last executing test programs: 5.041529121s ago: executing program 0 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x119c93, &(0x7f0000000980)={[{@noinit_itable}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x1da9}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x57b, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setregid(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r6, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100"], 0x3c}}, 0x0) 4.751516873s ago: executing program 0 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d00000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000063fd23bdbcdb44033cb3cc000000000000000000000000701cf14cd3a62ff1d3079ab61768c503e8d41172079af6b8ef8c7f5e4bca3104cda5195c7cddd5332eaa1fcb41d484df7bc5089c26561ce7e0b6d46f9e34b8d8c3601d07ad625e6af8dfef5f4da7e338f2d9dcf09a9b81991f2c264d96d8ffbb930fc43dfea5fc8797f2156d66a25bb515559f32167407880fe1421b43d2c6515276f3a9cececbbf7b5f33691d0134542a7ca5a03dde"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0xffffffffffffffff, @ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) unshare(0x68040200) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 3.681765939s ago: executing program 3 (id=26): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0xa10809, &(0x7f0000000040), 0xfe, 0x504, &(0x7f0000000a40)="$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") r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x1f2d, 0x10}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @private}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2a}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup(r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/80, &(0x7f0000000300)=0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file3\x00', &(0x7f00000001c0), 0x218006, &(0x7f0000000080)={[], [{@seclabel}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000909000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000003, r6) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) iopl(0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 3.51238951s ago: executing program 0 (id=28): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='xs_stream_read_request\x00', r1, 0x0, 0xfffffffffffffff1}, 0x45) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a"], 0x40}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) 3.393663141s ago: executing program 0 (id=29): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 3.371649901s ago: executing program 0 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d00000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000063fd23bdbcdb44033cb3cc000000000000000000000000701cf14cd3a62ff1d3079ab61768c503e8d41172079af6b8ef8c7f5e4bca3104cda5195c7cddd5332eaa1fcb41d484df7bc5089c26561ce7e0b6d46f9e34b8d8c3601d07ad625e6af8dfef5f4da7e338f2d9dcf09a9b81991f2c264d96d8ffbb930fc43dfea5fc8797f2156d66a25bb515559f32167407880fe1421b43d2c6515276f3a9cececbbf7b5f33691d0134542a7ca5a0"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0xffffffffffffffff, @ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) unshare(0x68040200) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") r12 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 2.791811324s ago: executing program 3 (id=35): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (fail_nth: 4) 2.450006786s ago: executing program 0 (id=37): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}}, 0x44) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf3a, 0x0) 2.441155376s ago: executing program 3 (id=39): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x10010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000300000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r7, 0x8}, 0x14) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="1803f8ff06000000230032baef71000018120000e93e4b845b4f4385c97da020ce0c1df04169919f5a1d8065971e02", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000002276fcff010000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xd3, &(0x7f0000000340)=""/211, 0x40e00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x18, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1], &(0x7f0000000440)=[{0x0, 0x2, 0xd, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='.\x00', 0x140002d2) read(r9, 0x0, 0x0) 1.74342523s ago: executing program 4 (id=45): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.576703711s ago: executing program 2 (id=47): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b6, &(0x7f0000000280)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000003c0)="228496483e5385a512e5f4952582873442def074cbb389e4bb8cc11ea5c42ed0ff0c903b637670c50e392d851733d4dacfdc9f5c3a4f39bd66af37457a54fb4ca614f00882f6bb51ab7607bd0ee5c5898bc15651dc38fe0f71bc1d446a5a871d42f5ab69bfe7967d38817a08adcde2299cb6615de4b6dcadc22f90ed4f9fba0dc64dfc2265fb8ba5d4f662da6914f477a729566e190dfdd751e0671e05edfe0b59b508477f5c5f6cf349dc495194e2cc17694a01c1697aa642f1e9a7ad1075b46862730d13947d657e0ea7215251d9ca9398bc7432aee27a0d7c1bd142bcf989bec0ac47e2da331c", &(0x7f0000000580)=""/178, &(0x7f00000004c0)="c7c7f6c567c6d2d9c48033c15bcea622c39f8def065acfc04c94178de7f98f8fd11bddf2f5b06a36cfd1224139dfe81c66891d35f31c16b8a3f356844a22f03e78c480f23045510ce8469a13adfef4e8c89530ba9e2340cfaea12ca52b37e98e14734fce4b586d78b37791139a0eec25", &(0x7f0000000300)="024ba9", 0xd6c1, 0xffffffffffffffff, 0x4}, 0x38) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000a40)={0x0, r1, 0x1, 0x6, 0x5, 0x9}) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) 1.531900952s ago: executing program 3 (id=48): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x1, 0x6b000000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = dup2(r0, r2) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x371, &(0x7f0000001400)="$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") (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) unshare(0x64000600) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r6, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x40, @remote}, {0x2, 0x4e27, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x387, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x8002) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 1.459698892s ago: executing program 2 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d00000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000063fd23bdbcdb44033cb3cc000000000000000000000000701cf14cd3a62ff1d3079ab61768c503e8d41172079af6b8ef8c7f5e4bca3104cda5195c7cddd5332eaa1fcb41d484df7bc5089c26561ce7e0b6d46f9e34b8d8c3601d07ad625e6af8dfef5f4da7e338f2d9dcf09a9b81991f2c264d96d8ffbb930fc43dfea5fc8797f2156d66a25bb515559f32167407880fe1421b43d2c6515276f3a9cececbbf7b5f33691d0134542a7ca5a03dde"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0xffffffffffffffff, @ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) unshare(0x68040200) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.413711462s ago: executing program 3 (id=50): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 1.268789003s ago: executing program 1 (id=55): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0x4}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="fdffffffffffffff0c84ad296af86347db07bf1dfc94fa0c", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000000000000000000000000000ac10a8ea517ea6ebf530c625e7c7116daec0a61bac3fe782e3c7214a", @ANYRES32=r3, @ANYRES8=r3], 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x7, 0x5}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES16=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000005164e33b0000001c000000000000e500000000", @ANYRES64=r5, @ANYRES64], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x80) 1.264107503s ago: executing program 1 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x9, 0x2, 0xfe69b8ec, 0xa, 0x1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000900), 0x103, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) 1.130630034s ago: executing program 2 (id=57): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5a43, 0x0, 0x0, 0x0, 0xd7}, [@snprintf, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x1, 0x0, 0xfffffff4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280), &(0x7f00000005c0)=[{0x0, 0x2, 0xb, 0xa}, {0x5, 0x4, 0xb, 0x3}, {0x2, 0x4, 0x8, 0x2}], 0x10, 0x387a, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mq_unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a5802, 0x0) 1.106047214s ago: executing program 2 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_process_fork\x00', 0xffffffffffffffff, 0x0, 0x3e}, 0x18) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x9, 0x2, 0xfe69b8ec, 0xa, 0x1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000900), 