last executing test programs: 2.225731741s ago: executing program 1 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r1, 0x0, 0x0) 2.130145563s ago: executing program 1 (id=226): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0xb, 0x80, 0xffffffff, 0x17a}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) lseek(r1, 0x6, 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.456216562s ago: executing program 0 (id=230): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 1.455941812s ago: executing program 3 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xb7}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r2, 0x0, 0x0) 1.455640232s ago: executing program 3 (id=232): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r5, 0x25, 0x2}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.425591642s ago: executing program 4 (id=233): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) mq_unlink(0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_process_wait\x00', r1}, 0x18) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc0}, {}, {0x0, 0x20000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1.345095713s ago: executing program 4 (id=236): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.321731113s ago: executing program 3 (id=238): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b4"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xfffffffd, 0x800000, 0x0, 0x0, 0x5}, {0xffffffff}, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x1337}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x8510}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x1}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x2200}, {}, {}, {0x5}, {0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0xf4a}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x1, 0x0, 0x4, 0x9}, {0xfffffffd, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x80000000}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x1, 0xfff}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x9}, {0x6}, {0x7f}, {0x0, 0x2}, {}, {0x1fd2, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xb014}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x7dff800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x4}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x1000500, &(0x7f00000012c0)="b050842774f97cf76e66b06658d3e99da3a7d5f75cfcbec877979c9b4866692a16145d5f658aded13114bd0b09a81ef99f4bd86e0cbee6c0bbc8d3ec87a6e0a84cae3cf42133f2b4a01afbba209ba44c5aa60845b5a61332a120d7442bf11ca1b769ee2365cea1d9", 0x68, &(0x7f00000013c0), 0x0, &(0x7f0000001440)="52800d6ef30698b85f3b6c051f17a130a417cb19f902461c65b76faf47a05b290ffb3930d704e014dbd68da8450e695548b40d6b90639c7a675a07e588ceea71111157e4fe74427033e4a2d9c819f2166aa2b4267fe1cc3050ad4f0af87ec995ffd03a79895cb25a943c1a295aa26772e3220b48ad5ae63210fca42dc132c271033d096efd7e80f9e3e4da") r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r9], 0x20}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x714f, 0x0) 1.244638714s ago: executing program 4 (id=239): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nobarrier}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800000000000068}}, {@debug}, {@debug}, {@grpquota}], [{@permit_directio}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x8, 0x1, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x0, [{@multicast2, 0xcd}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x23, 0xdf, [@loopback, @loopback, @empty, @multicast1, @multicast1, @broadcast, @remote, @empty]}, @rr={0x7, 0xf, 0x41, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x20, 0x0}, @broadcast]}, @lsrr={0x83, 0x1f, 0x84, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @local]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="187c000004001cfe000000584b34f44ee377bbb3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000020000000000000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x1000, &(0x7f0000000b40)=""/4096, 0x40f00, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c40)=[{0x4, 0x3, 0x10, 0x6}, {0x0, 0x3, 0x0, 0xa}], 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.244284104s ago: executing program 0 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.190995785s ago: executing program 0 (id=242): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000240)='./bus\x00', 0x8842, &(0x7f0000000000), 0x1, 0x4e6, &(0x7f0000000f40)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') stat(&(0x7f0000000b80)='./bus\x00', &(0x7f00000014c0)) 1.084249586s ago: executing program 0 (id=243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00']}, 0x178) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r5, 0x29, 0x81, 0x2, 0x1, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x40, 0x1, 0xfffffff8, 0x9}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000300)=0x7, 0x8) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xffa8) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 922.305988ms ago: executing program 1 (id=245): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x7]}, 0x8, 0xc0800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_size', 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x2e, &(0x7f0000002e00), &(0x7f0000001000), 0xffffffffffffffc6, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 921.507208ms ago: executing program 2 (id=246): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) stat(&(0x7f0000000b80)='./bus\x00', &(0x7f00000014c0)) 899.838789ms ago: executing program 0 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000380)={0x7d, {{0x29, 0x0, 0x2000000, @empty, 0x8000005}}}, 0x88) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{}]}) socket$packet(0x11, 0xa, 0x300) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6(0xa, 0x803, 0x6) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mm_page_free\x00', r6, 0x0, 0x1000}, 0x18) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) (async) read$char_usb(r7, &(0x7f00000011c0)=""/4096, 0x1000) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) close(0xffffffffffffffff) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000100)={0x9, 0x6, 0x3, 0xffffffffffff027d, 0x80000000, 0x5a7, 0xf8, 0x3}, &(0x7f0000000140)={0x0, 0x6, 0x7, 0x8, 0x4, 0x5, 0x5, 0x3}, &(0x7f0000000180)={0x0, 0x80000001, 0xb4, 0x5, 0xffffffff, 0x3bf, 0x7, 0xcf07}, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x7fffffff]}, 0x8}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x300, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, 0x0) 889.093719ms ago: executing program 4 (id=248): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r5, 0x25, 0x2}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000000)="0000450b5910620ee157d83ad4", 0xd, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 860.377929ms ago: executing program 2 (id=249): socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10b, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000280)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) close(r1) readahead(0xffffffffffffffff, 0xffffffff, 0xfffffffffffffffb) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 835.775879ms ago: executing program 2 (id=250): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 803.24817ms ago: executing program 0 (id=251): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62042, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0xa800}], 0x1, 0x5402, 0x0, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f00000004c0)=""/190, 0xbe}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00080000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYBLOB="0046ff7d23a9df1c8cdd0b165500e4295a9cd092caf8e23de333ab86d08fb34993e4c05f556452e689d2082262569cd12aac6c2253d649d5cd917bf92b017d999da23e28a02cd11c9d201c2d5631e5ed9aabf0c8da8d4e9fd140817c38b7939c3e54b0a171a8b9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f00000000c0)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000080)={r11, 0x3, r9, 0x5}) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000800031401ff41bd06000000000020a5dd7873697700140033006c6f0000000000000000000000000000b283588ad208dfad0dfb2f2e730ae8ea229eaed115ef7537f26ac6e5048f1cac487f1df638cfe45357ebc716759e4095a6b81ef7a0e2a6ecbdc76c04844ee6e7c46b00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r12) r13 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$selinux_access(r13, &(0x7f0000000680)={'system_u:object_r:dhcp_etc_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1}, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) socket$inet_udplite(0x2, 0x2, 0x88) 802.63153ms ago: executing program 1 (id=252): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001ec0)={{r0}, "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"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) mq_unlink(&(0x7f0000000340)='\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000440)=0x81, 0x0, 0x4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x460b1}, 0x20044010) write$sndseq(r3, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="19", 0x1, 0xc0, &(0x7f00000000c0)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @local}, 0x14) 802.20843ms ago: executing program 4 (id=253): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x3}, {0x4, 0x3, 0x42}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x8a3, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_io_uring_setup(0x1216, &(0x7f0000000340)={0x0, 0x5a3f, 0x200, 0x0, 0xdb, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r5, &(0x7f00000088c0)=""/42, 0x2a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 770.07664ms ago: executing program 1 (id=254): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 662.836982ms ago: executing program 1 (id=255): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0xb, 0x80, 0xffffffff, 0x17a}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) lseek(r1, 0x6, 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 618.097852ms ago: executing program 2 (id=256): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 2) 370.533676ms ago: executing program 4 (id=257): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x10000, @local, 0x2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x800, @local, 0x562}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0xa, @private2}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80000000}, @in6={0xa, 0x4e22, 0x94, @mcast2}], 0xbc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a49bff2, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) ftruncate(r3, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80020001}, 0x18) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 369.829576ms ago: executing program 3 (id=258): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 254.839097ms ago: executing program 2 (id=259): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nobarrier}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800000000000068}}, {@debug}, {@debug}, {@grpquota}], [{@permit_directio}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x8, 0x1, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x0, [{@multicast2, 0xcd}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x23, 0xdf, [@loopback, @loopback, @empty, @multicast1, @multicast1, @broadcast, @remote, @empty]}, @rr={0x7, 0xf, 0x41, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x20, 0x0}, @broadcast]}, @lsrr={0x83, 0x1f, 0x84, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @local]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="187c000004001cfe000000584b34f44ee377bbb3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000020000000000000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x1000, &(0x7f0000000b40)=""/4096, 0x40f00, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c40)=[{0x4, 0x3, 0x10, 0x6}, {0x0, 0x3, 0x0, 0xa}], 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 237.930457ms ago: executing program 3 (id=260): timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='nv\x00', 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000500120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 182.979398ms ago: executing program 3 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="15195063f752deaa021d8679a773c07814488fe3f39294ff0ad943d0b020c8e2808eba813d7816a2420f006686c4e59e0b78aba54bb2418880667ccaafe05259c293150fa820b030720512673ce360f07e8da7010bdaf15a2494c65061e1b964e6a317f36fe6f75fbb43d0bca93119d8395cc76d58641670ef8fc426585db47d84fd20e9b04432be2198db2dddd918e3702b4defb18aa4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r8, 0x3}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) 0s ago: executing program 2 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000002000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 26.091295][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 26.091313][ T29] audit: type=1400 audit(1748781988.959:57): avc: denied { transition } for pid=3296 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.095771][ T29] audit: type=1400 audit(1748781988.959:58): avc: denied { noatsecure } for pid=3296 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.098621][ T29] audit: type=1400 audit(1748781988.959:59): avc: denied { write } for pid=3296 comm="sh" path="pipe:[1579]" dev="pipefs" ino=1579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 26.101849][ T29] audit: type=1400 audit(1748781988.959:60): avc: denied { rlimitinh } for pid=3296 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.104621][ T29] audit: type=1400 audit(1748781988.959:61): avc: denied { siginh } for pid=3296 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 34.305172][ T29] audit: type=1400 audit(1748781997.169:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.306375][ T3308] cgroup: Unknown subsys name 'net' [ 34.327943][ T29] audit: type=1400 