last executing test programs: 1.802481951s ago: executing program 3 (id=158): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x3, 0x8000, 0x43, 0x500, 0x73, 0x10001, r3}) r4 = msgget$private(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setreuid(0x0, 0xee00) unshare(0x40000480) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1.634976105s ago: executing program 0 (id=159): syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @srh={0x3a, 0x4, 0x4, 0x2, 0x5, 0x38, 0x101, [@mcast2, @mcast2]}]}}}}}, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac5, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x18, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x431b}}]}, 0x38}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @private=0xa010102, 0x1, "3756b4d1c869c835857dc44ddf70b92fb3735c67042b9197f6fc1c9c05af8e82", 0x5, 0xb, 0x1, 0xfffffffe}, 0x3c) 1.563551452s ago: executing program 0 (id=160): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@debug}, {@noblock_validity}, {@data_journal}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r3, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r5, 0x1, 0x3e, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) r8 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r8, &(0x7f00000005c0)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="020afc000300000028bd7000fedbdf25010018"], 0x18}}, 0x40408c0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) syz_io_uring_setup(0x6738, &(0x7f0000000180)={0x0, 0xc171, 0x2, 0x8002, 0x1ed}, &(0x7f0000000300), &(0x7f00000000c0)) 1.35894891s ago: executing program 3 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000230900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000089000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.295040166s ago: executing program 0 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x1006, 0x85, 0x7, 0xd746}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x4000201a}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r4, 0x407, 0x176) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x80}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x200, 0x20000000081, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@multicast1, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') pread64(r11, &(0x7f0000000080)=""/17, 0x11, 0xf0b) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0x9}}, './file0\x00'}) write$P9_RREADDIR(r12, &(0x7f00000000c0)={0x49, 0x29, 0x2, {0x4, [{{0x20, 0x2, 0x3}, 0x7, 0xf, 0x7, './file0'}, {{0x8, 0x2}, 0x0, 0x1, 0x7, './file0'}]}}, 0x49) 1.294471366s ago: executing program 3 (id=165): socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0xb67e, 0x8, 0x8001002, 0x3d7}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1.02578265s ago: executing program 2 (id=166): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='wbt_step\x00', r1, 0x0, 0x2144}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xa6\xb7Uu\xd3G\xbe\"\xbe\x87\xe7,]nW<:\xaa\xc9\xb8\x83C\x8c\xde$C4o~\xd7\xe5\xe9\xd2\xd9\x1bC)\xbf\xdf\xdb\xa6B\xe0x\xe5\xa3{\x82~\xd5(\xe7\x9c\xa2\xca\x8dnW\xf5\x16\"05\xf4\xadn\xcd\xa9\xe4\xe0/\x80>\xb9\xb3\xb4\xf5\xe2mN\xb4\xa3\x9e\x19{\xbe\xb8sj\xcb\xa4\x17(<\xbed\x17\xb0Dp\xce\xd8\xee0\xff\x98\x01Z8y*0\xfb\x9a\xbe\xb04\xbd\xecj\xad', &(0x7f0000000500)='\x00', 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x8, 0x800, 0x4, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) r4 = socket(0x2d, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @value=r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) 955.465886ms ago: executing program 4 (id=167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x18) readahead(r1, 0xd108, 0x42) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 934.594638ms ago: executing program 2 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0xd37, 0x1000, 0x4000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 934.105468ms ago: executing program 4 (id=169): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x6a52) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x9, 0xffff, 0x55, @mcast2, @mcast2, 0x1, 0x3bb2439528c4c24f, 0x3, 0x5}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', r2, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) keyctl$unlink(0x9, r1, 0xfffffffffffffffc) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x90) 898.703941ms ago: executing program 4 (id=170): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) (async) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 897.633291ms ago: executing program 1 (id=171): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu=_0!|!') r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x103280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_open_procfs(r3, &(0x7f0000000340)='net/nfsfs\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5b}, 0x28) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="d71265c7c24c73773397d609f7057f0c02e8ee4cec5b64497034aca37004d8b318c1733410e1ff138ecad0ec3177cccd398193206969b8ff4b23c2130a2aea8c2e14051e636279195bc8e95211a260d40e0d44de29c0fae01c48d441275ebf66df4898b427e4c75342d5af84450d7ec4d74e3148f50df13ea12ff182fa35d4967eda34"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000180)=""/209, &(0x7f0000000300)=0xd1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001", @ANYRES32, @ANYBLOB="551334f613a89bbd048a1006ce1e20abc605b37a8cf8cd181adbba56a613482287257d954771884ddfd09ea75330b62da976f140edae5a8a414d8c49e519efaf27a73535913f44351bb91391d8e1e5b1eefb4ccaae0e29acafe0dc10c58a5a356d746e16dc8d2b589e78ec9949482be314cbd0b417cc4d583167a61c8398e029a50ae9fbf365d420f58fbada0bfd86b1c79f6c3efdf04d23bf0d0ff7b776be92dad679db87e590d40d8eab6c"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000280)={r9, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 834.721726ms ago: executing program 2 (id=172): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ce, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 822.999378ms ago: executing program 4 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331, 0x70bd2a, 0x1000000}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4886) 784.016991ms ago: executing program 1 (id=174): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9b}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket(0x10, 0x2, 0x9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000ca031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c9afcf6cd00000000000000000000fc"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 738.950305ms ago: executing program 2 (id=175): r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 738.547795ms ago: executing program 4 (id=176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r0, 0x0, 0x2014) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703009572000000850000001b000000b7000000000000009500ffff00000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 701.648158ms ago: executing program 2 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="f56d616b000000000100a53e8b0c08dfa0ec30b93f41ac1c2e34a2b1be0cf07dbc0a", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x4000) 653.666373ms ago: executing program 2 (id=178): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4005, 0x8, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x501, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0x0, 0xa}, {0x7, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x30000014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b4000000100009040083f0ac3700000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e"], 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000380), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) 486.745287ms ago: executing program 4 (id=179): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000380), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2218, 0x7721, 0x16, 0x0, 0x0) shutdown(r1, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0, 0x5517, 0xffe0}) 461.653809ms ago: executing program 1 (id=180): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000600"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="180000002d0e666735aa566600000000000000005206c1c1c0d0f488a817a4eb811d4b9ec2a58a99ec551c03ec289f55db730fed1019ce3e294aaaa5d00f4f23f511ea0f542fa5d1618c434ed81cc9e349b639c5442595d4684b60c4b85435c500c4749118ef286cd70de979400bf04988a4147f90fb06bd7d5837fa1291f0b65f618939b3fb6fc0b7ef85005ee5fdd8d7a6c67d2865737e9585021b27b900e878f500c0b67c726e075e7c8407c8c322bb85b7dc02802f39fdcfee4da344a63ad3fe0e5ef3e40965f5d044cfe9c42ad11a0f68ebaba372ea0021000000000000631f4366", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x391cc40fecd11fba) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818413, &(0x7f0000000080)={[{@data_journal}]}, 0xfd, 0x5bb, &(0x7f0000000740)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8540, 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, 0x0) setsockopt$MRT_ADD_MFC(r7, 0x0, 0x5, 0x0, 0x0) 384.106436ms ago: executing program 3 (id=181): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ioctl$int_in(r1, 0x5452, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x102, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1075}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40dff, 