last executing test programs: 3.647048502s ago: executing program 4 (id=270): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x25, 0x0, &(0x7f0000001040)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1fd, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffef, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x800007, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setresgid(0x0, 0xee01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@grpquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x2}}, 0x20) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xa8}}, 0x40000) 3.363512823s ago: executing program 4 (id=276): socket(0x2, 0x80805, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r2) syz_usb_connect(0x2, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000903ffeb00bf60e700"], 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="2c00308014000400403a050c5baee2004ef2b6d713459a7a0c0001800800010004000000050002"], 0x48}}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_clone(0x6002500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x400, 0x32, 0x43a1bd79, 0x7, 0x3, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x400000, 0xffffffffffffffff, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0xfffffffffffffdf7, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r10, @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="d0822e70ac7b4c4f3b149da54294562042cad4a38042fe7e3e158a48abc4c109cdea71a68325a91fd3ea64672e320c25f236172a6d68b6c5ec3f560d4b823100fdb54ac7fe0d263039307394eac60ab9b4a21e6743387fd953efca015091700e912f1b5c300dfb4a25e7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.859233564s ago: executing program 4 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1.777574507s ago: executing program 2 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfff, 0x0, 0x8001, 0x7, 0x7}) 1.677199621s ago: executing program 4 (id=316): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 1.673748732s ago: executing program 2 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202000faffffff00000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095a1c72f1b0576e80e330eff280a496c10dfa534159facea85c4806f7f5f0d6e5a23133981c521d34e60fd1a8183d79226e65c2047ccb3ddefde7f5a6079d5ed5311f2fb3962"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) 1.591017515s ago: executing program 4 (id=319): socket(0x2, 0x80805, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r2) syz_usb_connect(0x2, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000903ffeb00bf60e700"], 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="2c00308014000400403a050c5baee2004ef2b6d713459a7a0c0001800800010004000000050002"], 0x48}}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_clone(0x6002500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x400, 0x32, 0x43a1bd79, 0x7, 0x3, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x400000, 0xffffffffffffffff, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0xfffffffffffffdf7, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r10, @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="d0822e70ac7b4c4f3b149da54294562042cad4a38042fe7e3e158a48abc4c109cdea71a68325a91fd3ea64672e320c25f236172a6d68b6c5ec3f560d4b823100fdb54ac7fe0d263039307394eac60ab9b4a21e6743387fd953efca015091700e912f1b5c300dfb4a25e7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.368825564s ago: executing program 1 (id=321): socket(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYBLOB="e0614a03c4244f171e71896ff3e1306ba579a0c1c143c789502a94862c3af97c192d3b0d3061417fc0e6aba637beaf55a2b706dde5178a68f2edc8209dfbe4fafd4798d8ad8b9578f3435fa6d7914ec631db2f3854c6a88942ee7a32e49a02c964fdc173c0ef86829ebbafa6cec2f87926cca8d5118c97"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) epoll_pwait(r7, &(0x7f00000002c0)=[{}], 0x4e, 0x7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r8, @ANYRES8, @ANYRES32=r8, @ANYRES8=r9, @ANYRES64=r10, @ANYRES16=r11, @ANYRES16=r6, @ANYRES16=r4, @ANYRES8=0x0], 0x50) unshare(0x22020600) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000001100)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000280), &(0x7f0000000300)=r10}, 0xfffffffffffffc6c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r12, &(0x7f0000000080)="9b6058", &(0x7f0000000140)=""/209}, 0x20) 1.205317501s ago: executing program 3 (id=325): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000740)=ANY=[@ANYBLOB="a22ee3a9"]) 1.163231112s ago: executing program 1 (id=326): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x404c) close(r1) 1.135307004s ago: executing program 3 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfff, 0x0, 0x8001, 0x7, 0x7}) 1.019585928s ago: executing program 3 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x153) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = dup3(r9, r10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24fa, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xd, 0x6, 0x2, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', r8, 0x25, r11, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000340)=[{0x3, 0x5, 0x0, 0x7}, {0x3, 0x4, 0x7, 0x5}, {0x1, 0x1, 0x0, 0xb}, {0x5, 0x4, 0xd, 0x6}, {0x4, 0x5, 0xb, 0x9}, {0x1, 0x2, 0xc, 0x9}, {0x4, 0x3, 0xf, 0x8}], 0x10, 0x5}, 0x94) mount$9p_tcp(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x20060, &(0x7f00000003c0)=ANY=[@ANYBLOB="a29534f4000000000000006f72743d307831303030303005009dc8f93eb9e47d68ca3d6f6f752c0006f5d8c71c39e73bbe4aa6efc17b3f528fa86c255822d042c9a294829f"]) 1.019051728s ago: executing program 1 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) inotify_init() socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r5, r5, 0x0, 0xf2) 799.837177ms ago: executing program 3 (id=332): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0a81, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 651.957523ms ago: executing program 3 (id=333): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0a81, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 651.376983ms ago: executing program 3 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) sendfile(r10, r9, 0x0, 0x7ffff000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB="fdbf60316343ab368595d579f78eeabe59af11081843566050371110a6e9732aa23662267ce03981e2d747b33b025d84cfb9adae37eda4f057bb0aa3a3a17c2c7dab282b26fb5a8d52f4a683a09c96b0e24805951d48a6d83e32fd8d489212005c4141b6201c30a175418a8b45eaef30990dd3d3c3d10a7849753dd43bde13314ca426b44a8cad377eccd4945b4e00"/154], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 636.328744ms ago: executing program 1 (id=335): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 558.800127ms ago: executing program 0 (id=336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) futex(&(0x7f0000000040), 0xb, 0x2, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) unshare(0x22020400) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="14060000010000000798a7fd29330700000000000000"], 0x0) 515.476508ms ago: executing program 2 (id=337): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x6}, 0x74c1, 0x10000, 0x8, 0x0, 0x1, 0x2020005, 0x5, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x9, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x6}, 0x74c1, 0x10000, 0x8, 0x0, 0x1, 0x2020005, 0x5, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x101200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000001040)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{&(0x7f0000001080)=@in6={0xa, 0x4e22, 0x9, @remote, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0x34}, 0x18) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a037b6c6041a1dbeb158d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a608be46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa5f57bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979af0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000340)=ANY=[]) (async) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000340)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 419.619803ms ago: executing program 0 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) 361.979085ms ago: executing program 2 (id=339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{&(0x7f0000004d80)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000005400)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r9}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 292.443198ms ago: executing program 0 (id=340): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000540), 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(r1, &(0x7f00000003c0)={0x38, 0x0, 0xd, 0x6, 0xffff8000, 0xfffffffffffffffe, 0x40, 0x100000001, 0x2, 0xeb9}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 279.250708ms ago: executing