audit(1748781997.169:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.355462][ T29] audit: type=1400 audit(1748781997.199:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.468592][ T3308] cgroup: Unknown subsys name 'cpuset' [ 34.474880][ T3308] cgroup: Unknown subsys name 'rlimit' [ 34.588236][ T29] audit: type=1400 audit(1748781997.459:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.616228][ T29] audit: type=1400 audit(1748781997.459:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.624766][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.636804][ T29] audit: type=1400 audit(1748781997.459:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.666067][ T29] audit: type=1400 audit(1748781997.459:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.686856][ T29] audit: type=1400 audit(1748781997.459:69): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.712099][ T29] audit: type=1400 audit(1748781997.459:70): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.735652][ T29] audit: type=1400 audit(1748781997.519:71): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.772577][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.083913][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.199511][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.253947][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.261270][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.268720][ T3318] bridge_slave_0: entered allmulticast mode [ 36.275119][ T3318] bridge_slave_0: entered promiscuous mode [ 36.290963][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.298186][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.307189][ T3318] bridge_slave_1: entered allmulticast mode [ 36.313773][ T3318] bridge_slave_1: entered promiscuous mode [ 36.349760][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 36.360256][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.414026][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.434005][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.442133][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.450735][ T3322] bridge_slave_0: entered allmulticast mode [ 36.458848][ T3322] bridge_slave_0: entered promiscuous mode [ 36.469794][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.490605][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.533370][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.540671][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.548160][ T3322] bridge_slave_1: entered allmulticast mode [ 36.554704][ T3322] bridge_slave_1: entered promiscuous mode [ 36.601633][ T3318] team0: Port device team_slave_0 added [ 36.633999][ T3318] team0: Port device team_slave_1 added [ 36.664840][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.714221][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.723968][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.731318][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.738797][ T3320] bridge_slave_0: entered allmulticast mode [ 36.745295][ T3320] bridge_slave_0: entered promiscuous mode [ 36.758616][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.765639][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.792092][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.818947][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.826328][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.833978][ T3320] bridge_slave_1: entered allmulticast mode [ 36.841859][ T3320] bridge_slave_1: entered promiscuous mode [ 36.848589][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.855753][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.863969][ T3331] bridge_slave_0: entered allmulticast mode [ 36.871213][ T3331] bridge_slave_0: entered promiscuous mode [ 36.879027][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.886677][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.894153][ T3331] bridge_slave_1: entered allmulticast mode [ 36.901212][ T3331] bridge_slave_1: entered promiscuous mode [ 36.907822][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.914782][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.940755][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.992165][ T3322] team0: Port device team_slave_0 added [ 37.016810][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.024017][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.032825][ T3324] bridge_slave_0: entered allmulticast mode [ 37.039903][ T3324] bridge_slave_0: entered promiscuous mode [ 37.048332][ T3322] team0: Port device team_slave_1 added [ 37.054440][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.062139][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.069541][ T3324] bridge_slave_1: entered allmulticast mode [ 37.075982][ T3324] bridge_slave_1: entered promiscuous mode [ 37.083588][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.093903][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.105583][ T3318] hsr_slave_0: entered promiscuous mode [ 37.111737][ T3318] hsr_slave_1: entered promiscuous mode [ 37.139353][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.149721][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.164924][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.171985][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.197957][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.225394][ T3331] team0: Port device team_slave_0 added [ 37.236573][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.243591][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.269722][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.281774][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.294167][ T3331] team0: Port device team_slave_1 added [ 37.305741][ T3320] team0: Port device team_slave_0 added [ 37.312843][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.329460][ T3320] team0: Port device team_slave_1 added [ 37.370812][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.377910][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.403956][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.421741][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.428745][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.454719][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.472803][ T3322] hsr_slave_0: entered promiscuous mode [ 37.478861][ T3322] hsr_slave_1: entered promiscuous mode [ 37.484744][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.492537][ T3322] Cannot create hsr debugfs directory [ 37.499052][ T3324] team0: Port device team_slave_0 added [ 37.505342][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.512406][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.538844][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.549757][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.556714][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.582774][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.605065][ T3324] team0: Port device team_slave_1 added [ 37.636183][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.643450][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.669620][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.696271][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.703316][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.729484][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.749718][ T3320] hsr_slave_0: entered promiscuous mode [ 37.755723][ T3320] hsr_slave_1: entered promiscuous mode [ 37.761896][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.769488][ T3320] Cannot create hsr debugfs directory [ 37.803849][ T3331] hsr_slave_0: entered promiscuous mode [ 37.809967][ T3331] hsr_slave_1: entered promiscuous mode [ 37.815927][ T3331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.823549][ T3331] Cannot create hsr debugfs directory [ 37.872645][ T3324] hsr_slave_0: entered promiscuous mode [ 37.878832][ T3324] hsr_slave_1: entered promiscuous mode [ 37.884671][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.892551][ T3324] Cannot create hsr debugfs directory [ 37.999412][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.008395][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.031713][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.042315][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.075609][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.085569][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.094859][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.109161][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.139542][ T3331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.148809][ T3331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.174754][ T3331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.185555][ T3331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.229387][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.238843][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.255023][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.265072][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.289102][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.314893][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.324373][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.333574][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.350899][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.358356][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.373388][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.390304][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.397451][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.416990][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.424195][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.439810][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.455377][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.466904][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.474015][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.509793][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.516898][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.534448][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.546797][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.564323][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.571498][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.589576][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.601185][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.608363][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.626444][ T3331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.637017][ T3331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.665268][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.684057][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.691205][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.711517][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.718719][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.746889][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.755789][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.766357][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.789804][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.796944][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.813390][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.820528][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.840228][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.851563][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.894527][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.905146][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.013084][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.034530][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.066861][ T3318] veth0_vlan: entered promiscuous mode [ 39.106807][ T3322] veth0_vlan: entered promiscuous mode [ 39.113657][ T3318] veth1_vlan: entered promiscuous mode [ 39.129999][ T3322] veth1_vlan: entered promiscuous mode [ 39.139712][ T3331] veth0_vlan: entered promiscuous mode [ 39.156566][ T3322] veth0_macvtap: entered promiscuous mode [ 39.182365][ T3331] veth1_vlan: entered promiscuous mode [ 39.196495][ T3322] veth1_macvtap: entered promiscuous mode [ 39.205091][ T3318] veth0_macvtap: entered promiscuous mode [ 39.224611][ T3318] veth1_macvtap: entered promiscuous mode [ 39.247199][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.265338][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.273545][ T3331] veth0_macvtap: entered promiscuous mode [ 39.281561][ T3331] veth1_macvtap: entered promiscuous mode [ 39.297125][ T3320] veth0_vlan: entered promiscuous mode [ 39.311089][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.325062][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.333985][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.342797][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.351719][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.367292][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.375528][ T3320] veth1_vlan: entered promiscuous mode [ 39.396284][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.403370][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.403389][ T29] audit: type=1400 audit(1748782002.269:81): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.qrxynH/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.405157][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.411105][ T29] audit: type=1400 audit(1748782002.269:82): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.411134][ T29] audit: type=1400 audit(1748782002.269:83): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.qrxynH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.411163][ T29] audit: type=1400 