0x103, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) 845.547335ms ago: executing program 1 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000101811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x119c93, &(0x7f0000000980)={[{@noinit_itable}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x1da9}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x57b, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) 819.044695ms ago: executing program 4 (id=60): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b6, &(0x7f0000000280)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000003c0)="228496483e5385a512e5f4952582873442def074cbb389e4bb8cc11ea5c42ed0ff0c903b637670c50e392d851733d4dacfdc9f5c3a4f39bd66af37457a54fb4ca614f00882f6bb51ab7607bd0ee5c5898bc15651dc38fe0f71bc1d446a5a871d42f5ab69bfe7967d38817a08adcde2299cb6615de4b6dcadc22f90ed4f9fba0dc64dfc2265fb8ba5d4f662da6914f477a729566e190dfdd751e0671e05edfe0b59b508477f5c5f6cf349dc495194e2cc17694a01c1697aa642f1e9a7ad1075b46862730d13947d657e0ea7215251d9ca9398bc7432aee27a0d7c1bd142bcf989bec0ac47e2da331c", &(0x7f0000000580)=""/178, &(0x7f00000004c0)="c7c7f6c567c6d2d9c48033c15bcea622c39f8def065acfc04c94178de7f98f8fd11bddf2f5b06a36cfd1224139dfe81c66891d35f31c16b8a3f356844a22f03e78c480f23045510ce8469a13adfef4e8c89530ba9e2340cfaea12ca52b37e98e14734fce4b586d78b37791139a0eec25", &(0x7f0000000300)="024ba9", 0xd6c1, 0xffffffffffffffff, 0x4}, 0x38) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000a40)={0x0, r1, 0x1, 0x6, 0x5, 0x9}) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) 768.754515ms ago: executing program 1 (id=61): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000002600)) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13c, 0x13c, 0x5, [@restrict, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x1a, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x4}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0x66f6, [{0xf, 0x1, 0xffffffff}, {0x0, 0x1, 0x5}, {0x1, 0x0, 0x9}, {0xc, 0x5, 0x9}, {0xe, 0x0, 0x1}]}, @struct={0x3, 0x7, 0x0, 0x4, 0x0, 0x5e, [{0xc, 0x2, 0xfffffffe}, {0x7, 0x3, 0x79}, {0x7, 0x0, 0x4}, {0x8, 0x2, 0x9}, {0x7, 0x0, 0x2d2}, {0xd, 0x0, 0x4}, {0xe, 0x5, 0x7}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0x0, 0x5}, {0x4}, {0xe, 0x5}, {0xc, 0x2}, {0xf, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @const={0xb, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f00000003c0)=""/15, 0x159, 0xf, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/55, 0x37}], 0x1, 0x1, 0x3ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r0, &(0x7f0000000280)=0x401, r0, &(0x7f00000002c0)=0x4, 0x6, 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsopen(&(0x7f0000000300)='v7\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x6, 0x8, 0x0, @local, @empty, 0x80, 0x20, 0x8}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@mcast2, @remote, @remote, 0x7fffffff, 0x9, 0x9, 0x0, 0xf, 0x0, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c0002"], 0x4c}}, 0x0) 717.971556ms ago: executing program 1 (id=62): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (fail_nth: 1) 717.205736ms ago: executing program 4 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x44) pipe(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 692.207556ms ago: executing program 4 (id=64): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 511.900447ms ago: executing program 3 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0x5e5b) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x40000110) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 479.223937ms ago: executing program 4 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d00000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000063fd23bdbcdb44033cb3cc000000000000000000000000701cf14cd3a62ff1d3079ab61768c503e8d41172079af6b8ef8c7f5e4bca3104cda5195c7cddd5332eaa1fcb41d484df7bc5089c26561ce7e0b6d46f9e34b8d8c3601d07ad625e6af8dfef5f4da7e338f2d9dcf09a9b81991f2c264d96d8ffbb930fc43dfea5fc8797f2156d66a25bb515559f32167407880fe1421b43d2c6515276f3a9cececbbf7b5f33691d0134542a7ca5a03dde"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0xffffffffffffffff, @ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) unshare(0x68040200) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") r12 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 460.526027ms ago: executing program 1 (id=67): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x10010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000300000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r7, 0x8}, 0x14) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="1803f8ff06000000230032baef71000018120000e93e4b845b4f4385c97da020ce0c1df04169919f5a1d8065971e02", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000002276fcff010000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xd3, &(0x7f0000000340)=""/211, 0x40e00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x18, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1], &(0x7f0000000440)=[{0x0, 0x2, 0xd, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r9 = inotify_init1(0x0) read(r9, 0x0, 0x0) 457.224507ms ago: executing program 2 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d00000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000063fd23bdbcdb44033cb3cc000000000000000000000000701cf14cd3a62ff1d3079ab61768c503e8d41172079af6b8ef8c7f5e4bca3104cda5195c7cddd5332eaa1fcb41d484df7bc5089c26561ce7e0b6d46f9e34b8d8c3601d07ad625e6af8dfef5f4da7e338f2d9dcf09a9b81991f2c264d96d8ffbb930fc43dfea5fc8797f2156d66a25bb515559f32167407880fe1421b43d2c6515276f3a9cececbbf7b5f33691d0134542a7ca5a03dde"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0xffffffffffffffff, @ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) unshare(0x68040200) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 23.02916ms ago: executing program 2 (id=69): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 0s ago: executing program 4 (id=70): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x3, 0x200, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x66, 0x0, 0xe0, 0x4, 0x0, @empty, @empty, {[@ssrr={0x89, 0xb, 0xe0, [@dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast2, @multicast1}, &(0x7f0000001b00)=0xc) (async) r12 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x15, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x33}}}}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000000680)={0x100, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000051) kernel console output (not intermixed with test programs): [ 21.886177][ T29] audit: type=1400 audit(1732399541.681:81): avc: denied { read } for pid=3002 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 26.672734][ T29] audit: type=1400 audit(1732399546.461:82): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.673979][ T3305] cgroup: Unknown subsys name 'net' [ 26.695601][ T29] audit: type=1400 audit(1732399546.461:83): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.722948][ T29] audit: type=1400 audit(1732399546.491:84): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.936653][ T3305] cgroup: Unknown subsys name 'cpuset' [ 26.942828][ T3305] cgroup: Unknown subsys name 'rlimit' [ 27.113766][ T29] audit: type=1400 audit(1732399546.901:85): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.139281][ T29] audit: type=1400 audit(1732399546.901:86): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.159799][ T29] audit: type=1400 audit(1732399546.901:87): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.180164][ T29] audit: type=1400 audit(1732399546.901:88): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.200533][ T29] audit: type=1400 audit(1732399546.911:89): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.209570][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.225345][ T29] audit: type=1400 audit(1732399546.911:90): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.257113][ T29] audit: type=1400 audit(1732399547.031:91): avc: denied { relabelto } for pid=3310 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.292880][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.999990][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.039488][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 29.048510][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.059432][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.086695][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.137590][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.144673][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.152076][ T3323] bridge_slave_0: entered allmulticast mode [ 29.158436][ T3323] bridge_slave_0: entered promiscuous mode [ 