program 2 (id=341): socket(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYBLOB="e0614a03c4244f171e71896ff3e1306ba579a0c1c143c789502a94862c3af97c192d3b0d3061417fc0e6aba637beaf55a2b706dde5178a68f2edc8209dfbe4fafd4798d8ad8b9578f3435fa6d7914ec631db2f3854c6a88942ee7a32e49a02c964fdc173c0ef86829ebbafa6cec2f87926cca8d5118c97"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) epoll_pwait(r7, &(0x7f00000002c0)=[{}], 0x4e, 0x7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r8, @ANYRES8, @ANYRES32=r8, @ANYRES8=r9, @ANYRES64=r10, @ANYRES16=r11, @ANYRES16=r6, @ANYRES16=r4, @ANYRES8=0x0], 0x50) unshare(0x22020600) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000001100)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000280), &(0x7f0000000300)=r10}, 0xfffffffffffffc6c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r12, &(0x7f0000000080)="9b6058", &(0x7f0000000140)=""/209}, 0x20) 199.717861ms ago: executing program 0 (id=342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x3}, @cipso={0x86, 0x3a, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x8, "f7d11634eea2"}, {0x0, 0x2}, {0x0, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) 120.918384ms ago: executing program 2 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 107.033245ms ago: executing program 0 (id=344): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0a81, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 83.807146ms ago: executing program 4 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e) sendto$unix(r1, &(0x7f0000000140)="7c8466090eaf449430bc4e61afcec884755a09de31fbdc988cf1df2d73cda4db7e58bac1d9ce77d85b4dca951a2826e7845378f4163cb1cc630a984da7556c36a56d3369678d893616882e65993794115e7ac043e8b1a851bf6391f9b6aed26894c17e69dec4d49da23e7c23e192234ef951df144d0eae3df68b42675caa89119f96d88f82784070f77b14ef6210927aced2885858e51d", 0x97, 0x4040001, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c00, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000200800300002c0012800b00010062726964676500001c00028005002a000100000008001a000000000005002b5060ed395a43f5b28d35fb3475941488c121b34a0a49f13a4a0583aa6b425c73682b8febbd228c362f1a1bd2256e36b3444525db9edf1a07d714558910bd17c4cd0a4ff26c7c6b7d479306ff67c9437980ee21ce436e047266cb9c6ef26e858b24e8718469b392e18ffaf83c1dfbfa869e06722dcf1997b902024a5b0bcd577a63e51574689daef609f07804dcd7a3186b18c114eb8928c588bd6dbfc7de592bd1"], 0x4c}}, 0x0) 39.793508ms ago: executing program 1 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="280100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x128}}, 0x0) 13.058989ms ago: executing program 0 (id=347): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1e, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000f00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000400008500000083000000bf090000000000005509010000000000950000000000000085103479e0900ac5e87f01816dcaae4f0000fbffdcff8500000061000000852000000500000018410000f8ffffff0000000000000000180100002020752500000000002020207b1af8ff00000000bfa1000000000000070100007522bd3fb702000008000000b70300000900000085000000060000001800000007000000000000000a000000bf91000000000000b70200000000fdffffffffffffff0000b7008d28d9dc3a5aff1fcb927f79aaecdcb0f68401c36c303d5d370792cf2712"], &(0x7f00000001c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x4, 0x5}, {0x2, 0x3, 0x4, 0x4}, {0x5, 0x1, 0x2, 0xb}], 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000180)='track_foreign_dirty\x00', r1, 0x0, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e4000000140000012abd7000fddbdf250b06ce00010069791a21d2318ad67a3333dee67b21db80ac85d830fcf5ad6c6109003de9a31fa00dd2f901aa654e62aaa1114f2f8052b72d5d924131347a563355fadf9a19a103704df6e85d00285dbc5ce41a3cfe7f182294a0418c26281ccd6d549004fa9c7d28c317717d7f8588b742184a0560f191ad90a84d8ca63034986dc15e8f592ece1226389179a81cb5d209310204b0bcd7f501f9b78bd67f1258f743c6a14dbfab862cef4c84847dfd584088d0ea7b56951b04d2faf303c4f70ca000"/228], 0xe4}, 0x1, 0x0, 0x0, 0x4004840}, 0x20008000) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd08000000000000000000080001007063690011000200"], 0x60}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20044014) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000d00)={0x1, 0x0, 0x1000, 0xc0, &(0x7f0000000300)="eaba828594cae4ae631abc52bbc809ae3f7aca0fb52a8f8dccf22898ed7b4f2d5368368eeb8f485270fc24bf1cfc696cba64eda77aa37cd2c49c29c684038cda053620b5acee28d4c1be6ad590fed329cb585960fbf631a6ea5c91c918c5bbd7d5210568d95f368facd9968b3fedc03093897b01c16033f1bd04fc42bd590dfa8ee73f8a5bffd65edbe900d9a2be35b6e91068cdfcd9ab1f8a032cd2cd4a391be772b725622191253ae5d121eef8b1136cc9e3b96ea152df942bebed52f91993", 0xb8, 0x0, &(0x7f0000000c40)="846bf333d6cdab99d9309530185ad4b5665dc3e11d937c8817515df5a13bb21e155adf870d9753ea4b6e6d7bde19acd75521cf254c68450579904c4c18f1b35353ea27ad590378c81b21e896dfa0268bf9bbc307312709513beddae5181eec87a3c154044d412850afb04923f3983c0e4092a60f939ac7b7cb0866c54b8be59f629e619a17849d881b9970174a2d36432a1c4a5470192d5690ed95862782aff55b9d6280925be510ddf15b7d8144c7a98cbb8089f6df04da"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x7e94ff08068898f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1}, 0x8) 0s ago: executing program 1 (id=348): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x6, 0xfffffffffffffff0, 0xb8}) syz_io_uring_setup(0x705, 0x0, &(0x7f00000004c0), &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x2f, 0xf0, 0x2, 0x4, 0x8, @empty, @empty, 0x8000, 0x20, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="f5b1ddcaedfce0d0000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x5b, &(0x7f0000000740)=""/91, 0x41100, 0xa, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f14a52106b47cc8d168f8d820a9e587abb05", @ANYRES16=r10, @ANYBLOB="07022cbd7000000000000100000008000100ffffffff340004800500030006000000050003000700000005000300010000000500030001000000050003000100000005000300010000000800020002000000"], 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000640)={0x2c, 0x0, r6}, 0x10) kernel console output (not intermixed with test programs): [ 18.567833][ T29] audit: type=1400 audit(1765489840.840:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.589781][ T29] audit: type=1400 audit(1765489840.840:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.612418][ T29] audit: type=1400 audit(1765489840.840:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.635284][ T29] audit: type=1400 audit(1765489840.840:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.658251][ T29] audit: type=1400 audit(1765489840.840:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 21.301015][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 21.301029][ T29] audit: type=1400 audit(1765489843.580:70): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.330088][ T29] audit: type=1400 audit(1765489843.610:71): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.330811][ T3273] cgroup: Unknown subsys name 'net' [ 21.357800][ T29] audit: type=1400 audit(1765489843.630:72): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.450495][ T3273] cgroup: Unknown subsys name 'cpuset' [ 21.456630][ T3273] cgroup: Unknown subsys name 'rlimit' [ 21.625358][ T29] audit: type=1400 audit(1765489843.900:73): avc: denied { setattr } for pid=3273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.649127][ T29] audit: type=1400 audit(1765489843.900:74): avc: denied { create } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.669664][ T29] audit: type=1400 audit(1765489843.900:75): avc: denied { write } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.690034][ T29] audit: type=1400 audit(1765489843.900:76): avc: denied { read } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.696647][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.710300][ T29] audit: type=1400 audit(1765489843.910:77): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.743675][ T29] audit: type=1400 audit(1765489843.910:78): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.766877][ T29] audit: type=1400 audit(1765489843.920:79): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 21.801298][ T3273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.959889][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 24.015224][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 24.045082][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 24.092857][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.100011][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.107158][ T3317] bridge_slave_0: entered allmulticast mode [ 24.113622][ T3317] bridge_slave_0: entered promiscuous mode [ 24.130837][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.137897][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.147453][ T3317] bridge_slave_1: entered allmulticast mode [ 24.153890][ T3317] bridge_slave_1: entered promiscuous mode [ 24.174840][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.181922][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.189043][ T3323] bridge_slave_0: entered allmulticast mode [ 24.195521][ T3323] bridge_slave_0: entered promiscuous mode [ 24.218737][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.225861][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.233099][ T3323] bridge_slave_1: entered allmulticast mode [ 24.239449][ T3323] bridge_slave_1: entered promiscuous mode [ 24.245813][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.266340][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.283763][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.296698][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.303835][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.311053][ T3315] bridge_slave_0: entered allmulticast mode [ 24.317433][ T3315] bridge_slave_0: entered promiscuous mode [ 24.324851][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.344081][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.351178][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.358323][ T3315] bridge_slave_1: entered allmulticast mode [ 24.364764][ T3315] bridge_slave_1: entered promiscuous mode [ 24.372139][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.389362][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 24.406805][ T3317] team0: Port device team_slave_0 added [ 24.426659][ T3317] team0: Port device team_slave_1 added [ 24.441212][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.450925][ T3323] team0: Port device team_slave_0 added [ 24.470194][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.479997][ T3323] team0: Port device team_slave_1 added [ 24.489998][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.497125][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.504469][ T3319] bridge_slave_0: entered allmulticast mode [ 24.510897][ T3319] bridge_slave_0: entered promiscuous mode [ 24.528446][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.535542][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.561507][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.572197][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.579230][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.586599][ T3319] bridge_slave_1: entered allmulticast mode [ 24.592831][ T3319] bridge_slave_1: entered promiscuous mode [ 24.611172][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.618152][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.644217][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.663983][ T3315] team0: Port device team_slave_0 added [ 24.669934][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.676867][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.702787][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.723963][ T3315] team0: Port device team_slave_1 added [ 24.729770][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.736734][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.762638][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.774834][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.800181][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.809285][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.816344][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.823821][ T3328] bridge_slave_0: entered allmulticast mode [ 24.830206][ T3328] bridge_slave_0: entered promiscuous mode [ 24.849872][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.856925][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.864045][ T3328] bridge_slave_1: entered allmulticast mode [ 24.870542][ T3328] bridge_slave_1: entered promiscuous mode [ 24.877025][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.884080][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.910016][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.923788][ T3317] hsr_slave_0: entered promiscuous mode [ 24.929800][ T3317] hsr_slave_1: entered promiscuous mode [ 24.949060][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.956022][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.981962][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.997677][ T3319] team0: Port device team_slave_0 added [ 25.015189][ T3323] hsr_slave_0: entered promiscuous mode [ 25.021167][ T3323] hsr_slave_1: entered promiscuous mode [ 25.027189][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 25.032930][ T3323] Cannot create hsr debugfs directory [ 25.038913][ T3319] team0: Port device team_slave_1 added [ 25.045467][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.055658][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.095057][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.102086][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.128096][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.139578][ T3328] team0: Port device team_slave_0 added [ 25.159822][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.166769][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.192658][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.204081][ T3328] team0: Port device team_slave_1 added [ 25.211738][ T3315] hsr_slave_0: entered promiscuous mode [ 25.217636][ T3315] hsr_slave_1: entered promiscuous mode [ 25.223482][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 25.229193][ T3315] Cannot create hsr debugfs directory [ 25.261332][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.268268][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.294265][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.326281][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.333261][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.359182][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.394236][ T3319] hsr_slave_0: entered promiscuous mode [ 25.400373][ T3319] hsr_slave_1: entered promiscuous mode [ 25.406091][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 25.411885][ T3319] Cannot create hsr debugfs directory [ 25.458835][ T3328] hsr_slave_0: entered promiscuous mode [ 25.464900][ T3328] hsr_slave_1: entered promiscuous mode [ 25.470718][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 25.476425][ T3328] Cannot create hsr debugfs directory [ 25.560952][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.573484][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.586411][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.601683][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.637266][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.649215][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.660807][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.674578][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.683320][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.698365][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.709260][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.720876][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.744149][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.758275][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.771933][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.781392][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.805645][ T3328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.815525][ T3328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.825775][ T3328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.837923][ T3328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.848860][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.883556][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.902176][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.909235][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.924280][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.931359][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.946280][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.976714][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.985647][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.994918][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.005279][ T958] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.012368][ T958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.026122][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.033171][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.053561][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.063019][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.079413][ T958] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.086521][ T958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.095281][ T958] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.102341][ T958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.114510][ T958] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.121607][ T958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.139382][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.151210][ T958] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.158302][ T958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.194928][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.217552][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.224664][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.235205][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.246205][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.253348][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.282151][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.371741][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.383231][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.430899][ T3323] veth0_vlan: entered promiscuous mode [ 26.445729][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.455614][ T3323] veth1_vlan: entered promiscuous mode [ 26.476976][ T3323] veth0_macvtap: entered promiscuous mode [ 26.494541][ T3317] veth0_vlan: entered promiscuous mode [ 26.501986][ T3323] veth1_macvtap: entered promiscuous mode [ 26.512504][ T3317] veth1_vlan: entered promiscuous mode [ 26.536276][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.551370][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.575426][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.587196][ T3317] veth0_macvtap: entered promiscuous mode [ 26.605729][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.622960][ T3317] veth1_macvtap: entered promiscuous mode [ 26.631785][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.645902][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.669246][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.677581][ T3315] veth0_vlan: entered promiscuous mode [ 26.687647][ T3328] veth0_vlan: entered promiscuous mode [ 26.697908][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.700372][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 26.700385][ T29] audit: type=1400 audit(1765489848.980:90): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.AiIo77/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.707265][ T3315] veth1_vlan: entered promiscuous mode [ 26.740328][ T29] audit: type=1400 audit(1765489848.990:91): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.749299][ T3319] veth0_vlan: entered promiscuous mode [ 26.762777][ T29] audit: type=1400 audit(1765489848.990:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.AiIo77/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.771568][ T3319] veth1_vlan: entered promiscuous mode [ 26.793258][ T29] audit: type=1400 audit(1765489848.990:93): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.806976][ T3319] veth0_macvtap: entered promiscuous mode [ 26.820821][ T29] audit: type=1400 audit(1765489848.990:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.AiIo77/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 26.829547][ T3319] veth1_macvtap: entered promiscuous mode [ 26.853076][ T29] audit: type=1400 audit(1765489848.990:95): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.AiIo77/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 26.862295][ T3328] veth1_vlan: entered promiscuous mode [ 26.886046][ T29] audit: type=1400 audit(1765489848.990:96): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.908908][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.923249][ T29] audit: type=1400 audit(1765489849.200:97): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.947109][ T29] audit: type=1400 audit(1765489849.230:98): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 26.951612][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.988882][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.000063][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.003726][ T3328] veth0_macvtap: entered promiscuous mode [ 27.023299][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.033399][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.045881][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.056936][ T29] audit: type=1400 audit(1765489849.320:99): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.081850][ T3328] veth1_macvtap: entered promiscuous mode [ 27.093090][ T3315] veth0_macvtap: entered promiscuous mode [ 27.101894][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.119692][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.128449][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.139042][ T3315] veth1_macvtap: entered promiscuous mode [ 27.152466][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.171820][ T3491] loop0: detected capacity change from 0 to 256 [ 27.175808][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.186423][ T3491] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.190205][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.205823][ T3491] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 27.214448][ T3491] FAT-fs (loop0): Filesystem has been set read-only [ 27.238233][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.251500][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.277506][ T971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.299762][ T3498] loop4: detected capacity change from 0 to 256 [ 27.307261][ T971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.328352][ T3498] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.341162][ T971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.371813][ T971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.381922][ T3498] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 27.390737][ T3498] FAT-fs (loop4): Filesystem has been set read-only [ 27.392149][ T971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.426489][ T971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.446163][ T971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.466555][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.649043][ T3523] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 27.656838][ T3523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 27.675896][ T3527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.735603][ T3529] random: crng reseeded on system resumption [ 27.757528][ T3529] loop4: detected capacity change from 0 to 1024 [ 27.777079][ T3527] loop2: detected capacity change from 0 to 4096 [ 27.815186][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.906753][ T3529] loop4: detected capacity change from 0 to 8192 [ 28.055795][ T3551] loop4: detected capacity change from 0 to 164 [ 28.065989][ T3551] iso9660: Unknown parameter '·' [ 28.075078][ T3551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3551 comm=syz.4.16 [ 28.136361][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 28.151937][ T3554] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14'. [ 28.192060][ T3554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 28.204496][ T3554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 28.211594][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 28.223339][ T3554] bond0 (unregistering): Released all slaves [ 28.300147][ T3551] Zero length message leads to an empty skb [ 28.408168][ T3557] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17'. [ 28.420259][ T3561] loop4: detected capacity change from 0 to 256 [ 28.427743][ T3561] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.475406][ T3561] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 28.484019][ T3561] FAT-fs (loop4): Filesystem has been set read-only [ 28.527238][ T3542] syz.2.14 (3542) used greatest stack depth: 10192 bytes left [ 28.599595][ T3571] loop3: detected capacity change from 0 to 256 [ 28.626222][ T3571] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.668322][ T3577] loop0: detected capacity change from 0 to 1024 [ 28.681382][ T3577] ======================================================= [ 28.681382][ T3577] WARNING: The mand mount option has been deprecated and [ 28.681382][ T3577] and is ignored by this kernel. Remove the mand [ 28.681382][ T3577] option from the mount to silence this warning. [ 28.681382][ T3577] ======================================================= [ 28.690639][ T3571] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 28.725033][ T3571] FAT-fs (loop3): Filesystem has been set read-only [ 28.763209][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 28.797608][ T3577] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.075647][ T3586] loop4: detected capacity change from 0 to 32768 [ 29.162267][ T3595] ip6gretap1: entered allmulticast mode [ 29.208790][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.229758][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.280414][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 29.301655][ T3604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.314963][ T3597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.340628][ T3604] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.347880][ T3604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.35: bg 0: block 248: padding at end of block bitmap is not set [ 29.362593][ T3604] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.35: Failed to acquire dquot type 1 [ 29.377584][ T3604] EXT4-fs (loop1): 1 truncate cleaned up [ 29.384865][ T3604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.399762][ T3597] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.413635][ T3604] EXT4-fs (loop1): shut down requested (0) [ 29.434135][ T3597] netlink: 'syz.4.33': attribute type 2 has an invalid length. [ 29.441772][ T3597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.33'. [ 29.455783][ T3597] netlink: 'syz.4.33': attribute type 11 has an invalid length. [ 29.474566][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 29.540224][ T3604] syz.1.35 (3604) used greatest stack depth: 9184 bytes left [ 29.557648][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.662350][ T3613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.38'. [ 29.673104][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.697410][ T3612] EXT4-fs: Ignoring removed oldalloc option [ 29.740436][ T3612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.763220][ T3612] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.776982][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.796267][ T3621] netlink: 68 bytes leftover after parsing attributes in process `syz.4.40'. [ 29.806962][ T3612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.36'. [ 29.816840][ T3612] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.36: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.836729][ T3612] EXT4-fs (loop0): Remounting filesystem read-only [ 29.851809][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 29.861793][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.157539][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.337866][ T3681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.383479][ T3686] EXT4-fs: Ignoring removed oldalloc option [ 30.445533][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.457988][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.470821][ T3686] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.475737][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.496706][ T3686] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.60: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.510297][ T3686] EXT4-fs (loop2): Remounting filesystem read-only [ 30.538377][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.544313][ T3690] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.63: inode #93: comm syz.4.63: iget: illegal inode # [ 30.560457][ T3690] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.63: error while reading EA inode 93 err=-117 [ 30.602773][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.660414][ T3704] EXT4-fs: Ignoring removed oldalloc option [ 30.672974][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.688477][ T3704] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.715200][ T3673] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 30.745733][ T3704] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.761220][ T3704] EXT4-fs (loop3): Remounting filesystem read-only [ 30.789138][ T3716] EXT4-fs: Ignoring removed oldalloc option [ 30.813998][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.827332][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.828220][ T3716] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.909527][ T3720] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.71: bad orphan inode 11862016 [ 30.928325][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 30.936305][ T3716] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.69: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.942394][ T3720] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.986148][ T3716] EXT4-fs (loop4): Remounting filesystem read-only [ 31.027525][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.072036][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.113548][ T3743] xt_connbytes: Forcing CT accounting to be enabled [ 31.121277][ T3743] Cannot find set identified by id 0 to match [ 31.207945][ T3746] process 'syz.1.80' launched './file0' with NULL argv: empty string added [ 31.545216][ T3767] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.89: bad orphan inode 11862016 [ 31.594405][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.611166][ T3767] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.697495][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.767905][ T3784] xt_hashlimit: max too large, truncated to 1048576 [ 31.775376][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 31.775390][ T29] audit: type=1400 audit(1765489854.060:615): avc: denied { create } for pid=3787 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.851818][ T29] audit: type=1400 audit(1765489854.080:616): avc: denied { bind } for pid=3787 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.870971][ T29] audit: type=1400 audit(1765489854.080:617): avc: denied { listen } for pid=3787 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.890678][ T29] audit: type=1400 audit(1765489854.090:618): avc: denied { write } for pid=3787 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.910135][ T29] audit: type=1400 audit(1765489854.090:619): avc: denied { accept } for pid=3787 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.950539][ T3797] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.005353][ T3797] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 32.013917][ T3797] FAT-fs (loop0): Filesystem has been set read-only [ 32.096644][ T3801] veth0_to_team: entered promiscuous mode [ 32.167278][ T3806] ipvlan1: entered promiscuous mode [ 32.172790][ T3806] ipvlan1: entered allmulticast mode [ 32.178195][ T3806] veth0_vlan: entered allmulticast mode [ 32.215438][ T29] audit: type=1400 audit(1765489854.490:620): avc: denied { ioctl } for pid=3807 comm="syz.2.105" path="socket:[5061]" dev="sockfs" ino=5061 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.326476][ T3821] set_capacity_and_notify: 13 callbacks suppressed [ 32.326506][ T3821] loop3: detected capacity change from 0 to 512 [ 32.339896][ T29] audit: type=1400 audit(1765489854.570:621): avc: denied { getopt } for pid=3814 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.391971][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.404697][ T3821] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.451034][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.486219][ T3827] loop2: detected capacity change from 0 to 256 [ 32.512799][ T3825] netlink: 'syz.4.108': attribute type 4 has an invalid length. [ 32.560921][ T3825] .`: renamed from bond0 (while UP) [ 32.592957][ T3827] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.645078][ T3827] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 32.653687][ T3827] FAT-fs (loop2): Filesystem has been set read-only [ 32.690388][ T29] audit: type=1400 audit(1765489854.960:622): avc: denied { map } for pid=3844 comm="syz.0.120" path="socket:[6201]" dev="sockfs" ino=6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.719888][ T3843] ref_ctr_offset mismatch. inode: 0x6d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 32.807288][ T3852] syzkaller0: entered promiscuous mode [ 32.812967][ T3852] syzkaller0: entered allmulticast mode [ 32.836317][ T29] audit: type=1400 audit(1765489855.110:623): avc: denied { write } for pid=3851 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.998017][ T3874] loop2: detected capacity change from 0 to 512 [ 33.014289][ T3874] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.133: bad orphan inode 11862016 [ 33.025792][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.051366][ T3874] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.089039][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.102552][ T3880] loop3: detected capacity change from 0 to 256 [ 33.111547][ T3880] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.154155][ T3880] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 33.163032][ T3880] FAT-fs (loop3): Filesystem