audit(1748782002.269:84): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.435419][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.444166][ T29] audit: type=1400 audit(1748782002.269:85): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.qrxynH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.466183][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.491357][ T29] audit: type=1400 audit(1748782002.269:86): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.qrxynH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.526486][ T3320] veth0_macvtap: entered promiscuous mode [ 39.548355][ T29] audit: type=1400 audit(1748782002.269:87): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.562089][ T3320] veth1_macvtap: entered promiscuous mode [ 39.618755][ T3324] veth0_vlan: entered promiscuous mode [ 39.639417][ T29] audit: type=1400 audit(1748782002.489:88): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.645134][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.662329][ T29] audit: type=1400 audit(1748782002.489:89): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=4515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.673695][ T3324] veth1_vlan: entered promiscuous mode [ 39.701983][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.726342][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.736621][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.755532][ T3324] veth0_macvtap: entered promiscuous mode [ 39.761955][ T29] audit: type=1400 audit(1748782002.619:90): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.791557][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.801505][ T3320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.810310][ T3320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.819068][ T3320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.827906][ T3320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.842081][ T3331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.850889][ T3331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.859908][ T3331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.868693][ T3331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.880718][ T3324] veth1_macvtap: entered promiscuous mode [ 39.911352][ T3457] loop0: detected capacity change from 0 to 1024 [ 39.918127][ T3457] ======================================================= [ 39.918127][ T3457] WARNING: The mand mount option has been deprecated and [ 39.918127][ T3457] and is ignored by this kernel. Remove the mand [ 39.918127][ T3457] option from the mount to silence this warning. [ 39.918127][ T3457] ======================================================= [ 39.957979][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.995424][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.026817][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.035739][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.044646][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.053495][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088394][ T3457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.125182][ T3457] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.216765][ T3472] loop3: detected capacity change from 0 to 1024 [ 40.228559][ C0] hrtimer: interrupt took 27756 ns [ 40.281030][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.308141][ T3472] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.363456][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.415477][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.552289][ T3488] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 40.604323][ T3490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'. [ 40.635322][ T3490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9'. [ 40.793864][ T3499] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.11'. [ 40.888215][ T3504] tipc: Started in network mode [ 40.893215][ T3504] tipc: Node identity 68a, cluster identity 3 [ 40.899579][ T3504] tipc: Node number set to 1674 [ 40.920658][ T3504] tipc: Cannot configure node identity twice [ 40.989245][ T3508] process 'syz.4.13' launched './file1' with NULL argv: empty string added [ 41.021632][ T3508] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 41.061429][ T3508] SELinux: failed to load policy [ 41.204352][ T3519] loop4: detected capacity change from 0 to 512 [ 41.235988][ T3521] loop1: detected capacity change from 0 to 512 [ 41.315277][ T3523] loop2: detected capacity change from 0 to 512 [ 41.342651][ T3523] ext3: Bad value for 'debug_want_extra_isize' [ 41.579113][ T3538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 41.601473][ T3539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 41.715268][ T3550] bond_slave_0: entered promiscuous mode [ 41.721013][ T3550] bond_slave_1: entered promiscuous mode [ 41.762787][ T3550] macvlan2: entered allmulticast mode [ 41.768276][ T3550] bond0: entered allmulticast mode [ 41.773529][ T3550] bond_slave_0: entered allmulticast mode [ 41.779370][ T3550] bond_slave_1: entered allmulticast mode [ 41.781285][ T3555] loop1: detected capacity change from 0 to 512 [ 41.838871][ T3556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 41.855558][ T3550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 41.938338][ T3550] bond0: left allmulticast mode [ 41.940914][ T3537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 41.943426][ T3550] bond_slave_0: left allmulticast mode [ 41.957769][ T3550] bond_slave_1: left allmulticast mode [ 41.963277][ T3550] bond_slave_0: left promiscuous mode [ 41.968709][ T3550] bond_slave_1: left promiscuous mode [ 41.976530][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 42.010581][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 42.089065][ T3569] mmap: syz.3.29 (3569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.146477][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 42.165164][ T3551] bond_slave_0: entered promiscuous mode [ 42.170949][ T3551] bond_slave_1: entered promiscuous mode [ 42.178883][ T3551] macvlan2: entered allmulticast mode [ 42.184308][ T3551] bond0: entered allmulticast mode [ 42.189581][ T3551] bond_slave_0: entered allmulticast mode [ 42.195327][ T3551] bond_slave_1: entered allmulticast mode [ 42.215825][ T3551] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 42.280996][ T3551] bond0: left allmulticast mode [ 42.285910][ T3551] bond_slave_0: left allmulticast mode [ 42.291558][ T3551] bond_slave_1: left allmulticast mode [ 42.297142][ T3551] bond_slave_0: left promiscuous mode [ 42.302627][ T3551] bond_slave_1: left promiscuous mode [ 42.357711][ T3563] bond_slave_0: entered promiscuous mode [ 42.363582][ T3563] bond_slave_1: entered promiscuous mode [ 42.372306][ T3563] macvlan2: entered allmulticast mode [ 42.377812][ T3563] bond0: entered allmulticast mode [ 42.383052][ T3563] bond_slave_0: entered allmulticast mode [ 