29.189467][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.196620][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.203739][ T3323] bridge_slave_1: entered allmulticast mode [ 29.210164][ T3323] bridge_slave_1: entered promiscuous mode [ 29.237451][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.244527][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.251753][ T3325] bridge_slave_0: entered allmulticast mode [ 29.258271][ T3325] bridge_slave_0: entered promiscuous mode [ 29.290873][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.297996][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.305123][ T3325] bridge_slave_1: entered allmulticast mode [ 29.311548][ T3325] bridge_slave_1: entered promiscuous mode [ 29.317684][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.324739][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.332060][ T3318] bridge_slave_0: entered allmulticast mode [ 29.338423][ T3318] bridge_slave_0: entered promiscuous mode [ 29.344813][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.351931][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.359128][ T3322] bridge_slave_0: entered allmulticast mode [ 29.365563][ T3322] bridge_slave_0: entered promiscuous mode [ 29.373154][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.392275][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.399384][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.406519][ T3318] bridge_slave_1: entered allmulticast mode [ 29.412902][ T3318] bridge_slave_1: entered promiscuous mode [ 29.419736][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.426825][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.433995][ T3322] bridge_slave_1: entered allmulticast mode [ 29.440688][ T3322] bridge_slave_1: entered promiscuous mode [ 29.447795][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.461575][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.468725][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.475907][ T3317] bridge_slave_0: entered allmulticast mode [ 29.482310][ T3317] bridge_slave_0: entered promiscuous mode [ 29.494520][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.504795][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.527577][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.534628][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.541890][ T3317] bridge_slave_1: entered allmulticast mode [ 29.548426][ T3317] bridge_slave_1: entered promiscuous mode [ 29.573125][ T3323] team0: Port device team_slave_0 added [ 29.579741][ T3323] team0: Port device team_slave_1 added [ 29.590410][ T3325] team0: Port device team_slave_0 added [ 29.597281][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.607616][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.631769][ T3325] team0: Port device team_slave_1 added [ 29.638594][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.652957][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.662342][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.669392][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.695368][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.707830][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.717269][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.724212][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.750243][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.775343][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.797388][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.804430][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.830380][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.841963][ T3318] team0: Port device team_slave_0 added [ 29.853249][ T3322] team0: Port device team_slave_0 added [ 29.859836][ T3322] team0: Port device team_slave_1 added [ 29.866587][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.873539][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.899532][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.910749][ T3318] team0: Port device team_slave_1 added [ 29.946779][ T3317] team0: Port device team_slave_0 added [ 29.959027][ T3323] hsr_slave_0: entered promiscuous mode [ 29.965129][ T3323] hsr_slave_1: entered promiscuous mode [ 29.972133][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.979153][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.005114][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.016372][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.023324][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.049268][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.060736][ T3317] team0: Port device team_slave_1 added [ 30.071438][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.078392][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.104401][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.115629][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.122584][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.148494][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.179618][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.186664][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.212647][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.232316][ T3325] hsr_slave_0: entered promiscuous mode [ 30.238500][ T3325] hsr_slave_1: entered promiscuous mode [ 30.244287][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.251908][ T3325] Cannot create hsr debugfs directory [ 30.263004][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.270010][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.296006][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.352248][ T3322] hsr_slave_0: entered promiscuous mode [ 30.358463][ T3322] hsr_slave_1: entered promiscuous mode [ 30.364431][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.372008][ T3322] Cannot create hsr debugfs directory [ 30.395441][ T3317] hsr_slave_0: entered promiscuous mode [ 30.401510][ T3317] hsr_slave_1: entered promiscuous mode [ 30.407403][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.414940][ T3317] Cannot create hsr debugfs directory [ 30.422295][ T3318] hsr_slave_0: entered promiscuous mode [ 30.428303][ T3318] hsr_slave_1: entered promiscuous mode [ 30.434170][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.441754][ T3318] Cannot create hsr debugfs directory [ 30.591180][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.612957][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.623552][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.638096][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.659187][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.669342][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.678377][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.689633][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.713350][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.724041][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.732499][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.741753][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.771700][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.795774][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.804831][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.814104][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.831973][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.841342][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.850181][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.862816][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.891063][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.929743][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.938471][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.967093][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.976105][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.983175][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.995105][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.004673][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011760][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.021391][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.034679][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.045387][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.052466][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.072493][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.079587][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.089269][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.096457][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.106199][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.118718][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.125826][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.134575][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.141702][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.163510][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.170601][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.212894][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.223314][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.248428][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.271322][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.286489][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.293620][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.311496][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.318589][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.339361][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.349818][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.401356][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.424652][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.443339][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.452209][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.497157][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.609392][ T3317] veth0_vlan: entered promiscuous mode [ 31.622565][ T3317] veth1_vlan: entered promiscuous mode [ 31.655430][ T3317] veth0_macvtap: entered promiscuous mode [ 31.687276][ T3317] veth1_macvtap: entered promiscuous mode [ 31.701508][ T3322] veth0_vlan: entered promiscuous mode [ 31.707922][ T3318] veth0_vlan: entered promiscuous mode [ 31.721491][ T3325] veth0_vlan: entered promiscuous mode [ 31.727140][ T3323] veth0_vlan: entered promiscuous mode [ 31.734790][ T3322] veth1_vlan: entered promiscuous mode [ 31.743154][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.754799][ T3323] veth1_vlan: entered promiscuous mode [ 31.762437][ T3318] veth1_vlan: entered promiscuous mode [ 31.769909][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.781381][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.790112][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.798851][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.807622][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.819722][ T3325] veth1_vlan: entered promiscuous mode [ 31.845282][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.845293][ T29] audit: type=1400 audit(1732399551.631:110): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.FkPLsH/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.847964][ T3318] veth0_macvtap: entered promiscuous mode [ 31.865556][ T29] audit: type=1400 audit(1732399551.641:111): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.886223][ T3325] veth0_macvtap: entered promiscuous mode [ 31.903492][ T29] audit: type=1400 audit(1732399551.641:112): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.FkPLsH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.913349][ T3323] veth0_macvtap: entered promiscuous mode [ 31.934388][ T29] audit: type=1400 audit(1732399551.641:113): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.946025][ T3322] veth0_macvtap: entered promiscuous mode [ 31.961876][ T29] audit: type=1400 audit(1732399551.641:114): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.FkPLsH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.978789][ T3325] veth1_macvtap: entered promiscuous mode [ 31.994265][ T29] audit: type=1400 audit(1732399551.641:115): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.FkPLsH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.008343][ T3323] veth1_macvtap: entered promiscuous mode [ 32.027317][ T29] audit: type=1400 audit(1732399551.641:116): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.038265][ T3318] veth1_macvtap: entered promiscuous mode [ 32.062422][ T29] audit: type=1400 audit(1732399551.701:117): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.068799][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.095691][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.107257][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.117412][ T3322] veth1_macvtap: entered promiscuous mode [ 32.129448][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.131295][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.154506][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.164331][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.174811][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.185355][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.193371][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.203942][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.213809][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.224371][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.234318][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.244865][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.256038][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.264280][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.274834][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.287385][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.294872][ T29] audit: type=1400 audit(1732399552.081:118): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.304944][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.319059][ T29] audit: type=1400 audit(1732399552.081:119): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.329524][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.363420][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.373955][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.383856][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.394395][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.404219][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.414681][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.428463][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.436598][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.447079][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.456965][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.467479][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.477854][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.485266][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.495825][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.505734][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.516248][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.526176][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.536710][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.548274][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.556663][ T3325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.565444][ T3325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.574236][ T3325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.583028][ T3325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.599015][ T3323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.607794][ T3323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.616604][ T3323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.625299][ T3323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.637614][ T3318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.646431][ T3318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.655226][ T3318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.664046][ T3318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.680313][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.690874][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.700760][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.711314][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.721147][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.731594][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.741406][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.751848][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.762446][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.770761][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.779573][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.788317][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.797103][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.904839][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.912168][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.942539][ T3469] loop0: detected capacity change from 0 to 764 [ 32.948524][ T3465] bridge0: entered allmulticast mode [ 32.957652][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.964882][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.983849][ T3468] bridge0: entered allmulticast mode [ 