has been set read-only [ 33.193423][ T3887] capability: warning: `syz.4.137' uses 32-bit capabilities (legacy support in use) [ 33.204431][ T29] audit: type=1400 audit(1765489855.470:624): avc: denied { setopt } for pid=3884 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.229209][ T3888] loop1: detected capacity change from 0 to 128 [ 33.243345][ T3890] loop2: detected capacity change from 0 to 1024 [ 33.335447][ T3899] netdevsim netdevsim4: Direct firmware load for ut/event# failed with error -2 [ 33.390708][ T3907] loop3: detected capacity change from 0 to 512 [ 33.420737][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.437913][ T3907] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.439156][ T3913] loop2: detected capacity change from 0 to 512 [ 33.451347][ T3907] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 33.462475][ T3907] __nla_validate_parse: 9 callbacks suppressed [ 33.462487][ T3907] netlink: 48 bytes leftover after parsing attributes in process `syz.3.147'. [ 33.492495][ T3913] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.148: bad orphan inode 11862016 [ 33.512723][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.527531][ T3913] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.528063][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.558051][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.597618][ T3923] loop3: detected capacity change from 0 to 1024 [ 33.614048][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.627170][ T3923] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.091103][ T3933] loop0: detected capacity change from 0 to 32768 [ 34.104193][ T3940] syzkaller1: entered promiscuous mode [ 34.109884][ T3940] syzkaller1: entered allmulticast mode [ 34.187989][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.495478][ T3956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.525256][ T3956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.600903][ T3981] EXT4-fs: Ignoring removed oldalloc option [ 34.632027][ T3981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.699836][ T3981] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.789573][ T3981] netlink: 64 bytes leftover after parsing attributes in process `syz.2.174'. [ 34.940557][ T3987] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.174: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.000937][ T3987] EXT4-fs (loop2): Remounting filesystem read-only [ 35.066267][ T3991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 35.097712][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.241735][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 35.355820][ T4014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 35.416654][ T4018] FAULT_INJECTION: forcing a failure. [ 35.416654][ T4018] name failslab, interval 1, probability 0, space 0, times 1 [ 35.429376][ T4018] CPU: 1 UID: 0 PID: 4018 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.429400][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.429410][ T4018] Call Trace: [ 35.429493][ T4018] [ 35.429501][ T4018] __dump_stack+0x1d/0x30 [ 35.429523][ T4018] dump_stack_lvl+0xe8/0x140 [ 35.429542][ T4018] dump_stack+0x15/0x1b [ 35.429562][ T4018] should_fail_ex+0x265/0x280 [ 35.429665][ T4018] should_failslab+0x8c/0xb0 [ 35.429685][ T4018] kmem_cache_alloc_noprof+0x69/0x4b0 [ 35.429704][ T4018] ? prepare_creds+0x39/0x550 [ 35.429720][ T4018] ? get_random_u64+0x164/0x210 [ 35.429798][ T4018] prepare_creds+0x39/0x550 [ 35.429814][ T4018] copy_creds+0x8f/0x340 [ 35.429909][ T4018] ? dup_task_struct+0x60b/0x950 [ 35.429932][ T4018] copy_process+0x638/0x1ef0 [ 35.429959][ T4018] kernel_clone+0x16c/0x5c0 [ 35.429999][ T4018] __x64_sys_clone+0xe6/0x120 [ 35.430025][ T4018] x64_sys_call+0x12d0/0x3000 [ 35.430051][ T4018] do_syscall_64+0xd8/0x2a0 [ 35.430086][ T4018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.430131][ T4018] RIP: 0033:0x7f531fb3f749 [ 35.430152][ T4018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.430167][ T4018] RSP: 002b:00007f531e55cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 35.430187][ T4018] RAX: ffffffffffffffda RBX: 00007f531fd96180 RCX: 00007f531fb3f749 [ 35.430251][ T4018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 35.430263][ T4018] RBP: 00007f531e55d090 R08: 0000000000000000 R09: 0000000000000000 [ 35.430276][ T4018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 35.430289][ T4018] R13: 00007f531fd96218 R14: 00007f531fd96180 R15: 00007ffe2dd83ce8 [ 35.430310][ T4018] [ 36.031546][ T4024] EXT4-fs: Ignoring removed oldalloc option [ 36.071340][ T4027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.101431][ T4024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.130055][ T4027] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.147411][ T4027] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.190: bg 0: block 248: padding at end of block bitmap is not set [ 36.162265][ T4024] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.183069][ T4027] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.190: Failed to acquire dquot type 1 [ 36.206197][ T4024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.189'. [ 36.216519][ T4027] EXT4-fs (loop1): 1 truncate cleaned up [ 36.223989][ T4024] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.189: lblock 0 mapped to illegal pblock 0 (length 1) [ 36.241509][ T4024] EXT4-fs (loop0): Remounting filesystem read-only [ 36.319044][ T4027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.342608][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.430396][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.700724][ T4049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 36.743469][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.756133][ T4051] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.769068][ T4051] netlink: 'syz.0.200': attribute type 2 has an invalid length. [ 36.776760][ T4051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.200'. [ 37.504744][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.689565][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 37.689579][ T29] audit: type=1400 audit(1765489859.960:788): avc: denied { lock } for pid=4066 comm="syz.0.202" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.901590][ T4086] set_capacity_and_notify: 6 callbacks suppressed [ 37.901605][ T4086] loop1: detected capacity change from 0 to 512 [ 37.953887][ T4086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.971569][ T29] audit: type=1400 audit(1765489860.250:789): avc: denied { setopt } for pid=4083 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.992349][ T4086] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.001516][ T4086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.213: bg 0: block 248: padding at end of block bitmap is not set [ 38.018345][ T4086] Quota error (device loop1): write_blk: dquota write failed [ 38.025906][ T4086] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 38.032301][ T29] audit: type=1400 audit(1765489860.270:790): avc: denied { read } for pid=4080 comm="syz.4.211" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.035934][ T4086] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.213: Failed to acquire dquot type 1 [ 38.058972][ T29] audit: type=1400 audit(1765489860.270:791): avc: denied { open } for pid=4080 comm="syz.4.211" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.093291][ T29] audit: type=1400 audit(1765489860.280:792): avc: denied { ioctl } for pid=4080 comm="syz.4.211" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.098016][ T4086] EXT4-fs (loop1): 1 truncate cleaned up [ 38.118052][ T29] audit: type=1400 audit(1765489860.280:793): avc: denied { ioctl } for pid=4091 comm="syz.0.215" path="socket:[7260]" dev="sockfs" ino=7260 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.164654][ T4086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.234387][ T4086] EXT4-fs (loop1): shut down requested (0) [ 38.272089][ T29] audit: type=1400 audit(1765489860.430:794): avc: denied { read write } for pid=4080 comm="syz.4.211" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.296275][ T29] audit: type=1400 audit(1765489860.430:795): avc: denied { open } for pid=4080 comm="syz.4.211" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.383985][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.161368][ T4126] loop3: detected capacity change from 0 to 1024 [ 39.284049][ T4130] loop2: detected capacity change from 0 to 512 [ 39.293709][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 39.304116][ T4130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.323776][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 39.347010][ T4130] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.355183][ T4130] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.228: bg 0: block 248: padding at end of block bitmap is not set [ 39.379932][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.390420][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.403868][ T4130] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.228: Failed to acquire dquot type 1 [ 39.417588][ T4130] EXT4-fs (loop2): 1 truncate cleaned up [ 39.430072][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.441069][ T4130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.457224][ T4138] loop3: detected capacity change from 0 to 1024 [ 39.478308][ T4130] EXT4-fs (loop2): shut down requested (0) [ 39.490039][ T4138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.508516][ T4128] infiniband syz2: set active [ 39.513385][ T4128] infiniband syz2: added ip6_vti0 [ 39.518421][ T4063] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.528783][ T4138] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.563491][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.601229][ T4128] RDS/IB: syz2: added [ 39.640076][ T4128] smc: adding ib device syz2 with port count 1 [ 39.653693][ T4128] smc: ib device syz2 port 1 has no pnetid [ 39.659894][ T3398] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.666777][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.836104][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.875702][ T4164] loop4: detected capacity change from 0 to 256 [ 39.893546][ T4164] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.905952][ T4164] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 39.905992][ T4164] FAT-fs (loop4): Filesystem has been set read-only [ 39.979471][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.017732][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.046528][ T4128] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.296002][ T4173] loop1: detected capacity change from 0 to 2048 [ 40.341227][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.341290][ T4177] loop0: detected capacity change from 0 to 1024 [ 40.358357][ T4152] loop1: p1 < > p4 [ 40.369537][ T4152] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.372415][ T4177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.388749][ T4177] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.440239][ T4173] loop1: p1 < > p4 [ 40.446260][ T4173] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.524807][ T3749] udevd[3749]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.526844][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.544742][ T4187] loop1: detected capacity change from 0 to 512 [ 40.574485][ T4187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.593950][ T4188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 40.613305][ T4187] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.615215][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.651364][ T3749] udevd[3749]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.674253][ T4187] netlink: 'syz.1.249': attribute type 2 has an invalid length. [ 40.681964][ T4187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.249'. [ 40.714255][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.763911][ T4194] loop3: detected capacity change from 0 to 512 [ 40.800826][ T4194] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.251: bad orphan inode 11862016 [ 40.830390][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.838616][ T4202] loop2: detected capacity change from 0 to 512 [ 40.857035][ T4202] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 40.865237][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.875544][ T4200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 40.890111][ T4202] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.254: iget: bad i_size value: 12154757448730 [ 40.907168][ T4194] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.934831][ T4202] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.254: couldn't read orphan inode 13 (err -117) [ 40.947742][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.962102][ T4202] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 41.007223][ T4208] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.021238][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.030050][ T4208] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 41.038740][ T4208] FAT-fs (loop1): Filesystem has been set read-only [ 41.073558][ T4210] EXT4-fs: Ignoring removed orlov option [ 41.118422][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.163336][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.170223][ T4219] EXT4-fs: Ignoring removed oldalloc option [ 41.208420][ T4219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.236315][ T4222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.250077][ T4219] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.321035][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 41.366249][ T4219] netlink: 64 bytes leftover after parsing attributes in process `syz.3.259'. [ 41.378600][ T4219] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.259: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.392534][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.405677][ T4228] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.427961][ T4219] EXT4-fs (loop3): Remounting filesystem read-only [ 41.519320][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.545197][ T4228] netlink: 'syz.4.263': attribute type 2 has an invalid length. [ 41.552909][ T4228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.263'. [ 41.618583][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.836549][ T4249] EXT4-fs: Ignoring removed oldalloc option [ 41.846001][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.856758][ T4242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 41.873410][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.900628][ T4249] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.950507][ T4249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.270'. [ 41.961683][ T4249] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.270: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.986851][ T4249] EXT4-fs (loop4): Remounting filesystem read-only [ 42.022541][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.041849][ T4257] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.054648][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.107532][ T4269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.137293][ T4269] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.153719][ T4269] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.278: bg 0: block 248: padding at end of block bitmap is not set [ 42.169253][ T4269] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.278: Failed to acquire dquot type 1 [ 42.171396][ T4269] EXT4-fs (loop1): 1 truncate cleaned up [ 42.187591][ T4269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.205781][ T4269] EXT4-fs (loop1): shut down requested (0) [ 42.230488][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.358561][ T4274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.367951][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.378602][ T4274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.399783][ T4285] EXT4-fs: Ignoring removed i_version option [ 42.405894][ T4285] EXT4-fs: Ignoring removed bh option [ 42.461650][ T4292] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 42.475690][ T4292] capability: warning: `syz.0.286' uses deprecated v2 capabilities in a way that may be insecure [ 42.518806][ T4285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.536938][ T4285] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.665890][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.703293][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 42.703306][ T29] audit: type=1400 audit(1765489864.980:1107): avc: denied { mac_admin } for pid=4295 comm="syz.0.287" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.730884][ T4298] SELinux: Context system_u:object is not valid (left unmapped). [ 42.784932][ T29] audit: type=1400 audit(1765489865.010:1108): avc: denied { relabelto } for pid=4295 comm="syz.0.287" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 42.810587][ T29] audit: type=1400 audit(1765489865.010:1109): avc: denied { associate } for pid=4295 comm="syz.0.287" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 42.873240][ T4301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.911219][ T29] audit: type=1326 audit(1765489865.190:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 42.935985][ T29] audit: type=1326 