0x24, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000100000280000c0012", 0x2e}], 0x1}, 0x0) 282.584306ms ago: executing program 1 (id=182): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xdaab5642f51fd45f, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0xa6c, [0x200000000700, 0x0, 0x0, 0x200000000730, 0x200000000806], 0x0, &(0x7f00000000c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x1a, 0x8847, 'caif0\x00', 'ip_vti0\x00', 'syz_tun\x00', 'bond0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@random="8e02fc41236d", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x1, 0x6006, 'ip6gretap0\x00', 'batadv0\x00', 'dvmrp0\x00', 'wlan0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="42f7e8da7a86", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x896, 0x8fe, 0x936, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x1312, 0xa, 0x0, {0x4}}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0xfffffff9}, {0x6, 0x1}, {0xffff0000}, {0x9, 0x1}, {0x5, 0x2}, {0x9, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x40, 0x3}, {0x7ff}, {0x7ff, 0x1}], [{0x100, 0x9}, {0xfffffffd, 0x100}, {0x7, 0x6}, {0x8, 0xf}, {0x7fffffff, 0x3}, {0x5, 0xdc95}, {0x7fffffff, 0x7}, {0x8, 0xfffffffb}, {0x149, 0x8}, {0x4, 0x5}, {0x7000, 0xfffffb90}], 0x9, 0x6}, {[{0x2}, {0x3}, {0x5}, {0x3caa}, {0x3, 0x3}, {0x947}, {0x3, 0x2}, {0x3, 0x2}, {0xfff}, {0x43}, {0x1, 0x2}], [{0x0, 0x9}, {0x80}, {0x1, 0x81}, {0x9, 0x80000000}, {0x1, 0xea}, {0xfffffffc}, {0xa93, 0x2}, {0x2}, {0x0, 0xb2000000}, {0x1}, {0x8, 0x9}], 0x1, 0x9}, {[{0x0, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x3}, {0x9, 0x1}, {0x2, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x44, 0x1}, {0x7, 0x2}, {0x7}], [{0xd690, 0x5}, {0x7b, 0x1ff}, {0x8}, {0x7a9, 0x5}, {0xfffffffc, 0x8}, {0xc279, 0x8}, {0xffffffff, 0xb}, {0x8, 0x6}, {0x3, 0x401}, {0x5, 0x6}, {0xc, 0x7}], 0x7, 0x9}, {[{0x2, 0x2}, {0x5}, {0x80}, {0x8001, 0x3}, {0xffff8001}, {0x492b, 0x3}, {0xbcba, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x7, 0x3}], [{0x6c90cf8b, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x4c2, 0x1}, {0x1, 0x48}, {0x81, 0x6}, {0x6, 0xfffffffe}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x7fff}, {0x7, 0x3ff}], 0xb, 0x1}, {[{0x1}, {0x6}, {0x1000}, {0x6, 0x3}, {0x9, 0x3}, {0x3ff, 0x2}, {0x40, 0x2}, {0x475c}, {0xddd4}, {0x10ce, 0x2}, {0x401, 0x3}], [{0xf, 0x9}, {0x4, 0xfb3}, {0x7fffffff, 0x4}, {0x3, 0x7}, {0x6, 0x48}, {0x3, 0x5}, {0x3, 0x5}, {0x2f, 0xff}, {0x7, 0x809}, {0xfffffff7, 0x8}, {0x3, 0x1}], 0x1, 0x9}, {[{0x5, 0x2}, {0xbf08}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x81, 0x2}, {0x401, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x9, 0x2}, {0x80000001, 0x2}], [{0xdc, 0x8}, {0x9, 0x1}, {0x0, 0x10001}, {0x9, 0x8}, {0x3ff, 0x7000000}, {0x8000, 0xde}, {0x1, 0xffffffff}, {0x6, 0x80e}, {0x8001}, {0x7, 0x7}, {0x3, 0x9}], 0x8, 0xb}, {[{0x5, 0x3}, {}, {0xffff, 0x1}, {0x7ae, 0x3}, {0xffffcfd4, 0x2}, {0x2}, {0x7, 0x3}, {0x6, 0x2}, {0x4, 0x3}, {0x4}, {0x8}], [{0x6, 0x5}, {0x4, 0xd}, {0x8000, 0xb2}, {0x3, 0x7}, {0xc, 0x8}, {0x6}, {0x80, 0x459b}, {0xcf, 0x7ff}, {0x7, 0x6}, {0x8, 0x9}, {0x2, 0x6}], 0x0, 0x2}, {[{0x6, 0x1}, {0x7fffffff, 0x2}, {0xffffffff, 0x3}, {0x2, 0x3}, {0x6}, {0x2, 0x3}, {0x5}, {0x8, 0x1}, {0x40, 0x3}, {0x7, 0x1}, {0xfcaa, 0x1}], [{0x2, 0x4}, {0x9a74}, {0x2, 0x9}, {0x5, 0x8}, {0x80000001, 0x3}, {0x8, 0x286}, {0x3, 0x9}, {0x22e9, 0x5}, {0x10001, 0x10000}, {0x65}, {0x4, 0xe}], 0x7, 0x7}, {[{0x6, 0x1}, {0x6d, 0x1}, {0x1000}, {0xdd, 0x1}, {0x4299, 0x3}, {0x1}, {0x9, 0x3}, {0x9, 0x1}, {0x2}, {0x7, 0x3}, {0x5}], [{0x9, 0x3}, {0x4, 0x8001}, {0x9, 0x8}, {0x81, 0x7fffffff}, {0x4, 0x5}, {0x5916, 0x800}, {0x1, 0x6}, {0x1, 0x7}, {0x8, 0x2}, {0xb8, 0x84612136}, {0xfffffffe, 0x5}], 0x1, 0x1}, {[{0x1600}, {0xfffffffe, 0x1}, {0x100000}, {0xff, 0x2}, {0x7fffffff, 0x1}, {0xd3a6}, {0x4}, {0x6, 0x2}, {0x9}, {0x6}, {0x8, 0x3}], [{0x2, 0x1}, {0x9, 0x1}, {0x8001, 0x3}, {0xa, 0xd}, {0x200, 0xc}, {0x2, 0x92}, {0x9, 0x8}, {0x16, 0x4}, {0x0, 0x7}, {0xe6e3, 0xfffffff8}, {0x6, 0x95b}], 0x3, 0x3}, {[{0xffffffff, 0x3}, {0x1, 0x2}, {0x7fffffff}, {0xc5d, 0x7}, {0xffff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x2}, {0x8, 0x1}, {0x5, 0x3}, {0xf, 0x2}], [{0x8000, 0xb7c27cc3}, {0x0, 0x6e8d}, {0x3, 0x80000000}, {0x2, 0x2}, {0x6, 0x7fffffff}, {0x9, 0xc3}, {0x200, 0xc98}, {0x7, 0x1ff}, {0x7bc, 0xca3c}, {0xa, 0x2}, {0xbbaf, 0xa}], 0x5, 0x8}], 0x4, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}]}]}, 0xae4) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f00000006c0)="e708", 0xffa5) 282.035186ms ago: executing program 1 (id=183): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000a203000000000000850200001b000000000000000000000000000000000000001c6bdc3b7ebfcc707bad8700579a6f9c1cb6ce95532e679899ee966c7d91c4cd5e2d8ec7ab889065fe46baf50b8c4d17e701ef123c8ec67037e0000437b3128b0aac9457786c80c1de01b28605974c5757d2217105ffcf4003884479"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) bind$phonet(r1, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10) shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0x80da61, 0x1, 0x20000000, 0x40000337}, &(0x7f0000000240), &(0x7f00000001c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/243, 0xf3}, {0x0}], 0x6) getrlimit(0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 208.255392ms ago: executing program 3 (id=184): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000afa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000000000808500000085000000580100002020640500000000002020207b1af8ff00f40000ead7a7e46a1ab1a8c611c93f313ebfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0\x00') r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fedbdf2a1d01060008000900", @ANYRES32=r9, @ANYRES16=r4, @ANYRES32=r9, @ANYRESDEC=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, &(0x7f00000008c0), &(0x7f0000000880)=r12}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="5b080000000000ebffe0000700001819b4", @ANYRES32=r11, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x429, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r13, &(0x7f0000000000)='./file0\x00', 0x5) 198.012403ms ago: executing program 0 (id=185): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010"], 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x1e}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 66.894925ms ago: executing program 3 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000000100000095"], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 66.555235ms ago: executing program 0 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x4b, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x4b, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x28, r8, 0xb29, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x7c}}}}}, 0x28}}, 0x2404c044) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xc4, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1000, 0xc8, 0x0, 0x4, 0x3, 0x2}}, {0x8, 0x2, [0xa0, 0x3ff]}}, {{0x1c, 0x1, {0x1, 0x4, 0x9, 0x0, 0x0, 0x9, 0xfff, 0x6}}, {0x10, 0x2, [0x4, 0x8001, 0xd70, 0x7, 0x10, 0x7]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 20.257919ms ago: executing program 1 (id=188): r0 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r0, 0x600, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 0s ago: executing program 0 (id=189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800008000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x24, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffa000/0x3000)=nil, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a000000050004"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 33.214810][ T29] audit: type=1400 audit(1767759715.480:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.237950][ T29] audit: type=1400 audit(1767759715.500:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.240221][ T3308] cgroup: Unknown subsys name 'net' [ 33.265795][ T29] audit: type=1400 audit(1767759715.530:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.403664][ T3308] cgroup: Unknown subsys name 'cpuset' [ 33.409944][ T3308] cgroup: Unknown subsys name 'rlimit' [ 33.601601][ T29] audit: type=1400 audit(1767759715.860:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.625250][ T29] audit: type=1400 audit(1767759715.870:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.645748][ T29] audit: type=1400 audit(1767759715.870:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.666118][ T29] audit: type=1400 audit(1767759715.870:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.686493][ T29] audit: type=1400 audit(1767759715.890:69): avc: denied { read } for pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.707563][ T29] audit: type=1400 audit(1767759715.890:70): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.728041][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.732442][ T29] audit: type=1400 