32.986619][ T3469] block device autoloading is deprecated and will be removed. [ 33.002681][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.009794][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.011838][ T3469] syz.0.1: attempt to access beyond end of device [ 33.011838][ T3469] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 33.017101][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.036940][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.065768][ T3465] bridge0: entered promiscuous mode [ 33.075970][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.083063][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.090424][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.097659][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.107206][ T3468] bridge0: entered promiscuous mode [ 33.131604][ T3470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.144727][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.151927][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.161377][ T3479] bridge0: entered allmulticast mode [ 33.182924][ T3468] loop4: detected capacity change from 0 to 1024 [ 33.207181][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.214316][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.215346][ T3470] loop2: detected capacity change from 0 to 1024 [ 33.221715][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.234350][ T3468] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.234993][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.253348][ T3479] bridge0: entered promiscuous mode [ 33.268569][ T3470] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.282011][ T3481] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.290016][ T3468] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.300495][ T3468] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.310152][ T3468] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 33.319177][ T3470] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 33.331486][ T3468] EXT4-fs (loop4): Remounting filesystem read-only [ 33.338447][ T3470] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.349687][ T3470] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 33.349793][ T3468] EXT4-fs (loop4): 1 orphan inode deleted [ 33.375849][ T3470] EXT4-fs (loop2): Remounting filesystem read-only [ 33.389986][ T3470] EXT4-fs (loop2): 1 orphan inode deleted [ 33.397347][ T3468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.410151][ T3468] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 33.411318][ T3470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.429172][ T3470] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 33.436191][ T3470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.444144][ T3468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.454915][ T3481] loop0: detected capacity change from 0 to 1024 [ 33.463786][ T3481] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.479463][ T3481] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.489412][ T3481] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.498382][ T3481] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 33.508930][ T3481] EXT4-fs (loop0): Remounting filesystem read-only [ 33.523540][ T3481] EXT4-fs (loop0): 1 orphan inode deleted [ 33.549044][ T3481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.564195][ T3468] syz.4.5 (3468) used greatest stack depth: 9832 bytes left [ 33.613837][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.621067][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.628772][ T3489] bridge0: left promiscuous mode [ 33.636024][ T3481] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 33.643005][ T3481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.655136][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.662226][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.669573][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.676673][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.684188][ T3489] bridge0: entered promiscuous mode [ 33.693210][ T3489] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.757276][ T3489] loop4: detected capacity change from 0 to 1024 [ 33.766312][ T3489] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.777677][ T3489] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.788208][ T3489] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.799273][ T3489] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 33.809988][ T3489] EXT4-fs (loop4): Remounting filesystem read-only [ 33.821585][ T3489] EXT4-fs (loop4): 1 orphan inode deleted [ 33.840602][ T3481] syz.0.7 (3481) used greatest stack depth: 9744 bytes left [ 33.856733][ T3489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.922858][ T3489] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 33.931653][ T3489] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.988866][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.996099][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.008886][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.010058][ T3495] bridge0: entered allmulticast mode [ 34.017499][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.121837][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.129004][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.136380][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.143532][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.172764][ T3495] bridge0: entered promiscuous mode [ 34.205128][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.212308][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.221758][ T3500] bridge0: left promiscuous mode [ 34.329947][ T3501] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.418961][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.426094][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.433574][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.440691][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.453459][ T3502] loop1: detected capacity change from 0 to 1024 [ 34.463744][ T3502] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.483887][ T3502] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 34.502048][ T3502] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.510232][ T3500] bridge0: entered promiscuous mode [ 34.517489][ T3502] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 34.579276][ T3503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.632821][ T3502] EXT4-fs (loop1): Remounting filesystem read-only [ 34.692726][ T3502] EXT4-fs (loop1): 1 orphan inode deleted [ 34.732118][ T3507] loop4: detected capacity change from 0 to 1024 [ 34.969170][ T3507] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.983808][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.004939][ T3502] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 35.026790][ T3502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.045048][ T3507] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 35.064906][ T3507] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.072310][ T3507] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 35.083458][ T3507] EXT4-fs (loop4): Remounting filesystem read-only [ 35.090300][ T3507] EXT4-fs (loop4): 1 orphan inode deleted [ 35.101950][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.144723][ T3507] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 35.162310][ T3516] loop0: detected capacity change from 0 to 1024 [ 35.170140][ T3507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.212963][ T3502] syz.1.11 (3502) used greatest stack depth: 9656 bytes left [ 35.271400][ T3516] ip6gre1: entered allmulticast mode [ 35.307248][ T3507] syz.4.12 (3507) used greatest stack depth: 9648 bytes left [ 35.339089][ T3520] loop1: detected capacity change from 0 to 764 [ 35.365387][ T3520] syz.1.17: attempt to access beyond end of device [ 35.365387][ T3520] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 35.418371][ T3524] lo speed is unknown, defaulting to 1000 [ 35.426089][ T3524] lo speed is unknown, defaulting to 1000 [ 35.432047][ T3524] lo speed is unknown, defaulting to 1000 [ 35.440474][ T3524] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.477092][ T3524] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 35.509421][ T3524] lo speed is unknown, defaulting to 1000 [ 35.521866][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.529175][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.606881][ T3530] loop1: detected capacity change from 0 to 512 [ 35.634873][ T3527] bridge0: left promiscuous mode [ 35.672393][ T3530] ======================================================= [ 35.672393][ T3530] WARNING: The mand mount option has been deprecated