audit(1765489865.210:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 42.959772][ T29] audit: type=1326 audit(1765489865.210:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 42.979479][ T4301] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.983355][ T29] audit: type=1326 audit(1765489865.210:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 43.016818][ T29] audit: type=1326 audit(1765489865.210:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 43.048336][ T29] audit: type=1326 audit(1765489865.220:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 43.051408][ T4301] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 43.071796][ T29] audit: type=1326 audit(1765489865.220:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2757f749 code=0x7ffc0000 [ 43.146866][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.250360][ T4327] set_capacity_and_notify: 11 callbacks suppressed [ 43.250391][ T4327] loop1: detected capacity change from 0 to 1024 [ 43.333003][ T4329] loop0: detected capacity change from 0 to 1024 [ 43.357880][ T4329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.378966][ T4329] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.418673][ T4339] loop2: detected capacity change from 0 to 1024 [ 43.437501][ T4339] EXT4-fs: Ignoring removed oldalloc option [ 43.471073][ T4339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.471179][ T4339] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.537442][ T4339] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.304: lblock 0 mapped to illegal pblock 0 (length 1) [ 43.537713][ T4339] EXT4-fs (loop2): Remounting filesystem read-only [ 43.643184][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.816847][ T4367] ip6_vti0 speed is unknown, defaulting to 1000 [ 43.838814][ T4371] FAULT_INJECTION: forcing a failure. [ 43.838814][ T4371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.852387][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.852411][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.852471][ T4371] Call Trace: [ 43.852478][ T4371] [ 43.852486][ T4371] __dump_stack+0x1d/0x30 [ 43.852513][ T4371] dump_stack_lvl+0xe8/0x140 [ 43.852538][ T4371] dump_stack+0x15/0x1b [ 43.852556][ T4371] should_fail_ex+0x265/0x280 [ 43.852591][ T4371] should_fail+0xb/0x20 [ 43.852612][ T4371] should_fail_usercopy+0x1a/0x20 [ 43.852636][ T4371] _copy_from_user+0x1c/0xb0 [ 43.852662][ T4371] ___sys_sendmsg+0xc1/0x1d0 [ 43.852782][ T4371] __x64_sys_sendmsg+0xd4/0x160 [ 43.852815][ T4371] x64_sys_call+0x17ba/0x3000 [ 43.852841][ T4371] do_syscall_64+0xd8/0x2a0 [ 43.852899][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.852922][ T4371] RIP: 0033:0x7fd6c768f749 [ 43.852938][ T4371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.852957][ T4371] RSP: 002b:00007fd6c60ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.852974][ T4371] RAX: ffffffffffffffda RBX: 00007fd6c78e5fa0 RCX: 00007fd6c768f749 [ 43.852985][ T4371] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 0000000000000007 [ 43.853042][ T4371] RBP: 00007fd6c60ef090 R08: 0000000000000000 R09: 0000000000000000 [ 43.853054][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.853083][ T4371] R13: 00007fd6c78e6038 R14: 00007fd6c78e5fa0 R15: 00007ffda8003f18 [ 43.853101][ T4371] [ 44.079095][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.202608][ T4372] loop2: detected capacity change from 0 to 512 [ 44.237417][ T4374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.260282][ T4374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.276710][ T4372] EXT4-fs: dax option not supported [ 44.300815][ T4394] loop0: detected capacity change from 0 to 256 [ 44.344798][ T4394] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.372932][ T4394] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 44.381808][ T4394] FAT-fs (loop0): Filesystem has been set read-only [ 44.564045][ T4404] cgroup: Unknown subsys name '¢•4ô' [ 44.810340][ T4415] loop1: detected capacity change from 0 to 512 [ 44.818063][ T4415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.826785][ T4415] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.844279][ T4415] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.335: Allocating blocks 41-42 which overlap fs metadata [ 44.853104][ T4418] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 44.860174][ T4415] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.335: Allocating blocks 41-42 which overlap fs metadata [ 44.876102][ T4418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.920702][ T4415] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.335: Failed to acquire dquot type 1 [ 44.932224][ T4415] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 44.946794][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.335: corrupted inode contents [ 44.969810][ T4413] loop3: detected capacity change from 0 to 1024 [ 44.969826][ T4415] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.335: mark_inode_dirty error [ 44.979667][ T4413] EXT4-fs: Ignoring removed orlov option [ 45.005744][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.335: corrupted inode contents [ 45.019567][ T4415] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.335: mark_inode_dirty error [ 45.036206][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.038626][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.335: corrupted inode contents [ 45.075121][ T4430] __nla_validate_parse: 6 callbacks suppressed [ 45.075134][ T4430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.339'. [ 45.089882][ T4415] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 45.101176][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.335: corrupted inode contents [ 45.126121][ T4415] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.335: mark_inode_dirty error [ 45.147964][ T4415] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 45.177690][ T4415] EXT4-fs (loop1): 1 truncate cleaned up [ 45.187264][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.202551][ T4415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.234673][ T4438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.250832][ T4438] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 45.272336][ T4438] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 45.442829][ T4413] ================================================================== [ 45.450945][ T4413] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 45.459014][ T4413] [ 45.461413][ T4413] write to 0xffff88811d9ea0a8 of 8 bytes by task 4418 on cpu 0: [ 45.469038][ T4413] filemap_splice_read+0x4f4/0x740 [ 45.474162][ T4413] ext4_file_splice_read+0x8f/0xb0 [ 45.479282][ T4413] splice_direct_to_actor+0x26f/0x680 [ 45.484644][ T4413] do_splice_direct+0xda/0x150 [ 45.489396][ T4413] do_sendfile+0x380/0x650 [ 45.493807][ T4413] __x64_sys_sendfile64+0x105/0x150 [ 45.498998][ T4413] x64_sys_call+0x2db1/0x3000 [ 45.503669][ T4413] do_syscall_64+0xd8/0x2a0 [ 45.508259][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.514143][ T4413] [ 45.516454][ T4413] write to 0xffff88811d9ea0a8 of 8 bytes by task 4413 on cpu 1: [ 45.524155][ T4413] filemap_splice_read+0x4f4/0x740 [ 45.529265][ T4413] ext4_file_splice_read+0x8f/0xb0 [ 45.534376][ T4413] splice_direct_to_actor+0x26f/0x680 [ 45.539741][ T4413] do_splice_direct+0xda/0x150 [ 45.544492][ T4413] do_sendfile+0x380/0x650 [ 45.548905][ T4413] __x64_sys_sendfile64+0x105/0x150 [ 45.554095][ T4413] x64_sys_call+0x2db1/0x3000 [ 45.558764][ T4413] do_syscall_64+0xd8/0x2a0 [ 45.563270][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.569157][ T4413] [ 45.571465][ T4413] value changed: 0x0000000000000258 -> 0x0000000000000259 [ 45.578557][ T4413] [ 45.580866][ T4413] Reported by Kernel Concurrency Sanitizer on: [ 45.587001][ T4413] CPU: 1 UID: 0 PID: 4413 Comm: syz.3.334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.596619][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.606677][ T4413] ================================================================== [ 45.626131][ T4447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.651128][ T4449] loop0: detected capacity change from 0 to 512 [ 45.682286][ T4451] netlink: 'syz.4.345': attribute type 7 has an invalid length. [ 45.707334][ T4449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.714087][ T4451] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 45.734556][ T4449] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.782857][ T4449] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 45.790579][ T4449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.347'. [ 45.801464][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.838472][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.