audit(1767759715.890:71): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.783736][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.045871][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.112496][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.153329][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.160414][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.167999][ T3319] bridge_slave_0: entered allmulticast mode [ 35.174447][ T3319] bridge_slave_0: entered promiscuous mode [ 35.195216][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.202312][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.209800][ T3319] bridge_slave_1: entered allmulticast mode [ 35.216196][ T3319] bridge_slave_1: entered promiscuous mode [ 35.264739][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.277847][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.298187][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.318412][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.325630][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.332825][ T3318] bridge_slave_0: entered allmulticast mode [ 35.339476][ T3318] bridge_slave_0: entered promiscuous mode [ 35.345919][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.355032][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.375252][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.382411][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.389656][ T3318] bridge_slave_1: entered allmulticast mode [ 35.396117][ T3318] bridge_slave_1: entered promiscuous mode [ 35.434635][ T3319] team0: Port device team_slave_0 added [ 35.455394][ T3319] team0: Port device team_slave_1 added [ 35.466762][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.491713][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.510493][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.517654][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.524800][ T3321] bridge_slave_0: entered allmulticast mode [ 35.531213][ T3321] bridge_slave_0: entered promiscuous mode [ 35.549681][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.556704][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.582811][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.593755][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.600962][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.608427][ T3321] bridge_slave_1: entered allmulticast mode [ 35.614839][ T3321] bridge_slave_1: entered promiscuous mode [ 35.637343][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.644575][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.670594][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.687556][ T3318] team0: Port device team_slave_0 added [ 35.693252][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.700347][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.707529][ T3324] bridge_slave_0: entered allmulticast mode [ 35.714065][ T3324] bridge_slave_0: entered promiscuous mode [ 35.733729][ T3318] team0: Port device team_slave_1 added [ 35.739475][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.746601][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.753768][ T3324] bridge_slave_1: entered allmulticast mode [ 35.760167][ T3324] bridge_slave_1: entered promiscuous mode [ 35.766524][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.773653][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.780792][ T3320] bridge_slave_0: entered allmulticast mode [ 35.787757][ T3320] bridge_slave_0: entered promiscuous mode [ 35.796191][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.820763][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.827979][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.835211][ T3320] bridge_slave_1: entered allmulticast mode [ 35.841638][ T3320] bridge_slave_1: entered promiscuous mode [ 35.849461][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.864356][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.871563][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.897525][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.927908][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.934884][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.960877][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.972970][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.992596][ T3321] team0: Port device team_slave_0 added [ 36.001997][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.012561][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.024044][ T3319] hsr_slave_0: entered promiscuous mode [ 36.030127][ T3319] hsr_slave_1: entered promiscuous mode [ 36.037146][ T3321] team0: Port device team_slave_1 added [ 36.055856][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.097280][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.104276][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.130272][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.142091][ T3324] team0: Port device team_slave_0 added [ 36.162825][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.169877][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.195906][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.207525][ T3324] team0: Port device team_slave_1 added [ 36.213995][ T3320] team0: Port device team_slave_0 added [ 36.224374][ T3318] hsr_slave_0: entered promiscuous mode [ 36.230426][ T3318] hsr_slave_1: entered promiscuous mode [ 36.236434][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.242180][ T3318] Cannot create hsr debugfs directory [ 36.256568][ T3320] team0: Port device team_slave_1 added [ 36.284243][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.291281][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.317352][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.347784][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.354803][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.380751][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.391713][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.398726][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.424732][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.452651][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.459660][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.485592][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.498557][ T3321] hsr_slave_0: entered promiscuous mode [ 36.504690][ T3321] hsr_slave_1: entered promiscuous mode [ 36.510498][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.516294][ T3321] Cannot create hsr debugfs directory [ 36.577022][ T3324] hsr_slave_0: entered promiscuous mode [ 36.583361][ T3324] hsr_slave_1: entered promiscuous mode [ 36.589321][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 36.595110][ T3324] Cannot create hsr debugfs directory [ 36.610103][ T3320] hsr_slave_0: entered promiscuous mode [ 36.616228][ T3320] hsr_slave_1: entered promiscuous mode [ 36.622160][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.628016][ T3320] Cannot create hsr debugfs directory [ 36.740354][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.754308][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.772844][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.786928][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.836283][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.845257][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.857584][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.871305][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.891414][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.902013][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.914682][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.927431][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.952046][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.970000][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.984392][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.000418][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.022115][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.031485][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.042749][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.054153][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.074089][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.110150][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.120152][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.138861][ T2093] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.146014][ T2093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.155379][ T2093] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.162622][ T2093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.191596][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.200365][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.218218][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.225313][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.244082][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.251162][ T1960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.262177][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.280879][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.288178][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.307218][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.314301][ T1960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.341604][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.378743][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.388770][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.400321][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.417731][ T2093] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.424853][ T2093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.434113][ T2093] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.441264][ T2093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.454427][ T2093] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.461503][ T2093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.471760][ T2093] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.479032][ T2093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.494548][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.528619][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.539071][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.585682][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.648751][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.685394][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.710220][ T3319] veth0_vlan: entered promiscuous mode [ 37.753786][ T3319] veth1_vlan: entered promiscuous mode [ 37.766148][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.810866][ T3319] veth0_macvtap: entered promiscuous mode [ 37.817852][ T3320] veth0_vlan: entered promiscuous mode [ 37.825611][ T3319] veth1_macvtap: entered promiscuous mode [ 37.851152][ T3320] veth1_vlan: entered promiscuous mode [ 37.869825][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.892162][ T3318] veth0_vlan: entered promiscuous mode [ 37.900322][ T3318] veth1_vlan: entered promiscuous mode [ 37.915605][ T3320] veth0_macvtap: entered promiscuous mode [ 37.926700][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.939153][ T3320] veth1_macvtap: entered promiscuous mode [ 37.949127][ T1716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.966639][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.986543][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.993927][ T1716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.011494][ T1716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.022092][ T3318] veth0_macvtap: entered promiscuous mode [ 38.032570][ T3324] veth0_vlan: entered promiscuous mode [ 38.038773][ T1716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.048484][ T3318] veth1_macvtap: entered promiscuous mode [ 38.060476][ T1716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.072794][ T1716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.093657][ T1716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.104027][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.115673][ T3324] veth1_vlan: entered promiscuous mode [ 38.128405][ T2512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.161028][ T3321] veth0_vlan: entered promiscuous mode [ 38.172895][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.183428][ T3489] sctp: [Deprecated]: syz.3.4 (pid 3489) Use of int in max_burst socket option. [ 38.183428][ T3489] Use struct sctp_assoc_value instead [ 38.185954][ T3321] veth1_vlan: entered promiscuous mode [ 38.209527][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.234917][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 38.234935][ T29] audit: type=1400 audit(1767759720.500:111): avc: denied { execute } for pid=3488 comm="syz.3.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.273717][ T29] audit: type=1400 audit(1767759720.500:112): avc: denied { read write } for pid=3492 comm="syz.0.1" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 38.297082][ T29] audit: type=1400 audit(1767759720.500:113): avc: denied { open } for pid=3492 comm="syz.0.1" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 38.321615][ T3324] veth0_macvtap: entered promiscuous mode [ 38.334331][ T2512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.348443][ T2512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357217][ T29] audit: type=1326 audit(1767759720.610:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.380482][ T29] audit: type=1326 audit(1767759720.610:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.384533][ T3324] veth1_macvtap: entered promiscuous mode [ 38.403648][ T29] audit: type=1326 audit(1767759720.610:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.432343][ T29] audit: type=1326 audit(1767759720.610:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.441261][ T2512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.455526][ T29] audit: type=1326 audit(1767759720.610:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.487575][ T29] audit: type=1326 audit(1767759720.610:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.512023][ T29] audit: type=1326 audit(1767759720.700:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f08cbf749 code=0x7ffc0000 [ 38.517904][ T2512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.548036][ T3321] veth0_macvtap: entered promiscuous mode [ 38.559097][ T3321] veth1_macvtap: entered promiscuous mode [ 38.574572][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.591053][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.605693][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.624114][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.632552][ T1960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.645625][ T1960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.661218][ T1960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.685786][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.696902][ T1960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.723988][ T3502] team1: entered promiscuous mode [ 38.729092][ T3502] team1: entered allmulticast mode [ 38.734676][ T3502] 8021q: adding VLAN 0 to HW filter on device team1 [ 38.743927][ T3502] Zero length message leads to an empty skb [ 38.750819][ T1960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.771140][ T1960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.847786][ T3511] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 38.855434][ T3511] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5'. [ 38.864811][ T1960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.889209][ T1960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.939616][ T3517] loop2: detected capacity change from 0 to 512 [ 39.005465][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.043976][ T3517] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.051812][ T3530] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.059689][ T3517] FAULT_INJECTION: forcing a failure. [ 39.059689][ T3517] name failslab, interval 1, probability 0, space 0, times 1 [ 39.078869][ T3517] CPU: 0 UID: 0 PID: 3517 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.078899][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.078914][ T3517] Call Trace: [ 39.078923][ T3517] [ 39.078931][ T3517] __dump_stack+0x1d/0x30 [ 39.078955][ T3517] dump_stack_lvl+0x95/0xd0 [ 39.079030][ T3517] dump_stack+0x15/0x1b [ 39.079051][ T3517] should_fail_ex+0x265/0x280 [ 39.079080][ T3517] should_failslab+0x8c/0xb0 [ 39.079108][ T3517] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 39.079165][ T3517] ? sidtab_sid2str_get+0xa0/0x130 [ 39.079207][ T3517] kmemdup_noprof+0x2b/0x70 [ 39.079251][ T3517] sidtab_sid2str_get+0xa0/0x130 [ 39.079292][ T3517] security_sid_to_context_core+0x1eb/0x2e0 [ 39.079326][ T3517] security_sid_to_context+0x27/0x40 [ 39.079353][ T3517] avc_audit_post_callback+0x9d/0x520 [ 39.079448][ T3517] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 39.079574][ T3517] common_lsm_audit+0x1bb/0x230 [ 39.079686][ T3517] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 39.079735][ T3517] slow_avc_audit+0x104/0x140 [ 39.079840][ T3517] avc_has_perm+0x13a/0x180 [ 39.079876][ T3517] may_create+0x218/0x2b0 [ 39.079935][ T3517] selinux_inode_create+0x22/0x30 [ 39.079974][ T3517] security_inode_create+0x7a/0xc0 [ 39.080012][ T3517] path_openat+0xc90/0x23b0 [ 39.080063][ T3517] do_filp_open+0x109/0x230 [ 39.080114][ T3517] do_sys_openat2+0xa6/0x150 [ 39.080157][ T3517] __x64_sys_openat+0xf2/0x120 [ 39.080196][ T3517] x64_sys_call+0x2b07/0x3000 [ 39.080225][ T3517] do_syscall_64+0xca/0x2b0 [ 39.080312][ T3517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.080353][ T3517] RIP: 0033:0x7f6577def749 [ 39.080372][ T3517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.080394][ T3517] RSP: 002b:00007f657684f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.080440][ T3517] RAX: ffffffffffffffda RBX: 00007f6578045fa0 RCX: 00007f6577def749 [ 39.080456][ T3517] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 39.080471][ T3517] RBP: 00007f657684f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.080485][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.080514][ T3517] R13: 00007f6578046038 R14: 00007f6578045fa0 R15: 