 [ 58.291196][ T4142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.357083][ T4141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.417030][ T4137] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.465036][ T4137] team0: Failed to send options change via netlink (err -105) [ 58.478038][ T4146] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 58.488218][ T4137] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.499131][ T4137] team0: Port device dummy0 removed [ 58.506973][ T4146] loop2: detected capacity change from 0 to 256 [ 58.518497][ T4137] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.527950][ T4147] netlink: 79 bytes leftover after parsing attributes in process `syz.0.105'. [ 58.538373][ T4147] netlink: 79 bytes leftover after parsing attributes in process `syz.0.105'. [ 58.548374][ T4146] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.576570][ T4146] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.579405][ T4142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.683726][ T4142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.700948][ T4149] loop1: detected capacity change from 0 to 512 [ 58.708532][ T4147] 9pnet_fd: Insufficient options for proto=fd [ 58.763036][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.786599][ T4149] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.801822][ T4142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.812121][ T4141] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 58.812457][ T4141] EXT4-fs (loop0): Remounting filesystem read-only [ 58.833601][ T4141] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 58.850422][ T4154] loop2: detected capacity change from 0 to 512 [ 58.861843][ T4154] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.885060][ T4154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.907229][ T4154] EXT4-fs (loop2): 1 truncate cleaned up [ 58.925392][ T4154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.944523][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.957440][ T4142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.971542][ T4142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.985171][ T4142] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.006727][ T4142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.016523][ T4158] $Hÿ: renamed from bond0 (while UP) [ 59.031645][ T4158] $Hÿ: entered promiscuous mode [ 59.036780][ T4158] bond_slave_0: entered promiscuous mode [ 59.042715][ T4158] bond_slave_1: entered promiscuous mode [ 59.048589][ T4158] dummy0: entered promiscuous mode [ 59.128766][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 59.128788][ T29] audit: type=1400 audit(1752439184.507:3736): avc: denied { ioctl } for pid=4148 comm="syz.1.107" path=2F31392F6275732F66696C6531202864656C6574656429 dev="loop1" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.129478][ T4157] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.107: corrupted inode contents [ 59.136085][ T4162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 59.162952][ T4157] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.107: mark_inode_dirty error [ 59.194241][ T4157] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.107: corrupted inode contents [ 59.202096][ T4162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.214042][ T4157] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.107: mark_inode_dirty error [ 59.226548][ T4157] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.107: mark inode dirty (error -117) [ 59.240660][ T4157] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 59.241092][ T4162] netlink: 'syz.4.110': attribute type 27 has an invalid length. [ 59.277534][ T4165] loop0: detected capacity change from 0 to 2048 [ 59.288247][ T4165] EXT4-fs: quotafile must be on filesystem root [ 59.355059][ T4162] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.363710][ T4162] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.372368][ T4162] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.380861][ T4162] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.390564][ T3401] lo speed is unknown, defaulting to 1000 [ 59.396346][ T3401] qyz2: Port: 1 Link DOWN [ 59.402783][ T4168] random: crng reseeded on system resumption [ 59.403031][ T29] audit: type=1400 audit(1752439184.777:3737): avc: denied { write } for pid=4164 comm="syz.0.111" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.432628][ T29] audit: type=1400 audit(1752439184.777:3738): avc: denied { lock } for pid=4164 comm="syz.0.111" path="socket:[6597]" dev="sockfs" ino=6597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 59.456769][ T4167] wg2: entered promiscuous mode [ 59.461795][ T4167] wg2: entered allmulticast mode [ 59.492606][ T29] audit: type=1326 audit(1752439184.867:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4169 