and [ 35.672393][ T3530] and is ignored by this kernel. Remove the mand [ 35.672393][ T3530] option from the mount to silence this warning. [ 35.672393][ T3530] ======================================================= [ 35.788308][ T3527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.810118][ T3532] bridge0: entered promiscuous mode [ 35.815461][ T3532] bridge0: entered allmulticast mode [ 35.862586][ T3537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.909309][ T3538] loop0: detected capacity change from 0 to 1024 [ 35.920048][ C1] hrtimer: interrupt took 68180 ns [ 35.933259][ T3524] lo speed is unknown, defaulting to 1000 [ 35.990233][ T3538] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.024252][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.031355][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.038684][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.045895][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.054234][ T3533] bridge0: entered promiscuous mode [ 36.061385][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.064593][ T3539] netlink: 'syz.2.22': attribute type 3 has an invalid length. [ 36.068652][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.076409][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 36.083499][ T3534] bridge0: left promiscuous mode [ 36.096275][ T3530] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.19: corrupted xattr block 95: invalid header [ 36.106968][ T3524] lo speed is unknown, defaulting to 1000 [ 36.112332][ T3537] loop3: detected capacity change from 0 to 1024 [ 36.117090][ T3536] lo speed is unknown, defaulting to 1000 [ 36.123748][ T3530] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.130542][ T3532] lo speed is unknown, defaulting to 1000 [ 36.146418][ T3537] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.148610][ T3527] lo speed is unknown, defaulting to 1000 [ 36.165084][ T3538] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 36.171683][ T3530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.19: bg 0: block 7: invalid block bitmap [ 36.178602][ T3538] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.202198][ T3537] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 36.214728][ T3538] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 36.224535][ T3537] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.233720][ T3537] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 36.243456][ T3537] EXT4-fs (loop3): Remounting filesystem read-only [ 36.250268][ T3537] EXT4-fs (loop3): 1 orphan inode deleted [ 36.257009][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.268974][ T3537] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 36.271806][ T3538] EXT4-fs (loop0): Remounting filesystem read-only [ 36.276012][ T3537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.293498][ T3530] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 36.312174][ T3538] EXT4-fs (loop0): 1 orphan inode deleted [ 36.320437][ T3530] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.19: corrupted xattr block 95: invalid header [ 36.335283][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.353392][ T3530] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 36.364329][ T3530] EXT4-fs (loop1): 1 orphan inode deleted [ 36.365655][ T3524] lo speed is unknown, defaulting to 1000 [ 36.371468][ T3530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.396086][ T3538] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 36.407059][ T3524] lo speed is unknown, defaulting to 1000 [ 36.423363][ T3524] lo speed is unknown, defaulting to 1000 [ 36.426066][ T3538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.444976][ T3549] siw: device registration error -23 [ 36.450434][ T3551] loop4: detected capacity change from 0 to 512 [ 36.467271][ T3551] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.24: corrupted xattr block 95: invalid header [ 36.468938][ T3553] loop2: detected capacity change from 0 to 512 [ 36.486279][ T3551] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.24: bg 0: block 7: invalid block bitmap [ 36.500136][ T3553] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 36.508604][ T3551] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 36.533516][ T3551] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.24: corrupted xattr block 95: invalid header [ 36.547848][ T3551] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 36.559389][ T3556] loop3: detected capacity change from 0 to 512 [ 36.562419][ T3551] EXT4-fs (loop4): 1 orphan inode deleted [ 36.571649][ T3556] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.580471][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.580770][ T3556] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 36.646222][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.678690][ T3556] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 36.709467][ T3556] System zones: 0-2, 18-18, 34-34 [ 36.720157][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 36.723165][ T3556] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.741902][ T3556] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.763036][ T3556] EXT4-fs (loop3): 1 truncate cleaned up [ 36.771758][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.823769][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.831097][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.848131][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 36.848147][ T29] audit: type=1326 audit(1732399556.641:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9891bae819 code=0x7ffc0000 [ 36.850415][ T3567] bridge0: left promiscuous mode [ 36.854652][ T29] audit: type=1326 audit(1732399556.641:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9891bae819 code=0x7ffc0000 [ 36.906028][ T29] audit: type=1326 audit(1732399556.641:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9891bae819 code=0x7ffc0000 [ 36.933344][ T29] audit: type=1326 audit(1732399556.671:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9891ba57e7 code=0x7ffc0000 [ 36.956802][ T29] audit: type=1326 audit(1732399556.671:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9891b4a1a9 code=0x7ffc0000 [ 36.980209][ T29] audit: type=1326 audit(1732399556.671:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9891bae819 code=0x7ffc0000 [ 37.003508][ T29] audit: type=1326 audit(1732399556.681:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9891ba57e7 code=0x7ffc0000 [ 37.027208][ T29] audit: type=1326 audit(1732399556.681:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9891b4a1a9 code=0x7ffc0000 [ 37.050606][ T29] audit: type=1326 audit(1732399556.681:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9891bae819 code=0x7ffc0000 [ 37.073784][ T29] audit: type=1400 audit(1732399556.691:426): avc: denied { mounton } for pid=3555 comm="syz.3.26" path="/2/file0/file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.074013][ T3577] loop0: detected capacity change from 0 to 1024 [ 37.106540][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.113679][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.121121][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.128299][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.130924][ T3579] loop2: detected capacity change from 0 to 1024 [ 37.137531][ T3577] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.152662][ T3577] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.161343][ T3577] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.168219][ T3567] bridge0: entered promiscuous mode [ 37.173822][ T3579] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.190590][ T3579] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 37.198827][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.200075][ T3579] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.206183][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.216690][ T3577] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 37.220595][ T3573] bridge0: left promiscuous mode [ 37.231039][ T3577] EXT4-fs (loop0): Remounting filesystem read-only [ 37.237060][ T3571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 37.240763][ T3577] EXT4-fs (loop0): 1 orphan inode deleted [ 37.251265][ T3579] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 37.256891][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.267937][ T3579] EXT4-fs (loop2): Remounting filesystem read-only [ 37.272199][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.279462][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.286020][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.297446][ T3579] EXT4-fs (loop2): 1 orphan inode deleted [ 37.301846][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.315151][ T3556] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 37.316939][ T3574] bridge0: entered promiscuous mode [ 37.334164][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.353714][ T3579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.362835][ T3577] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 37.386939][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.396888][ T3577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.399387][ T3579] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 37.416696][ T3575] lo speed is unknown, defaulting to 1000 [ 37.423427][ T3579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.456923][ T3578] lo speed is unknown, defaulting to 1000 [ 37.467898][ T3585] FAULT_INJECTION: forcing a failure. [ 37.467898][ T3585] name failslab, interval 1, probability 0, space 0, times 1 [ 37.480596][ T3585] CPU: 0 UID: 0 PID: 3585 Comm: syz.3.35 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 37.490847][ T3585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.500923][ T3585] Call Trace: [ 37.504352][ T3585] [ 37.507294][ T3585] dump_stack_lvl+0xf2/0x150 [ 37.511933][ T3585] dump_stack+0x15/0x20 [ 37.516205][ T3585] should_fail_ex+0x223/0x230 [ 37.520922][ T3585] ? __d_alloc+0x8f/0x340 [ 37.525401][ T3585] should_failslab+0x8f/0xb0 [ 37.530092][ T3585] __kmalloc_noprof+0xa5/0x370 [ 37.534898][ T3585] __d_alloc+0x8f/0x340 [ 37.539105][ T3585] d_alloc+0x2e/0x100 [ 37.543126][ T3585] lookup_one_qstr_excl+0x97/0x1a0 [ 37.548316][ T3585] filename_create+0x14d/0x2b0 [ 37.553130][ T3585] do_mknodat+0x126/0x420 [ 37.557520][ T3585] __x64_sys_mknod+0x51/0x60 [ 37.562219][ T3585] x64_sys_call+0x16be/0x2dc0 [ 37.566966][ T3585] do_syscall_64+0xc9/0x1c0 [ 37.571586][ T3585] ? clear_bhb_loop+0x55/0xb0 [ 37.576370][ T3585] ? clear_bhb_loop+0x55/0xb0 [ 37.581129][ T3585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.587178][ T3585] RIP: 0033:0x7f92baaee819 [ 37.591599][ T3585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.611274][ T3585] RSP: 002b:00007f92b9161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 37.619781][ T3585] RAX: ffffffffffffffda RBX: 00007f92baca5fa0 RCX: 00007f92baaee819 [ 37.627751][ T3585] RDX: 0000000000000707 RSI: 0000000000000000 RDI: 0000000020000000 [ 37.635772][ T3585] RBP: 00007f92b9161090 R08: 0000000000000000 R09: 0000000000000000 [ 37.643811][ T3585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.651786][ T3585] R13: 0000000000000000 R14: 00007f92baca5fa0 R15: 00007ffefd9102d8 [ 37.659813][ T3585] [ 37.684725][ T3587] dummy0: entered promiscuous mode [ 37.691611][ T3587] dummy0: left promiscuous mode [ 37.755063][ T3591] siw: device registration error -23 [ 37.763344][ T3593] siw: device registration error -23 [ 37.776851][ T3591] loop2: detected capacity change from 0 to 512 [ 37.790094][ T3591] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.38: corrupted xattr block 95: invalid header [ 37.810067][ T3593] loop3: detected capacity change from 0 to 512 [ 37.831126][ T3595] wireguard0: entered promiscuous mode [ 37.831765][ T3593] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.39: corrupted xattr block 95: invalid header [ 37.836791][ T3595] wireguard0: entered allmulticast mode [ 37.855899][ T3593] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.39: bg 0: block 7: invalid block bitmap [ 37.856395][ T3593] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.877196][ T3593] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.39: corrupted xattr block 95: invalid header [ 37.879624][ T3591] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.38: bg 0: block 7: invalid block bitmap [ 37.894818][ T3593] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 37.903980][ T3591] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.912350][ T3593] EXT4-fs (loop3): 1 orphan inode deleted [ 37.922704][ T3591] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.38: corrupted xattr block 95: invalid header [ 37.927143][ T3593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.941635][ T3591] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 37.962174][ T3591] EXT4-fs (loop2): 1 orphan inode deleted [ 37.969638][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.984271][ T3590] lo speed is unknown, defaulting to 1000 [ 38.073536][ T3607] FAULT_INJECTION: forcing a failure. [ 38.073536][ T3607] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.086694][ T3607] CPU: 1 UID: 0 PID: 3607 Comm: syz.4.42 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 38.097158][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.107230][ T3607] Call Trace: [ 38.110512][ T3607] [ 38.113463][ T3607] dump_stack_lvl+0xf2/0x150 [ 38.118117][ T3607] dump_stack+0x15/0x20 [ 38.122341][ T3607] should_fail_ex+0x223/0x230 [ 38.127092][ T3607] should_fail+0xb/0x10 [ 38.131312][ T3607] should_fail_usercopy+0x1a/0x20 [ 38.136356][ T3607] _copy_from_user+0x1e/0xb0 [ 38.140965][ T3607] copy_msghdr_from_user+0x54/0x2a0 [ 38.146191][ T3607] ? __fget_files+0x17c/0x1c0 [ 38.150877][ T3607] __sys_sendmsg+0x13e/0x230 [ 38.155572][ T3607] __x64_sys_sendmsg+0x46/0x50 [ 38.160438][ T3607] x64_sys_call+0x2734/0x2dc0 [ 38.165247][ T3607] do_syscall_64+0xc9/0x1c0 [ 38.169767][ T3607] ? clear_bhb_loop+0x55/0xb0 [ 38.174461][ T3607] ? clear_bhb_loop+0x55/0xb0 [ 38.179217][ T3607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.185308][ T3607] RIP: 0033:0x7f7f6365e819 [ 38.189767][ T3607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.209394][ T3607] RSP: 002b:00007f7f61cd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.217847][ T3607] RAX: ffffffffffffffda RBX: 00007f7f63815fa0 RCX: 00007f7f6365e819 [ 38.225837][ T3607] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 38.233821][ T3607] RBP: 00007f7f61cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 38.241879][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.249861][ T3607] R13: 0000000000000000 R14: 00007f7f63815fa0 R15: 00007fff1a8b0ab8 [ 38.257853][ T3607] [ 38.304519][ T3609] loop4: detected capacity change from 0 to 512 [ 38.311323][ T3611] wireguard0: entered promiscuous mode [ 38.317163][ T3611] wireguard0: entered allmulticast mode [ 38.318997][ T3609] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.331950][ T3609] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 38.342363][ T3609] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 38.350429][ T3609] System zones: 0-2, 18-18, 34-34 [ 38.355740][ T3609] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.362458][ T3609] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 38.378110][ T3609] EXT4-fs (loop4): 1 truncate cleaned up [ 38.384223][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.411716][ T3609] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 38.433286][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.517269][ T3615] bridge_slave_0: left allmulticast mode [ 38.523055][ T3615] bridge_slave_0: left promiscuous mode [ 38.529113][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.538231][ T3615] bridge_slave_1: left allmulticast mode [ 38.544053][ T3615] bridge_slave_1: left promiscuous mode [ 38.549961][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.557249][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 38.568389][ T3615] bond0: (slave bond_slave_0): Releasing backup interface [ 38.578585][ T3615] bond0: (slave bond_slave_1): Releasing backup interface [ 38.592290][ T3615] team0: Port device team_slave_0 removed [ 38.600619][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.612161][ T3615] team0: Port device team_slave_1 removed [ 38.618975][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.626568][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.636101][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.642366][ T3622] loop2: detected capacity change from 0 to 764 [ 38.649126][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.659564][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.678135][ T3622] syz.2.47: attempt to access beyond end of device [ 38.678135][ T3622] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 38.745027][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.752248][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.760835][ T3631] bridge0: left promiscuous mode [ 38.775084][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.782239][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.789855][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.796941][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.804482][ T3631] bridge0: entered promiscuous mode [ 38.830964][ T3631] lo speed is unknown, defaulting to 1000 [ 38.883132][ T3631] loop2: detected