00007ffd8707d8e8 [ 39.080540][ T3517] [ 39.369545][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.753534][ T3560] loop4: detected capacity change from 0 to 1024 [ 39.760266][ T3560] ======================================================= [ 39.760266][ T3560] WARNING: The mand mount option has been deprecated and [ 39.760266][ T3560] and is ignored by this kernel. Remove the mand [ 39.760266][ T3560] option from the mount to silence this warning. [ 39.760266][ T3560] ======================================================= [ 39.797849][ T3560] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.813740][ T3560] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.872767][ T3560] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 39.904049][ T3560] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 39.923782][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.953854][ T3560] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 40.007336][ T3560] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 40.066194][ T3560] ÿ (3560) used greatest stack depth: 9600 bytes left [ 40.085561][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.191747][ T3571] tmpfs: Bad value for 'mpol' [ 40.217275][ T3573] loop1: detected capacity change from 0 to 512 [ 40.236573][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.258313][ T3577] loop4: detected capacity change from 0 to 512 [ 40.265230][ T3573] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.291468][ T3577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.322018][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.341624][ T3573] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.22: corrupted xattr block 6: invalid header [ 40.362162][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 40.374104][ T3573] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.22: corrupted xattr block 6: invalid header [ 40.387634][ T3577] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.398081][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 40.407490][ T3573] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.22: corrupted xattr block 6: invalid header [ 40.421220][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 40.430356][ T3573] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.22: corrupted xattr block 6: invalid header [ 40.444288][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 40.453683][ T3573] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.22: corrupted xattr block 6: invalid header [ 40.470193][ T3586] loop0: detected capacity change from 0 to 128 [ 40.488865][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 40.513939][ T3585] netlink: 'syz.3.25': attribute type 29 has an invalid length. [ 40.551899][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.575576][ T3573] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.22: corrupted xattr block 6: invalid header [ 40.636627][ T3594] netlink: 'syz.2.29': attribute type 29 has an invalid length. [ 40.649216][ T3586] syz.0.24: attempt to access beyond end of device [ 40.649216][ T3586] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 40.675760][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.715896][ T3586] syz.0.24: attempt to access beyond end of device [ 40.715896][ T3586] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 40.738872][ T3586] syz.0.24: attempt to access beyond end of device [ 40.738872][ T3586] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 40.752541][ T3586] syz.0.24: attempt to access beyond end of device [ 40.752541][ T3586] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 40.767820][ T3586] syz.0.24: attempt to access beyond end of device [ 40.767820][ T3586] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 40.782266][ T3586] syz.0.24: attempt to access beyond end of device [ 40.782266][ T3586] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 40.795726][ T3586] syz.0.24: attempt to access beyond end of device [ 40.795726][ T3586] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 40.809507][ T3586] syz.0.24: attempt to access beyond end of device [ 40.809507][ T3586] loop0: rw=2049, sector=257, nr_sectors = 16 limit=128 [ 40.824100][ T3586] syz.0.24: attempt to access beyond end of device [ 40.824100][ T3586] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 40.838178][ T3586] syz.0.24: attempt to access beyond end of device [ 40.838178][ T3586] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 41.103856][ T3608] loop2: detected capacity change from 0 to 8192 [ 41.233105][ T3615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 41.239769][ T3615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.247439][ T3615] vhci_hcd vhci_hcd.0: Device attached [ 41.260316][ T3619] FAULT_INJECTION: forcing a failure. [ 41.260316][ T3619] name failslab, interval 1, probability 0, space 0, times 0 [ 41.273045][ T3619] CPU: 1 UID: 0 PID: 3619 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.273127][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.273139][ T3619] Call Trace: [ 41.273145][ T3619] [ 41.273153][ T3619] __dump_stack+0x1d/0x30 [ 41.273214][ T3619] dump_stack_lvl+0x95/0xd0 [ 41.273239][ T3619] dump_stack+0x15/0x1b [ 41.273262][ T3619] should_fail_ex+0x265/0x280 [ 41.273368][ T3619] should_failslab+0x8c/0xb0 [ 41.273395][ T3619] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 41.273482][ T3619] ? __d_alloc+0x37/0x340 [ 41.273510][ T3619] ? set_normalized_timespec64+0xe0/0x110 [ 41.273542][ T3619] __d_alloc+0x37/0x340 [ 41.273571][ T3619] d_alloc_pseudo+0x1e/0x80 [ 41.273670][ T3619] alloc_file_pseudo+0x71/0x160 [ 41.273779][ T3619] aio_setup_ring+0x133/0x760 [ 41.273839][ T3619] ioctx_alloc+0x2aa/0x4c0 [ 41.273874][ T3619] __se_sys_io_setup+0x6b/0x1b0 [ 41.273939][ T3619] __x64_sys_io_setup+0x31/0x40 [ 41.274049][ T3619] x64_sys_call+0x2a8e/0x3000 [ 41.274081][ T3619] do_syscall_64+0xca/0x2b0 [ 41.274124][ T3619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.274182][ T3619] RIP: 0033:0x7f7f08cbf749 [ 41.274201][ T3619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.274223][ T3619] RSP: 002b:00007f7f0771f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 41.274259][ T3619] RAX: ffffffffffffffda RBX: 00007f7f08f15fa0 RCX: 00007f7f08cbf749 [ 41.274274][ T3619] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 41.274290][ T3619] RBP: 00007f7f0771f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.274306][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.274321][ T3619] R13: 00007f7f08f16038 R14: 00007f7f08f15fa0 R15: 00007ffdfb70ca88 [ 41.274346][ T3619] [ 41.522272][ T3624] FAULT_INJECTION: forcing a failure. [ 41.522272][ T3624] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.535637][ T3624] CPU: 0 UID: 0 PID: 3624 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.535738][ T3624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.535751][ T3624] Call Trace: [ 41.535758][ T3624] [ 41.535766][ T3624] __dump_stack+0x1d/0x30 [ 41.535790][ T3624] dump_stack_lvl+0x95/0xd0 [ 41.535813][ T3624] dump_stack+0x15/0x1b [ 41.535868][ T3624] should_fail_ex+0x265/0x280 [ 41.535896][ T3624] should_fail+0xb/0x20 [ 41.535957][ T3624] should_fail_usercopy+0x1a/0x20 [ 41.535986][ T3624] _copy_to_user+0x20/0xa0 [ 41.536022][ T3624] simple_read_from_buffer+0xb5/0x130 [ 41.536112][ T3624] proc_fail_nth_read+0x10e/0x150 [ 41.536145][ T3624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.536252][ T3624] vfs_read+0x1a8/0x770 [ 41.536273][ T3624] ? __rcu_read_unlock+0x4f/0x70 [ 41.536293][ T3624] ? __fget_files+0x184/0x1c0 [ 41.536314][ T3624] ? mutex_lock+0x58/0x90 [ 41.536359][ T3624] ksys_read+0xda/0x1a0 [ 41.536397][ T3624] __x64_sys_read+0x40/0x50 [ 41.536499][ T3624] x64_sys_call+0x2889/0x3000 [ 41.536557][ T3624] do_syscall_64+0xca/0x2b0 [ 41.536613][ T3624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.536638][ T3624] RIP: 0033:0x7f7f08cbe15c [ 41.536653][ T3624] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.536672][ T3624] RSP: 002b:00007f7f0771f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.536741][ T3624] RAX: ffffffffffffffda RBX: 00007f7f08f15fa0 RCX: 00007f7f08cbe15c [ 41.536810][ T3624] RDX: 000000000000000f RSI: 00007f7f0771f0a0 RDI: 0000000000000005 [ 41.536826][ T3624] RBP: 00007f7f0771f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.536841][ T3624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.536856][ T3624] R13: 00007f7f08f16038 R14: 00007f7f08f15fa0 R15: 00007ffdfb70ca88 [ 41.536875][ T3624] [ 41.539281][ T3622] syz_tun: entered allmulticast mode [ 41.724093][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 41.777151][ T3616] vhci_hcd: connection closed [ 41.777541][ T1960] vhci_hcd vhci_hcd.2: stop threads [ 41.787547][ T1960] vhci_hcd vhci_hcd.2: release socket [ 41.787556][ T3490] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 41.793141][ T1960] vhci_hcd vhci_hcd.2: disconnect device [ 41.812916][ T3490] usb 5-1: enqueue for inactive port 0 [ 41.825884][ T3626] syz_tun (unregistering): left allmulticast mode [ 41.835080][ T3490] usb 5-1: enqueue for inactive port 0 [ 41.845933][ T3490] usb 5-1: enqueue for inactive port 0 [ 41.972949][ T3490] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 42.167669][ T3636] netlink: 2140 bytes leftover after parsing attributes in process `syz.4.41'. [ 42.448333][ T3324] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 42.456450][ T3324] FAT-fs (loop2): Filesystem has been set read-only [ 42.476363][ T3655] futex_wake_op: syz.4.47 tries to shift op by -65; fix this program [ 42.562714][ T3660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 42.604512][ T3662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.50'. [ 42.671214][ T3664] syz_tun: entered allmulticast mode [ 42.680476][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 42.695033][ T3664] syz_tun (unregistering): left allmulticast mode [ 43.619944][ T3690] loop3: detected capacity change from 0 to 512 [ 43.663153][ T3690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.676523][ T3690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.738162][ T3690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 43.764203][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 43.764281][ T29] audit: type=1400 audit(1767759726.030:613): avc: denied { create } for pid=3691 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.770869][ T3688] loop0: detected capacity change from 0 to 8192 [ 43.797091][ T3694] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.823253][ T3690] EXT4-fs (loop3): 1 truncate cleaned up [ 43.830017][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.880310][ T3694] team0: Port device bridge1 added [ 43.903248][ T29] audit: type=1400 audit(1767759726.150:614): avc: denied { create } for pid=3691 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 43.922681][ T29] audit: type=1400 audit(1767759726.160:615): avc: denied { read write } for pid=3689 comm="syz.3.59" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.945202][ T29] audit: type=1400 audit(1767759726.160:616): avc: denied { open } for pid=3689 comm="syz.3.59" path="/9/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.967932][ T29] audit: type=1400 audit(1767759726.160:617): avc: denied { create } for pid=3689 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.987612][ T29] audit: type=1400 audit(1767759726.160:618): avc: denied { connect } for pid=3689 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.006947][ T29] audit: type=1400 audit(1767759726.160:619): avc: denied { write } for pid=3689 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.026272][ T29] audit: type=1400 audit(1767759726.160:620): avc: denied { name_bind } for pid=3689 comm="syz.3.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.048145][ T29] audit: type=1400 audit(1767759726.160:621): avc: denied { node_bind } for pid=3689 comm="syz.3.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.068634][ T29] audit: type=1400 audit(1767759726.160:622): avc: denied { sqpoll } for pid=3689 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.132432][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.140863][ T3701] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 44.148096][ T3701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.155742][ T3701] vhci_hcd vhci_hcd.0: Device attached [ 44.202578][ T3705] loop2: detected capacity change from 0 to 1024 [ 44.310236][ T3705] EXT4-fs: Ignoring removed orlov option [ 44.416421][ T3712] veth0_to_team: entered promiscuous mode [ 44.448765][ T3702] vhci_hcd: connection closed [ 44.513100][ T1960] vhci_hcd vhci_hcd.0: stop threads [ 44.523229][ T1960] vhci_hcd vhci_hcd.0: release socket [ 44.528642][ T1960] vhci_hcd vhci_hcd.0: disconnect device [ 44.552083][ T3705] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 44.815479][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 44.907395][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 44.934324][ T3719] loop1: detected capacity change from 0 to 256 [ 44.953663][ T3719] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.014620][ T3320] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 45.022522][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 45.121825][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 45.156056][ T3726] lo: entered allmulticast mode [ 45.191979][ T9] Process accounting resumed [ 45.237274][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 45.284474][ T3724] lo: left allmulticast mode [ 45.379744][ T3741] loop0: detected capacity change from 0 to 1024 [ 45.402596][ T3741] EXT4-fs: Ignoring removed orlov option [ 45.435077][ T3741] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 45.500599][ T3741] loop0: detected capacity change from 0 to 128 [ 45.550469][ T3741] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 46.151394][ T3764] veth0_to_team: entered promiscuous mode [ 46.497476][ T3789] lo: entered allmulticast mode [ 46.537133][ T3798] FAULT_INJECTION: forcing a failure. [ 46.537133][ T3798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.551000][ T3798] CPU: 0 UID: 0 PID: 3798 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.551140][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.551202][ T3798] Call Trace: [ 46.551209][ T3798] [ 46.551217][ T3798] __dump_stack+0x1d/0x30 [ 46.551249][ T3798] dump_stack_lvl+0x95/0xd0 [ 46.551352][ T3798] dump_stack+0x15/0x1b [ 46.551376][ T3798] should_fail_ex+0x265/0x280 [ 46.551402][ T3798] should_fail+0xb/0x20 [ 46.551423][ T3798] should_fail_usercopy+0x1a/0x20 [ 46.551454][ T3798] _copy_from_user+0x1c/0xb0 [ 46.551485][ T3798] ___sys_sendmsg+0xc1/0x1d0 [ 46.551531][ T3798] __x64_sys_sendmsg+0xd4/0x160 [ 46.551624][ T3798] x64_sys_call+0x17ba/0x3000 [ 46.551684][ T3798] do_syscall_64+0xca/0x2b0 [ 46.551722][ T3798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.551746][ T3798] RIP: 0033:0x7f6577def749 [ 46.551766][ T3798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.551868][ T3798] RSP: 002b:00007f657684f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.551891][ T3798] RAX: ffffffffffffffda RBX: 00007f6578045fa0 RCX: 00007f6577def749 [ 46.551905][ T3798] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 46.551953][ T3798] RBP: 00007f657684f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.551967][ T3798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.551992][ T3798] R13: 00007f6578046038 R14: 00007f6578045fa0 R15: 00007ffd8707d8e8 [ 46.552013][ T3798] [ 46.711648][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 46.722413][ T3791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 46.898144][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 47.020124][ T3830] loop1: detected capacity change from 0 to 512 [ 47.028963][ T3830] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.053885][ T3830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.096509][ T3830] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.95: Allocating blocks 41-42 which overlap fs metadata [ 47.110996][ T3830] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.95: Allocating blocks 41-42 which overlap fs metadata [ 47.125115][ T3830] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.95: Failed to acquire dquot type 1 [ 47.136617][ T3830] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.153447][ T3830] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.95: corrupted inode contents [ 47.168559][ T3830] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.95: mark_inode_dirty error [ 47.180679][ T3830] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.95: corrupted inode contents [ 47.192693][ T3830] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.95: mark_inode_dirty error [ 47.206450][ T3830] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.95: corrupted inode contents [ 47.553550][ T3786] lo: left allmulticast mode [ 47.560707][ T3830] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 47.581076][ T3830] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.95: corrupted inode contents [ 47.593120][ T3824] veth0_to_team: entered promiscuous mode [ 47.600973][ T3830] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.95: mark_inode_dirty error [ 47.613031][ T3830] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 47.622469][ T3830] EXT4-fs (loop1): 1 truncate cleaned up [ 47.628943][ T3830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.642001][ T3830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.656945][ T3840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 47.711134][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 47.883530][ T3852] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.980228][ T3859] mmap: syz.4.102 (3859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.055685][ T3862] loop3: detected capacity change from 0 to 1024 [ 48.081943][ T3862] EXT4-fs: Ignoring removed orlov option [ 48.313107][ T3862] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 48.538167][ T3862] loop3: detected capacity change from 0 to 128 [ 48.624274][ T3862] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.686831][ T3875] loop4: detected capacity change from 0 to 512 [ 48.734958][ T3875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.828626][ T3875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 48.837524][ T3875] EXT4-fs (loop4): 1 truncate cleaned up [ 48.844365][ T3875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.861189][ T3888] loop3: detected capacity change from 0 to 1024 [ 48.879962][ T3888] EXT4-fs: Ignoring removed bh option [ 48.888069][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.889087][ T3888] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.951370][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.975268][ T3896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 48.992521][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 48.992538][ T29] audit: type=1400 audit(1767759731.250:1077): avc: denied { mounton } for pid=3878 comm="syz.3.108" path="/18/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.025096][ T3888] netlink: 1524 bytes leftover after parsing attributes in process `syz.3.108'. [ 49.026585][ T3898] netlink: 'syz.2.115': attribute type 30 has an invalid length. [ 49.050624][ T29] audit: type=1400 audit(1767759731.290:1078): avc: denied { mount } for pid=3878 comm="syz.3.108" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.085782][ T3902] loop4: detected capacity change from 0 to 512 [ 49.095060][ T3902] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.111582][ T3903] EXT4-fs: Ignoring removed bh option [ 49.120487][ T3903] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 49.131075][ T3902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 49.143269][ T3902] EXT4-fs (loop4): 1 truncate cleaned up [ 49.151756][ T3902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.166416][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.206913][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.227841][ C1] hrtimer: interrupt took 46979 ns [ 49.254532][ T3914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3914 comm=syz.4.120 [ 49.266990][ T3914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3914 comm=syz.4.120 [ 49.281120][ T29] audit: type=1400 audit(1767759731.540:1079): avc: denied { audit_write } for pid=3913 comm="syz.4.120" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.307866][ T29] audit: type=1400 audit(1767759731.570:1080): avc: denied { create } for pid=3913 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.337684][ T29] audit: type=1400 audit(1767759731.590:1081): avc: denied { create } for pid=3913 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.348061][ T3910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.358427][ T29] audit: type=1400 audit(1767759731.600:1082): avc: denied { read } for pid=3913 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.389564][ T29] audit: type=1400 audit(1767759731.650:1083): avc: denied { prog_load } for pid=3913 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.408770][ T29] audit: type=1400 audit(1767759731.650:1084): avc: denied { bpf } for pid=3913 comm="syz.4.120" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.524361][ T29] audit: type=1400 audit(1767759731.790:1085): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.548872][ T29] audit: type=1400 audit(1767759731.790:1086): avc: denied { open } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.582344][ T3917] set_capacity_and_notify: 1 callbacks suppressed [ 49.582374][ T3917] loop2: detected capacity change from 0 to 164 [ 49.697577][ T3921] loop0: detected capacity change from 0 to 512 [ 49.706199][ T3921] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.729551][ T3921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 49.737944][ T3921] EXT4-fs (loop0): 1 truncate cleaned up [ 49.745288][ T3921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.825794][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.851840][ T3926] veth0_to_team: entered promiscuous mode [ 49.985287][ T3928] loop0: detected capacity change from 0 to 128 [ 50.191419][ T3929] bio_check_eod: 71 callbacks suppressed [ 50.191436][ T3929] syz.0.124: attempt to access beyond end of device [ 50.191436][ T3929] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 50.213661][ T3929] syz.0.124: attempt to access beyond end of device [ 50.213661][ T3929] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 50.227418][ T3929] syz.0.124: attempt to access beyond end of device [ 50.227418][ T3929] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 50.243192][ T3929] syz.0.124: attempt to access beyond end of device [ 50.243192][ T3929] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 50.257500][ T3929] syz.0.124: attempt to access beyond end of device [ 50.257500][ T3929] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 50.271434][ T3929] syz.0.124: attempt to access beyond end of device [ 50.271434][ T3929] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 50.336659][ T3929] syz.0.124: attempt to access beyond end of device [ 50.336659][ T3929] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 50.548293][ T3940] __nla_validate_parse: 1 callbacks suppressed [ 50.548316][ T3940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 50.615486][ T3946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.131'. [ 50.654871][ T3948] loop2: detected capacity change from 0 to 128 [ 50.787579][ T3954] syz.2.132: attempt to access beyond end of device [ 50.787579][ T3954] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 50.819713][ T3954] syz.2.132: attempt to access beyond end of device [ 50.819713][ T3954] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 50.834678][ T3954] syz.2.132: attempt to access beyond end of device [ 50.834678][ T3954] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 51.043867][ T3961] loop2: detected capacity change from 0 to 128 [ 51.061018][ T3961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.087387][ T3961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.156068][ T3961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.228883][ T3968] bond1 (unregistering): Released all slaves [ 51.241489][ T3961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.289596][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.301259][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.316322][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.331415][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.592737][ T3973] loop4: detected capacity change from 0 to 1024 [ 51.601285][ T3973] EXT4-fs: Ignoring removed orlov option [ 51.653351][ T3973] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 51.766217][ T3973] loop4: detected capacity change from 0 to 128 [ 51.776870][ T3973] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 51.796293][ T3319] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 51.811108][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.006155][ T3979] loop3: detected capacity change from 0 to 8192 [ 52.070556][ T3990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3990 comm=ÿ [ 52.084174][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.130285][ T3996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 52.136931][ T3996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.144578][ T3996] vhci_hcd vhci_hcd.0: Device attached [ 52.217701][ T4008] loop2: detected capacity change from 0 to 128 [ 52.289274][ T4011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 52.303306][ T4011] FAULT_INJECTION: forcing a failure. [ 52.303306][ T4011] name failslab, interval 1, probability 0, space 0, times 0 [ 52.315986][ T4011] CPU: 1 UID: 0 PID: 4011 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.316010][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.316052][ T4011] Call Trace: [ 52.316061][ T4011] [ 52.316071][ T4011] __dump_stack+0x1d/0x30 [ 52.316102][ T4011] dump_stack_lvl+0x95/0xd0 [ 52.316129][ T4011] dump_stack+0x15/0x1b [ 52.316148][ T4011] should_fail_ex+0x265/0x280 [ 52.316169][ T4011] should_failslab+0x8c/0xb0 [ 52.316225][ T4011] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 52.316250][ T4011] ? __alloc_skb+0x2ff/0x4b0 [ 52.316281][ T4011] __alloc_skb+0x2ff/0x4b0 [ 52.316367][ T4011] ? __alloc_skb+0x228/0x4b0 [ 52.316396][ T4011] netlink_ack+0xfd/0x500 [ 52.316436][ T4011] netlink_rcv_skb+0x192/0x220 [ 52.316499][ T4011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.316620][ T4011] rtnetlink_rcv+0x1c/0x30 [ 52.316659][ T4011] netlink_unicast+0x5c0/0x690 [ 52.316698][ T4011] netlink_sendmsg+0x58b/0x6b0 [ 52.316768][ T4011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.316809][ T4011] __sock_sendmsg+0x145/0x180 [ 52.316832][ T4011] ____sys_sendmsg+0x31e/0x4a0 [ 52.316861][ T4011] ___sys_sendmsg+0x17b/0x1d0 [ 52.316983][ T4011] __x64_sys_sendmsg+0xd4/0x160 [ 52.317020][ T4011] x64_sys_call+0x17ba/0x3000 [ 52.317044][ T4011] do_syscall_64+0xca/0x2b0 [ 52.317165][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.317194][ T4011] RIP: 0033:0x7f6577def749 [ 52.317213][ T4011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.317233][ T4011] RSP: 002b:00007f657684f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.317252][ T4011] RAX: ffffffffffffffda RBX: 00007f6578045fa0 