comm="syz.0.112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4f101e929 code=0x0 [ 59.544105][ T29] audit: type=1400 audit(1752439184.917:3740): avc: denied { read } for pid=4169 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.591787][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.629085][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.731695][ T29] audit: type=1400 audit(1752439185.107:3741): avc: denied { bind } for pid=4177 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.872170][ T4180] lo speed is unknown, defaulting to 1000 [ 59.878351][ T4180] lo speed is unknown, defaulting to 1000 [ 59.992104][ T4183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.018268][ T4183] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.044397][ T29] audit: type=1400 audit(1752439185.417:3742): avc: denied { read } for pid=4182 comm="syz.4.115" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.068664][ T29] audit: type=1400 audit(1752439185.417:3743): avc: denied { open } for pid=4182 comm="syz.4.115" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.095768][ T29] audit: type=1400 audit(1752439185.467:3744): avc: denied { ioctl } for pid=4182 comm="syz.4.115" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.193778][ T4184] wireguard0: entered promiscuous mode [ 60.258119][ T4189] loop2: detected capacity change from 0 to 512 [ 60.292542][ T4189] EXT4-fs error (device loop2): __ext4_iget:5379: inode #4: block 193290: comm syz.2.117: invalid block [ 60.304011][ T4189] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.117: Bad quota inode: 4, type: 1 [ 60.316497][ T4189] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.333264][ T4189] EXT4-fs (loop2): mount failed [ 60.376962][ T4189] netlink: '+}[@': attribute type 13 has an invalid length. [ 60.848846][ T29] audit: type=1400 audit(1752439186.217:3745): avc: denied { write } for pid=4204 comm="syz.1.121" path="socket:[5763]" dev="sockfs" ino=5763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.089778][ T4210] loop1: detected capacity change from 0 to 512 [ 61.096923][ T4210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.108680][ T4210] EXT4-fs (loop1): 1 truncate cleaned up [ 61.115299][ T4210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.165671][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.191766][ T4213] veth0: entered promiscuous mode [ 61.202179][ T4212] veth0: left promiscuous mode [ 61.266506][ T4111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.278204][ T4111] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.289701][ T4111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.301292][ T4111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.373355][ T4224] loop3: detected capacity change from 0 to 1024 [ 61.380524][ T4224] EXT4-fs: Ignoring removed orlov option [ 61.417768][ T4224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.508537][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.523924][ T4229] loop1: detected capacity change from 0 to 1024 [ 61.530620][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.540989][ T4229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.555108][ T4229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.579799][ T4229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.634713][ T4238] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.127: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 61.643604][ T4239] netlink: 128 bytes leftover after parsing attributes in process `syz.0.130'. [ 61.661464][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.672694][ T4239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'. [ 61.789763][ T4243] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 61.858778][ T4248] lo speed is unknown, defaulting to 1000 [ 61.868548][ T4248] lo speed is unknown, defaulting to 1000 [ 61.894858][ T4249] process 'syz.0.133' launched '/dev/fd/3' with NULL argv: empty string added [ 62.210371][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.224997][ T4253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 62.233978][ T4253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.134'. [ 62.242889][ T4253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 62.252187][ T4253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 62.376737][ T4258] loop1: detected capacity change from 0 to 2048 [ 62.387077][ T4258] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.422418][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.482226][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.541860][ T4264] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 62.663909][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.690612][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.774044][ T4273] fido_id[4273]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.814063][ T4279] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 62.821959][ T4279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 62.831839][ T4279] team0: entered promiscuous mode [ 62.836916][ T4279] team_slave_0: entered promiscuous mode [ 62.842794][ T4279] team_slave_1: entered promiscuous mode [ 62.847074][ T4281] loop1: detected capacity change from 0 to 512 [ 62.848505][ T4279] team0: entered allmulticast mode [ 62.860561][ T4279] team_slave_0: entered allmulticast mode [ 62.866370][ T4279] team_slave_1: entered allmulticast mode [ 62.875166][ T4279] bridge0: port 3(team0) entered blocking state [ 62.881526][ T4279] bridge0: port 3(team0) entered disabled state [ 62.894346][ T4279] bridge0: port 3(team0) entered blocking state [ 62.900688][ T4279] bridge0: port 3(team0) entered forwarding state [ 62.944262][ T4284] lo speed is unknown, defaulting to 1000 [ 62.950434][ T4284] lo speed is unknown, defaulting to 1000 [ 63.026742][ T4281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.097587][ T4281] EXT4-fs (loop1): 1 truncate cleaned up [ 63.127417][ T4281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.280341][ T4281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.303461][ T4281] geneve2: entered promiscuous mode [ 63.308705][ T4281] geneve2: entered allmulticast mode [ 63.390538][ T4298] loop3: detected capacity change from 0 to 512 [ 63.398149][ T4298] journal_path: Lookup failure for './file0/../file0' [ 63.405050][ T4298] EXT4-fs: error: could not find journal device path [ 63.548228][ T4304] loop1: detected capacity change from 0 to 2048 [ 63.577539][ T4306] loop2: detected capacity change from 0 to 512 [ 63.593812][ T4306] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.147: corrupted in-inode xattr: invalid ea_ino [ 63.605134][ T4309] netlink: '+W': attribute type 10 has an invalid length. [ 63.614801][ T3561] loop1: p1 < > p4 [ 63.619902][ T3561] loop1: p4 size 8388608 extends beyond EOD, truncated [ 63.621822][ T4306] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.147: couldn't read orphan inode 15 (err -117) [ 63.641022][ T4306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.641203][ T4309] bond0: (slave dummy0): Releasing backup interface [ 63.653909][ T4304] loop1: p1 < > p4 [ 63.666017][ T4309] dummy0: entered promiscuous mode [ 63.672608][ T4309] dummy0: entered allmulticast mode [ 63.673956][ T4304] loop1: p4 size 8388608 extends beyond EOD, truncated [ 63.678149][ T4310] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 63.694426][ T4309] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.703658][ T4309] team0: Failed to send options change via netlink (err -105) [ 63.711672][ T4309] team0: Port device dummy0 added [ 63.718540][ T4310] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.730757][ T4310] dummy0: left promiscuous mode [ 63.735775][ T4310] dummy0: left allmulticast mode [ 63.741559][ T4310] team0: Failed to send options change via netlink (err -105) [ 63.770312][ T4310] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.779976][ T4310] team0: Port device dummy0 removed [ 63.858729][ T4316] loop3: detected capacity change from 0 to 4096 [ 63.869003][ T4316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.902311][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.979279][ T4321] loop2: detected capacity change from 0 to 2048 [ 64.011844][ T4322] tipc: Started in network mode [ 64.016778][ T4322] tipc: Node identity ac14140f, cluster identity 4711 [ 64.042811][ T4322] tipc: New replicast peer: 255.255.255.255 [ 64.048940][ T4322] tipc: Enabled bearer , priority 10 [ 64.092524][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 64.102007][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 64.121080][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 64.130172][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 64.139665][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 64.139679][ T29] audit: type=1400 audit(1752439702.508:4213): avc: denied { create } for pid=4315 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.182370][ T29] audit: type=1400 audit(1752439702.518:4214): avc: denied { write } for pid=4315 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.201750][ T29] audit: type=1400 audit(1752439702.518:4215): avc: denied { mounton } for pid=4315 comm="syz.3.150" path="/20/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.225170][ T4329] lo speed is unknown, defaulting to 1000 [ 64.226016][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 64.240524][ T4329] lo speed is unknown, defaulting to 1000 [ 64.269220][ T4314] loop1: detected capacity change from 0 to 1024 [ 64.277090][ T29] audit: type=1400 audit(1752439702.628:4216): avc: denied { append } for