capacity change from 0 to 1024 [ 38.892487][ T3631] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.923454][ T3631] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.931608][ T3631] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.939046][ T3631] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 38.949145][ T3631] EXT4-fs (loop2): Remounting filesystem read-only [ 38.949709][ T3647] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.958550][ T3631] EXT4-fs (loop2): 1 orphan inode deleted [ 38.972354][ T3631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.984721][ T3631] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 38.991605][ T3631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.012800][ T3647] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.060498][ T3647] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.076578][ T3652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.128675][ T3647] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.189843][ T3652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.232593][ T3647] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.244548][ T3647] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.255853][ T3647] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.267554][ T3652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.281126][ T3647] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.308943][ T3652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.343805][ T3655] loop1: detected capacity change from 0 to 1024 [ 39.376883][ T3657] loop4: detected capacity change from 0 to 764 [ 39.377574][ T3652] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.398865][ T3652] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.408512][ T3657] syz.4.60: attempt to access beyond end of device [ 39.408512][ T3657] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 39.426144][ T3652] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.446075][ T3652] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460077][ T3662] FAULT_INJECTION: forcing a failure. [ 39.460077][ T3662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.473330][ T3662] CPU: 0 UID: 0 PID: 3662 Comm: syz.1.62 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 39.483532][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.493709][ T3662] Call Trace: [ 39.497002][ T3662] [ 39.499972][ T3662] dump_stack_lvl+0xf2/0x150 [ 39.504651][ T3662] dump_stack+0x15/0x20 [ 39.508851][ T3662] should_fail_ex+0x223/0x230 [ 39.513549][ T3662] should_fail+0xb/0x10 [ 39.517747][ T3662] should_fail_usercopy+0x1a/0x20 [ 39.522807][ T3662] _copy_from_user+0x1e/0xb0 [ 39.527407][ T3662] copy_msghdr_from_user+0x54/0x2a0 [ 39.532700][ T3662] ? __fget_files+0x17c/0x1c0 [ 39.537401][ T3662] __sys_sendmsg+0x13e/0x230 [ 39.542016][ T3662] __x64_sys_sendmsg+0x46/0x50 [ 39.546793][ T3662] x64_sys_call+0x2734/0x2dc0 [ 39.551553][ T3662] do_syscall_64+0xc9/0x1c0 [ 39.556199][ T3662] ? clear_bhb_loop+0x55/0xb0 [ 39.560927][ T3662] ? clear_bhb_loop+0x55/0xb0 [ 39.565626][ T3662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.572201][ T3662] RIP: 0033:0x7f9891bae819 [ 39.576621][ T3662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.596267][ T3662] RSP: 002b:00007f9890227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.604689][ T3662] RAX: ffffffffffffffda RBX: 00007f9891d65fa0 RCX: 00007f9891bae819 [ 39.612676][ T3662] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 39.620737][ T3662] RBP: 00007f9890227090 R08: 0000000000000000 R09: 0000000000000000 [ 39.628775][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.636794][ T3662] R13: 0000000000000000 R14: 00007f9891d65fa0 R15: 00007fff1f586a68 [ 39.644819][ T3662] [ 39.722873][ T3671] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.730128][ T3671] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.737304][ T3671] bridge0: left promiscuous mode [ 39.748806][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.751410][ T3673] loop1: detected capacity change from 0 to 512 [ 39.755999][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.766911][ T3676] loop3: detected capacity change from 0 to 512 [ 39.769619][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.782793][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.794218][ T3671] bridge0: entered promiscuous mode [ 39.802407][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.809594][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.812847][ T3673] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.67: corrupted xattr block 95: invalid header [ 39.817066][ T3675] bridge0: left promiscuous mode [ 39.832692][ T3673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.67: bg 0: block 7: invalid block bitmap [ 39.838442][ T3678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.849041][ T3673] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.859832][ T3676] EXT4-fs (loop3): too many log groups per flexible block group [ 39.866629][ T3673] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.67: corrupted xattr block 95: invalid header [ 39.873803][ T3676] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 39.894501][ T3673] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 39.903918][ T3673] EXT4-fs (loop1): 1 orphan inode deleted [ 39.904353][ T3675] lo speed is unknown, defaulting to 1000 [ 39.926125][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.940816][ T3671] lo speed is unknown, defaulting to 1000 [ 39.946922][ T3676] EXT4-fs (loop3): mount failed [ 39.950826][ T3675] loop2: detected capacity change from 0 to 1024 [ 39.981404][ T3675] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.983883][ T3678] loop4: detected capacity change from 0 to 1024 [ 39.992510][ T3675] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.006501][ T3675] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.014646][ T3675] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 40.025406][ T3675] EXT4-fs (loop2): Remounting filesystem read-only [ 40.028320][ T3678] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.037826][ T3675] EXT4-fs (loop2): 1 orphan inode deleted [ 40.044249][ T3678] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.050424][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.056026][ T3678] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.069414][ T3675] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 40.074653][ T3678] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 40.081459][ T3675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.091553][ T3678] EXT4-fs (loop4): Remounting filesystem read-only [ 40.106308][ T3678] EXT4-fs (loop4): 1 orphan inode deleted [ 40.112780][ T3678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.124871][ T3678] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 40.131943][ T3678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.184875][ T3688] ================================================================== [ 40.193006][ T3688] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 40.200575][ T3688] [ 40.202901][ T3688] write to 0xffff888103324d00 of 8 bytes by task 3687 on cpu 0: [ 40.210537][ T3688] mas_replace_node+0x1b8/0x430 [ 40.215399][ T3688] mas_wr_store_entry+0x1fbf/0x2d10 [ 40.220605][ T3688] mas_store_prealloc+0x6bf/0x960 [ 40.225632][ T3688] vma_complete+0x3a7/0x760 [ 40.230148][ T3688] __split_vma+0x5d6/0x6a0 [ 40.234578][ T3688] vma_modify+0xd3/0x1e0 [ 40.238834][ T3688] vma_modify_flags+0xf1/0x120 [ 40.243611][ T3688] mprotect_fixup+0x31a/0x5e0 [ 40.248301][ T3688] do_mprotect_pkey+0x653/0x960 [ 40.253163][ T3688] __x64_sys_mprotect+0x48/0x60 [ 40.258020][ T3688] x64_sys_call+0x2770/0x2dc0 [ 40.262706][ T3688] do_syscall_64+0xc9/0x1c0 [ 40.267233][ T3688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.273152][ T3688] [ 40.275479][ T3688] read to 0xffff888103324d00 of 8 bytes by task 3688 on cpu 1: [ 40.283029][ T3688] mtree_range_walk+0x33d/0x460 [ 40.287892][ T3688] mas_walk+0x16e/0x320 [ 40.292057][ T3688] lock_vma_under_rcu+0x95/0x260 [ 40.297021][ T3688] exc_page_fault+0x150/0x650 [ 40.301714][ T3688] asm_exc_page_fault+0x26/0x30 [ 40.306581][ T3688] [ 40.308902][ T3688] value changed: 0xffff888103324a06 -> 0xffff888103324d00 [ 40.316008][ T3688] [ 40.318328][ T3688] Reported by Kernel Concurrency Sanitizer on: [ 40.324476][ T3688] CPU: 1 UID: 0 PID: 3688 Comm: syz.4.70 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 40.334648][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.344798][ T3688] ================================================================== [ 40.356363][ T3691] Zero length message leads to an empty skb [ 40.563079][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.