RCX: 00007f6577def749 [ 52.317264][ T4011] RDX: 0000000000040080 RSI: 0000200000000040 RDI: 0000000000000006 [ 52.317275][ T4011] RBP: 00007f657684f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.317357][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.317373][ T4011] R13: 00007f6578046038 R14: 00007f6578045fa0 R15: 00007ffd8707d8e8 [ 52.317400][ T4011] [ 52.359305][ T4007] loop1: detected capacity change from 0 to 8192 [ 52.546698][ T3432] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 52.693172][ T4019] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 52.699849][ T4019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.707416][ T4019] vhci_hcd vhci_hcd.0: Device attached [ 52.741529][ T4018] EXT4-fs (loop2): failed to initialize system zone (-117) [ 52.760885][ T4018] EXT4-fs (loop2): mount failed [ 52.768087][ T4000] vhci_hcd: connection reset by peer [ 52.774834][ T52] vhci_hcd vhci_hcd.3: stop threads [ 52.780087][ T52] vhci_hcd vhci_hcd.3: release socket [ 52.785630][ T52] vhci_hcd vhci_hcd.3: disconnect device [ 52.953039][ T3933] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 53.018112][ T4020] vhci_hcd: connection reset by peer [ 53.043241][ T52] vhci_hcd vhci_hcd.1: stop threads [ 53.048524][ T52] vhci_hcd vhci_hcd.1: release socket [ 53.054030][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 53.075236][ T4033] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 53.081884][ T4033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.089458][ T4033] vhci_hcd vhci_hcd.0: Device attached [ 53.404967][ T4039] veth0_to_team: entered promiscuous mode [ 53.615312][ T3319] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 53.623232][ T3319] FAT-fs (loop3): Filesystem has been set read-only [ 53.849671][ T4034] vhci_hcd: connection closed [ 53.849885][ T2512] vhci_hcd vhci_hcd.2: stop threads [ 53.859941][ T2512] vhci_hcd vhci_hcd.2: release socket [ 53.865388][ T2512] vhci_hcd vhci_hcd.2: disconnect device [ 53.872940][ T10] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 53.883008][ T10] usb 5-1: enqueue for inactive port 0 [ 53.888701][ T10] usb 5-1: enqueue for inactive port 0 [ 53.894582][ T10] usb 5-1: enqueue for inactive port 0 [ 53.906740][ T3318] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 53.914699][ T3318] FAT-fs (loop1): Filesystem has been set read-only [ 53.921600][ T4050] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.932486][ T4050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 53.944329][ T4050] EXT4-fs (loop0): 1 truncate cleaned up [ 53.950321][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.962976][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 54.015116][ T4055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.162'. [ 54.053777][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 54.053792][ T29] audit: type=1326 audit(1767759736.320:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.095847][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.133173][ T29] audit: type=1326 audit(1767759736.320:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.156800][ T29] audit: type=1326 audit(1767759736.320:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.180686][ T29] audit: type=1326 audit(1767759736.320:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.204123][ T29] audit: type=1326 audit(1767759736.320:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.227390][ T29] audit: type=1326 audit(1767759736.320:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.250740][ T29] audit: type=1326 audit(1767759736.320:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.274096][ T29] audit: type=1326 audit(1767759736.320:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.297432][ T29] audit: type=1326 audit(1767759736.320:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.320760][ T29] audit: type=1326 audit(1767759736.320:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8d3f749 code=0x7ffc0000 [ 54.385630][ T3324] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 54.393532][ T3324] FAT-fs (loop2): Filesystem has been set read-only [ 54.531471][ T4078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4078 comm=syz.1.171 [ 54.571190][ T4084] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.588843][ T4084] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.627338][ T2512] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.656301][ T4092] xt_hashlimit: max too large, truncated to 1048576 [ 54.670511][ T4092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.689406][ T4089] unsupported nla_type 52263 [ 54.822812][ T4095] SELinux: Context @ is not valid (left unmapped). [ 54.896217][ T4103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 54.905361][ T4103] netlink: 116 bytes leftover after parsing attributes in process `syz.2.178'. [ 54.917797][ T4103] set_capacity_and_notify: 4 callbacks suppressed [ 54.917858][ T4103] loop2: detected capacity change from 0 to 256 [ 54.935218][ T4103] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 54.965944][ T4108] rdma_op ffff88811b76d580 conn xmit_rdma 0000000000000000 [ 54.980614][ T4108] loop1: detected capacity change from 0 to 1024 [ 54.989319][ T4108] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.004248][ T4108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.015308][ T4108] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.035005][ T4108] JBD2: no valid journal superblock found [ 55.040793][ T4108] EXT4-fs (loop1): Could not load journal inode [ 55.048513][ T4111] netlink: 14 bytes leftover after parsing attributes in process `syz.3.181'. [ 55.072647][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.091106][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.101486][ T4111] bond0 (unregistering): Released all slaves [ 55.133689][ T4116] loop1: detected capacity change from 0 to 4096 [ 55.144224][ T4116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.215992][ T4118] netlink: 14 bytes leftover after parsing attributes in process `syz.1.183'. [ 55.229582][ T4118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.246372][ T4118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.257989][ T4118] bond0 (unregistering): Released all slaves [ 55.269724][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 55.279605][ T4120] process 'syz.3.184' launched './file0' with NULL argv: empty string added [ 55.323424][ T4126] bridge: RTM_NEWNEIGH with invalid ether address [ 55.361682][ T4128] netlink: 'syz.0.187': attribute type 13 has an invalid length. [ 55.370011][ T4128] netlink: 148 bytes leftover after parsing attributes in process `syz.0.187'. [ 55.399791][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.420489][ T3318] ================================================================== [ 55.428711][ T3318] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 55.436559][ T3318] [ 55.438910][ T3318] read-write to 0xffff888237d27550 of 8 bytes by task 2970 on cpu 1: [ 55.446998][ T3318] find_get_block_common+0x498/0x8e0 [ 55.452321][ T3318] bdev_getblk+0x334/0x3f0 [ 55.456770][ T3318] jbd2_journal_get_descriptor_buffer+0xce/0x210 [ 55.463173][ T3318] jbd2_journal_commit_transaction+0xbaf/0x3150 [ 55.469455][ T3318] kjournald2+0x211/0x3d0 [ 55.473811][ T3318] kthread+0x489/0x510 [ 55.477916][ T3318] ret_from_fork+0x149/0x290 [ 55.482539][ T3318] ret_from_fork_asm+0x1a/0x30 [ 55.487338][ T3318] [ 55.489686][ T3318] read to 0xffff888237d27550 of 8 bytes by task 3318 on cpu 0: [ 55.497255][ T3318] has_bh_in_lru+0x35/0x1f0 [ 55.501803][ T3318] smp_call_function_many_cond+0x2a9/0xc40 [ 55.507647][ T3318] on_each_cpu_cond_mask+0x3c/0x80 [ 55.512802][ T3318] invalidate_bh_lrus+0x2a/0x30 [ 55.517691][ T3318] invalidate_bdev+0x42/0x70 [ 55.522316][ T3318] ext4_put_super+0x624/0x7d0 [ 55.527035][ T3318] generic_shutdown_super+0xe6/0x210 [ 55.532399][ T3318] kill_block_super+0x2a/0x70 [ 55.537109][ T3318] ext4_kill_sb+0x42/0x80 [ 55.541462][ T3318] deactivate_locked_super+0x75/0x1c0 [ 55.546905][ T3318] deactivate_super+0x97/0xa0 [ 55.551644][ T3318] cleanup_mnt+0x2a9/0x320 [ 55.556095][ T3318] __cleanup_mnt+0x19/0x20 [ 55.560553][ T3318] task_work_run+0x131/0x1a0 [ 55.565312][ T3318] exit_to_user_mode_loop+0x1fe/0x740 [ 55.570802][ T3318] do_syscall_64+0x1dd/0x2b0 [ 55.575441][ T3318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.581363][ T3318] [ 55.583708][ T3318] value changed: 0xffff8881006dba90 -> 0xffff8881063a9820 [ 55.590834][ T3318] [ 55.593179][ T3318] Reported by Kernel Concurrency Sanitizer on: [ 55.599353][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.609304][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.619399][ T3318] ================================================================== [ 57.643067][ T3432] usb 7-1: enqueue for inactive port 0 [ 57.648605][ T3432] usb 7-1: enqueue for inactive port 0 [ 57.723548][ T3432] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 58.043007][ T3933] usb 3-1: enqueue for inactive port 0 [ 58.048558][ T3933] usb 3-1: enqueue for inactive port 0 [ 58.122974][ T3933] vhci_hcd vhci_hcd.1: vhci_device speed not set