pid=4324 comm="syz.2.152" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.291694][ T4314] EXT4-fs: Ignoring removed bh option [ 64.300848][ T29] audit: type=1400 audit(1752439702.628:4217): avc: denied { open } for pid=4324 comm="syz.2.152" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.330166][ T29] audit: type=1400 audit(1752439702.628:4218): avc: denied { ioctl } for pid=4324 comm="syz.2.152" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.373829][ T29] audit: type=1326 audit(1752439702.728:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 64.381609][ T4314] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.397188][ T29] audit: type=1326 audit(1752439702.728:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 64.430845][ T29] audit: type=1326 audit(1752439702.728:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 64.454241][ T29] audit: type=1326 audit(1752439702.728:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f101e929 code=0x7ffc0000 [ 64.456104][ T4314] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.478939][ T4325] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 64.498962][ T4314] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.509016][ T4332] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 64.515657][ T4332] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.519833][ T4314] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.149: iget: bad i_size value: 1407392063428608 [ 64.523515][ T4332] vhci_hcd vhci_hcd.0: Device attached [ 64.538443][ T4314] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.149: Bad quota inode: 3, type: 0 [ 64.552438][ T4335] vhci_hcd: connection closed [ 64.560280][ T3825] vhci_hcd: stop threads [ 64.567497][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.569232][ T3825] vhci_hcd: release socket [ 64.569242][ T3825] vhci_hcd: disconnect device [ 64.592050][ T4314] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 64.606744][ T4314] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 64.615531][ T4314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.668602][ T4340] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.765452][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.070101][ T10] tipc: Node number set to 2886997007 [ 65.097969][ T4352] siw: device registration error -23 [ 65.119362][ T4352] lo speed is unknown, defaulting to 1000 [ 65.125879][ T4352] lo speed is unknown, defaulting to 1000 [ 65.238881][ T4352] loop1: detected capacity change from 0 to 1024 [ 65.245872][ T4352] EXT4-fs: Ignoring removed nobh option [ 65.251498][ T4352] EXT4-fs: Ignoring removed bh option [ 65.332393][ T4352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.446270][ T4358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.483278][ T4360] netlink: 'syz.3.161': attribute type 13 has an invalid length. [ 65.485070][ T4362] netlink: 'syz.2.162': attribute type 3 has an invalid length. [ 65.562430][ T4365] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 65.571557][ T4365] team0: Port device dummy0 added [ 65.578744][ T4365] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 65.588196][ T4365] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.618128][ T4365] team0: Failed to send options change via netlink (err -105) [ 65.631114][ T4365] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.647889][ T4365] team0: Port device dummy0 removed [ 65.655272][ T4365] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.839954][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.867527][ T4377] loop1: detected capacity change from 0 to 512 [ 65.886895][ T4377] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.964220][ T4381] loop4: detected capacity change from 0 to 512 [ 65.976455][ T4381] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 65.983552][ T4374] lo speed is unknown, defaulting to 1000 [ 65.990905][ T4374] lo speed is unknown, defaulting to 1000 [ 65.991638][ T4381] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.167: iget: bad i_size value: 12154757448730 [ 66.009947][ T4381] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.167: couldn't read orphan inode 13 (err -117) [ 66.178636][ T4391] bridge0: port 3(team0) entered disabled state [ 66.191536][ T4391] bridge_slave_0: left allmulticast mode [ 66.197207][ T4391] bridge_slave_0: left promiscuous mode [ 66.202991][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.212023][ T4391] bridge_slave_1: left allmulticast mode [ 66.217772][ T4391] bridge_slave_1: left promiscuous mode [ 66.223630][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.235200][ T4391] bond0: (slave bond_slave_0): Releasing backup interface [ 66.245784][ T4391] bond0: (slave bond_slave_1): Releasing backup interface [ 66.256261][ T4391] team_slave_0: left promiscuous mode [ 66.261887][ T4391] team_slave_0: left allmulticast mode [ 66.269040][ T4391] team0: Port device team_slave_0 removed [ 66.276720][ T4391] team_slave_1: left promiscuous mode [ 66.282421][ T4391] team_slave_1: left allmulticast mode [ 66.290363][ T4391] team0: Port device team_slave_1 removed [ 66.297023][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.304548][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.314071][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.321601][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.343661][ T4393] vlan0: entered promiscuous mode [ 66.353056][ T4393] vlan0: entered allmulticast mode [ 66.358222][ T4393] veth0_vlan: entered allmulticast mode [ 66.376984][ T4393] team0: Port device vlan0 added [ 66.389576][ T4396] tipc: Enabled bearer , priority 0 [ 66.494999][ T4406] netlink: 'syz.0.174': attribute type 27 has an invalid length. [ 66.547303][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.554642][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.566654][ T4406] $Hÿ: left promiscuous mode [ 66.571619][ T4406] bond_slave_0: left promiscuous mode [ 66.577112][ T4406] bond_slave_1: left promiscuous mode [ 66.583612][ T4406] dummy0: left promiscuous mode [ 66.651029][ T4406] wg2: left promiscuous mode [ 66.655733][ T4406] wg2: left allmulticast mode [ 66.677288][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.689464][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.755470][ T4406] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.756778][ T4415] loop1: detected capacity change from 0 to 2048 [ 66.764421][ T4406] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.764459][ T4406] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.764498][ T4406] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.799508][ T10] lo speed is unknown, defaulting to 1000 [ 66.815967][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.838866][ T3305] ================================================================== [ 66.847006][ T3305] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 66.854415][ T3305] [ 66.856743][ T3305] write to 0xffff888237c26f10 of 8 bytes by task 3561 on cpu 0: [ 66.864380][ T3305] invalidate_bh_lru+0x8f/0xf0 [ 66.869167][ T3305] smp_call_function_many_cond+0x237/0xbf0 [ 66.874982][ T3305] on_each_cpu_cond_mask+0x3c/0x80 [ 66.880104][ T3305] invalidate_bh_lrus+0x2a/0x30 [ 66.884977][ T3305] blkdev_flush_mapping+0x9a/0x1a0 [ 66.890106][ T3305] bdev_release+0x2bf/0x3d0 [ 66.894632][ T3305] blkdev_release+0x15/0x20 [ 66.899183][ T3305] __fput+0x29b/0x650 [ 66.903196][ T3305] fput_close_sync+0x6e/0x120 [ 66.907905][ T3305] __x64_sys_close+0x56/0xf0 [ 66.912517][ T3305] x64_sys_call+0x2747/0x2fb0 [ 66.917209][ T3305] do_syscall_64+0xd2/0x200 [ 66.921729][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.927640][ T3305] [ 66.929974][ T3305] read to 0xffff888237c26f10 of 8 bytes by task 3305 on cpu 1: [ 66.937524][ T3305] has_bh_in_lru+0x35/0x1f0 [ 66.942050][ T3305] smp_call_function_many_cond+0x38c/0xbf0 [ 66.947871][ T3305] on_each_cpu_cond_mask+0x3c/0x80 [ 66.952998][ T3305] invalidate_bh_lrus+0x2a/0x30 [ 66.957874][ T3305] invalidate_bdev+0x42/0x70 [ 66.962472][ T3305] ext4_put_super+0x624/0x7d0 [ 66.967165][ T3305] generic_shutdown_super+0xe6/0x210 [ 66.972469][ T3305] kill_block_super+0x2a/0x70 [ 66.977169][ T3305] ext4_kill_sb+0x42/0x80 [ 66.981514][ T3305] deactivate_locked_super+0x75/0x1c0 [ 66.986914][ T3305] deactivate_super+0x97/0xa0 [ 66.991627][ T3305] cleanup_mnt+0x269/0x2e0 [ 66.996053][ T3305] __cleanup_mnt+0x19/0x20 [ 67.000477][ T3305] task_work_run+0x131/0x1a0 [ 67.005078][ T3305] exit_to_user_mode_loop+0xe4/0x100 [ 67.010377][ T3305] do_syscall_64+0x1d6/0x200 [ 67.015061][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.020964][ T3305] [ 67.023309][ T3305] value changed: 0xffff888106de0680 -> 0x0000000000000000 [ 67.030427][ T3305] [ 67.032761][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 67.038934][ T3305] CPU: 1 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 67.051632][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.061711][ T3305] ================================================================== [ 67.076361][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.084950][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.097018][ T4408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.166377][ T4418] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 67.180554][ T4411] syzkaller1: entered promiscuous mode [ 67.186098][ T4411] syzkaller1: entered allmulticast mode [ 67.192429][ T36] lo speed is unknown, defaulting to 1000 [ 67.234749][ T4415] EXT4-fs (loop1): can't enable nombcache during remount [ 67.270766][ T4400] lo speed is unknown, defaulting to 1000 [ 67.294695][ T4400] lo speed is unknown, defaulting to 1000