42.388912][ T3563] bond_slave_1: entered allmulticast mode [ 42.397214][ T3563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 42.412016][ T3563] bond0: left allmulticast mode [ 42.417024][ T3563] bond_slave_0: left allmulticast mode [ 42.422829][ T3563] bond_slave_1: left allmulticast mode [ 42.428366][ T3563] bond_slave_0: left promiscuous mode [ 42.433836][ T3563] bond_slave_1: left promiscuous mode [ 42.483371][ T3551] syz.4.25 (3551) used greatest stack depth: 10968 bytes left [ 42.586006][ T3601] loop4: detected capacity change from 0 to 512 [ 42.595506][ T3601] ext3: Bad value for 'debug_want_extra_isize' [ 42.629770][ T3604] loop1: detected capacity change from 0 to 512 [ 42.639985][ T3604] ext3: Bad value for 'debug_want_extra_isize' [ 42.744251][ T3611] loop2: detected capacity change from 0 to 512 [ 42.806431][ T3613] loop2: detected capacity change from 0 to 512 [ 42.814422][ T3613] ext3: Bad value for 'debug_want_extra_isize' [ 42.882216][ T3615] loop1: detected capacity change from 0 to 512 [ 42.894819][ T3617] loop4: detected capacity change from 0 to 512 [ 42.914197][ T3615] ext3: Bad value for 'debug_want_extra_isize' [ 42.920934][ T3617] ext3: Bad value for 'debug_want_extra_isize' [ 43.129700][ T3627] loop3: detected capacity change from 0 to 512 [ 43.156617][ T3627] ext3: Bad value for 'debug_want_extra_isize' [ 43.169400][ T3631] loop4: detected capacity change from 0 to 512 [ 43.182739][ T3631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.195542][ T3631] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.225483][ T3631] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.234770][ T3631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3631 comm=syz.4.52 [ 43.269392][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.335181][ T3644] loop0: detected capacity change from 0 to 512 [ 43.353542][ T3644] ext3: Bad value for 'debug_want_extra_isize' [ 43.443271][ T3652] loop3: detected capacity change from 0 to 512 [ 43.449762][ T3650] loop4: detected capacity change from 0 to 512 [ 43.450129][ T3652] ext3: Bad value for 'debug_want_extra_isize' [ 43.479922][ T3650] ext3: Bad value for 'debug_want_extra_isize' [ 43.616178][ T3656] loop3: detected capacity change from 0 to 512 [ 43.623296][ T3656] ext3: Bad value for 'debug_want_extra_isize' [ 43.972258][ T3670] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 44.006211][ T3674] loop9: detected capacity change from 0 to 7 [ 44.013165][ T3674] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.017591][ T3670] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 44.030403][ T3674] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.038398][ T3674] loop9: unable to read partition table [ 44.071810][ T3674] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 44.071810][ T3674] U) failed (rc=-5) [ 44.163297][ T3670] syz.1.66 (3670) used greatest stack depth: 10576 bytes left [ 44.433012][ T3696] loop3: detected capacity change from 0 to 512 [ 44.476925][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.489524][ T3696] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.506553][ T3696] binfmt_misc: register: failed to install interpreter file ./file0 [ 44.515191][ T3696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3696 comm=syz.3.75 [ 44.560868][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.597259][ T3701] loop4: detected capacity change from 0 to 1024 [ 44.677831][ T3701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.727531][ T3701] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.940004][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.977172][ T3716] loop4: detected capacity change from 0 to 512 [ 44.999283][ T3716] ext3: Bad value for 'debug_want_extra_isize' [ 45.248694][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 45.248712][ T29] audit: type=1400 audit(1748782008.119:408): avc: denied { watch watch_reads } for pid=3725 comm="syz.4.85" path="/27" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.295731][ T29] audit: type=1326 audit(1748782008.149:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 45.319422][ T29] audit: type=1326 audit(1748782008.149:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f9b7fd2d0 code=0x7ffc0000 [ 45.337336][ T3728] loop4: detected capacity change from 0 to 512 [ 45.342638][ T29] audit: type=1326 audit(1748782008.149:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1f9b800197 code=0x7ffc0000 [ 45.354413][ T3728] ext3: Bad value for 'debug_want_extra_isize' [ 45.372113][ T29] audit: type=1326 audit(1748782008.149:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 45.401743][ T29] audit: type=1400 audit(1748782008.149:413): avc: denied { create } for pid=3725 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.421004][ T29] audit: type=1326 audit(1748782008.149:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1f9b800197 code=0x7ffc0000 [ 45.444249][ T29] audit: type=1326 audit(1748782008.149:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1f9b7fd5ca code=0x7ffc0000 [ 45.467468][ T29] audit: type=1326 audit(1748782008.149:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 45.490636][ T29] audit: type=1326 audit(1748782008.149:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 45.612130][ T3733] loop1: detected capacity change from 0 to 1024 [ 45.641773][ T3737] loop3: detected capacity change from 0 to 512 [ 45.671317][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.691505][ T3741] __nla_validate_parse: 4 callbacks suppressed [ 45.691521][ T3741] netlink: 104 bytes leftover after parsing attributes in process `syz.0.91'. [ 45.755622][ T3733] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.790986][ T3743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.93'. [ 45.805495][ T3746] loop0: detected capacity change from 0 to 512 [ 45.829281][ T3747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.94'. [ 45.848488][ T3743] netlink: 32 bytes leftover after parsing attributes in process `syz.4.93'. [ 45.858633][ T3746] ext3: Bad value for 'debug_want_extra_isize' [ 45.989540][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.158226][ T3770] netlink: 104 bytes leftover after parsing attributes in process `syz.1.102'. [ 46.212954][ T3775] loop1: detected capacity change from 0 to 512 [ 46.219803][ T3776] loop0: detected capacity change from 0 to 512 [ 46.247554][ T3776] ext3: Bad value for 'debug_want_extra_isize' [ 46.514581][ T3790] loop4: detected capacity change from 0 to 512 [ 46.530390][ T3792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.112'. [ 46.533338][ T3790] ext3: Bad value for 'debug_want_extra_isize' [ 46.555807][ T3792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.112'. [ 46.724490][ T3796] netlink: 104 bytes leftover after parsing attributes in process `syz.0.113'. [ 46.983540][ T3820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'. [ 47.012875][ T3820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.123'. [ 47.131220][ T3825] loop4: detected capacity change from 0 to 512 [ 47.150603][ T3825] ext3: Bad value for 'debug_want_extra_isize' [ 47.459079][ T3852] loop4: detected capacity change from 0 to 1024 [ 47.498602][ T3852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.511037][ T3852] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.594043][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.749678][ T3874] loop2: detected capacity change from 0 to 512 [ 48.094199][ T3893] loop0: detected capacity change from 0 to 8192 [ 48.246597][ T3900] loop3: detected capacity change from 0 to 1024 [ 48.306978][ T3900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.335595][ T3900] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.424669][ T3912] loop1: detected capacity change from 0 to 512 [ 48.438023][ T3912] ext3: Bad value for 'debug_want_extra_isize' [ 48.444046][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.860132][ T3943] vhci_hcd: invalid port number 96 [ 48.865317][ T3943] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 48.946233][ T3953] loop1: detected capacity change from 0 to 512 [ 48.953103][ T3953] ext3: Bad value for 'debug_want_extra_isize' [ 49.031747][ T3954] SELinux: failed to load policy [ 49.043319][ T3954] loop8: detected capacity change from 0 to 7 [ 49.091003][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.100241][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.128814][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.138055][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.157735][ T3954] loop8: unable to read partition table [ 49.173341][ T3954] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 49.184078][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.193343][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.207968][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.217177][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.227706][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.236939][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.246320][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.255632][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.263749][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.272939][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 49.793077][ T3984] loop2: detected capacity change from 0 to 512 [ 49.809048][ T3985] FAULT_INJECTION: forcing a failure. [ 49.809048][ T3985] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.822284][ T3985] CPU: 1 UID: 0 PID: 3985 Comm: syz.0.177 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 49.822312][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.822329][ T3985] Call Trace: [ 49.822334][ T3985] [ 49.822342][ T3985] __dump_stack+0x1d/0x30 [ 49.822375][ T3985] dump_stack_lvl+0xe8/0x140 [ 49.822395][ T3985] dump_stack+0x15/0x1b [ 49.822411][ T3985] should_fail_ex+0x265/0x280 [ 49.822459][ T3985] should_fail+0xb/0x20 [ 49.822503][ T3985] should_fail_usercopy+0x1a/0x20 [ 49.822526][ T3985] _copy_from_user+0x1c/0xb0 [ 49.822553][ T3985] kstrtouint_from_user+0x69/0xf0 [ 49.822657][ T3985] ? 0xffffffff81000000 [ 49.822674][ T3985] ? selinux_file_permission+0x1e4/0x320 [ 49.822708][ T3985] proc_fail_nth_write+0x50/0x160 [ 49.822729][ T3985] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.822748][ T3985] vfs_write+0x269/0x8e0 [ 49.822820][ T3985] ? vfs_read+0x47f/0x6f0 [ 49.822909][ T3985] ? __rcu_read_unlock+0x4f/0x70 [ 49.822937][ T3985] ? __fget_files+0x184/0x1c0 [ 49.822962][ T3985] ksys_write+0xda/0x1a0 [ 49.823047][ T3985] __x64_sys_write+0x40/0x50 [ 49.823072][ T3985] x64_sys_call+0x2cdd/0x2fb0 [ 49.823142][ T3985] do_syscall_64+0xd2/0x200 [ 49.823175][ T3985] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.823283][ T3985] ? clear_bhb_loop+0x40/0x90 [ 49.823311][ T3985] ? clear_bhb_loop+0x40/0x90 [ 49.823419][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.823447][ T3985] RIP: 0033:0x7fbf11c2d41f [ 49.823466][ T3985] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 49.823484][ T3985] RSP: 002b:00007fbf10297030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 49.823507][ T3985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf11c2d41f [ 49.823541][ T3985] RDX: 0000000000000001 RSI: 00007fbf102970a0 RDI: 0000000000000006 [ 49.823557][ T3985] RBP: 00007fbf10297090 R08: 0000000000000000 R09: 0000000000000000 [ 49.823572][ T3985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 49.823587][ T3985] R13: 0000000000000000 R14: 00007fbf11e55fa0 R15: 00007fff4af503a8 [ 49.823611][ T3985] [ 50.046726][ T3984] ext3: Bad value for 'debug_want_extra_isize' [ 50.230897][ T3995] FAULT_INJECTION: forcing a failure. [ 50.230897][ T3995] name failslab, interval 1, probability 0, space 0, times 1 [ 50.243633][ T3995] CPU: 0 UID: 0 PID: 3995 Comm: syz.1.181 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 50.243671][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.243686][ T3995] Call Trace: [ 50.243693][ T3995] [ 50.243701][ T3995] __dump_stack+0x1d/0x30 [ 50.243727][ T3995] dump_stack_lvl+0xe8/0x140 [ 50.243750][ T3995] dump_stack+0x15/0x1b [ 50.243771][ T3995] should_fail_ex+0x265/0x280 [ 50.243829][ T3995] should_failslab+0x8c/0xb0 [ 50.243858][ T3995] kmem_cache_alloc_noprof+0x50/0x310 [ 50.243893][ T3995] ? audit_log_start+0x365/0x6c0 [ 50.243947][ T3995] audit_log_start+0x365/0x6c0 [ 50.244074][ T3995] audit_seccomp+0x48/0x100 [ 50.244110][ T3995] ? __seccomp_filter+0x68c/0x10d0 [ 50.244191][ T3995] __seccomp_filter+0x69d/0x10d0 [ 50.244220][ T3995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.244247][ T3995] ? vfs_write+0x75e/0x8e0 [ 50.244267][ T3995] ? __rcu_read_unlock+0x4f/0x70 [ 50.244289][ T3995] ? __fget_files+0x184/0x1c0 [ 50.244342][ T3995] __secure_computing+0x82/0x150 [ 50.244435][ T3995] syscall_trace_enter+0xcf/0x1e0 [ 50.244478][ T3995] do_syscall_64+0xac/0x200 [ 50.244511][ T3995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.244540][ T3995] ? clear_bhb_loop+0x40/0x90 [ 50.244569][ T3995] ? clear_bhb_loop+0x40/0x90 [ 50.244678][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.244766][ T3995] RIP: 0033:0x7f3c38e6e969 [ 50.244786][ T3995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.244809][ T3995] RSP: 002b:00007f3c374d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 50.244833][ T3995] RAX: ffffffffffffffda RBX: 00007f3c39095fa0 RCX: 00007f3c38e6e969 [ 50.244849][ T3995] RDX: 0000000000000035 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.244865][ T3995] RBP: 00007f3c374d7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.244922][ T3995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.244939][ T3995] R13: 0000000000000000 R14: 00007f3c39095fa0 R15: 00007ffe908a1528 [ 50.244963][ T3995] [ 50.549286][ T4006] loop2: detected capacity change from 0 to 1024 [ 50.568574][ T4006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.605925][ T4006] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.780298][ T4016] __nla_validate_parse: 15 callbacks suppressed [ 50.780388][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 50.810805][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.844875][ T4030] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 50.971080][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.979783][ T4030] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 51.162895][ T4038] loop4: detected capacity change from 0 to 512 [ 51.182757][ T4038] ext3: Bad value for 'debug_want_extra_isize' [ 51.300842][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 51.300859][ T29] audit: type=1400 audit(1748782014.169:998): avc: denied { watch watch_reads } for pid=4043 comm="syz.2.199" path="/30/file0" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.361872][ T4044] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.562892][ T4059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 51.616908][ T4064] loop0: detected capacity change from 0 to 512 [ 51.620768][ T29] audit: type=1326 audit(1748782014.479:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 51.634001][ T4064] ext3: Bad value for 'debug_want_extra_isize' [ 51.670226][ T4066] loop4: detected capacity change from 0 to 512 [ 51.725779][ T29] audit: type=1326 audit(1748782014.519:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 51.749310][ T29] audit: type=1326 audit(1748782014.519:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1f9b7fe969 code=0x7ffc0000 [ 51.772843][ T29] audit: type=1326 audit(1748782014.519:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f9b7fe9a3 code=0x7ffc0000 [ 51.796235][ T29] audit: type=1326 audit(1748782014.519:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f9b7fd41f code=0x7ffc0000 [ 51.819495][ T29] audit: type=1326 audit(1748782014.539:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1f9b7fe9f7 code=0x7ffc0000 [ 51.842871][ T29] audit: type=1326 audit(1748782014.539:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f9b7fd2d0 code=0x7ffc0000 [ 51.866431][ T29] audit: type=1326 audit(1748782014.539:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f9b7fe56b code=0x7ffc0000 [ 51.889671][ T29] audit: type=1326 audit(1748782014.549:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1f9b7fd5ca code=0x7ffc0000 [ 51.970695][ T4077] loop3: detected capacity change from 0 to 512 [ 52.003590][ T4077] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.016859][ T4077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.028375][ T4081] netlink: 104 bytes leftover after parsing attributes in process `syz.2.211'. [ 52.053723][ T4077] EXT4-fs (loop3): 1 truncate cleaned up [ 52.072201][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.247672][ T4093] loop1: detected capacity change from 0 to 512 [ 52.258232][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.258559][ T4093] ext3: Bad value for 'debug_want_extra_isize' [ 52.613240][ T4112] loop3: detected capacity change from 0 to 512 [ 52.622237][ T4112] ext3: Bad value for 'debug_want_extra_isize' [ 52.677162][ T4116] loop0: detected capacity change from 0 to 512 [ 52.907333][ T4125] bond_slave_0: entered promiscuous mode [ 52.913187][ T4125] bond_slave_1: entered promiscuous mode [ 52.919189][ T4125] macvlan2: entered allmulticast mode [ 52.924598][ T4125] bond0: entered allmulticast mode [ 52.929802][ T4125] bond_slave_0: entered allmulticast mode [ 52.935560][ T4125] bond_slave_1: entered allmulticast mode [ 52.988944][ T4131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.227'. [ 53.018941][ T4125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.056793][ T4125] bond0: left allmulticast mode [ 53.061825][ T4125] bond_slave_0: left allmulticast mode [ 53.067382][ T4125] bond_slave_1: left allmulticast mode [ 53.072938][ T4125] bond_slave_0: left promiscuous mode [ 53.078381][ T4125] bond_slave_1: left promiscuous mode [ 53.422744][ T4144] netlink: 104 bytes leftover after parsing attributes in process `syz.4.233'. [ 53.492682][ T4155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 53.594552][ T4165] loop4: detected capacity change from 0 to 512 [ 53.622555][ T4167] loop0: detected capacity change from 0 to 512 [ 53.632787][ T4165] ext3: Bad value for 'debug_want_extra_isize' [ 53.797059][ T4170] SELinux: failed to load policy [ 53.803467][ T4172] batadv_slave_1: entered promiscuous mode [ 53.810006][ T4172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.831922][ T4172] Zero length message leads to an empty skb [ 53.838331][ T4171] batadv_slave_1: left promiscuous mode [ 53.891849][ T4177] tipc: Started in network mode [ 53.896831][ T4177] tipc: Node identity ac14140f, cluster identity 4711 [ 53.915383][ T4177] tipc: New replicast peer: 10.1.1.2 [ 53.920897][ T4177] tipc: Enabled bearer , priority 10 [ 54.145407][ T4205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.250'. [ 54.165258][ T4202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.193903][ T4207] FAULT_INJECTION: forcing a failure. [ 54.193903][ T4207] name failslab, interval 1, probability 0, space 0, times 0 [ 54.206792][ T4207] CPU: 0 UID: 0 PID: 4207 Comm: syz.2.256 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 54.206828][ T4207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.206844][ T4207] Call Trace: [ 54.206853][ T4207] [ 54.206863][ T4207] __dump_stack+0x1d/0x30 [ 54.206885][ T4207] dump_stack_lvl+0xe8/0x140 [ 54.206905][ T4207] dump_stack+0x15/0x1b [ 54.206998][ T4207] should_fail_ex+0x265/0x280 [ 54.207066][ T4207] should_failslab+0x8c/0xb0 [ 54.207091][ T4207] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.207125][ T4207] ? __alloc_skb+0x101/0x320 [ 54.207155][ T4207] __alloc_skb+0x101/0x320 [ 54.207292][ T4207] netlink_alloc_large_skb+0xba/0xf0 [ 54.207325][ T4207] netlink_sendmsg+0x3cf/0x6b0 [ 54.207371][ T4207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.207401][ T4207] __sock_sendmsg+0x142/0x180 [ 54.207477][ T4207] ____sys_sendmsg+0x31e/0x4e0 [ 54.207516][ T4207] ___sys_sendmsg+0x17b/0x1d0 [ 54.207711][ T4207] __x64_sys_sendmsg+0xd4/0x160 [ 54.207752][ T4207] x64_sys_call+0x2999/0x2fb0 [ 54.207777][ T4207] do_syscall_64+0xd2/0x200 [ 54.207810][ T4207] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.207852][ T4207] ? clear_bhb_loop+0x40/0x90 [ 54.207880][ T4207] ? clear_bhb_loop+0x40/0x90 [ 54.207909][ T4207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.207978][ T4207] RIP: 0033:0x7f3abce4e969 [ 54.207998][ T4207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.208057][ T4207] RSP: 002b:00007f3abb4b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.208081][ T4207] RAX: ffffffffffffffda RBX: 00007f3abd075fa0 RCX: 00007f3abce4e969 [ 54.208152][ T4207] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 54.208164][ T4207] RBP: 00007f3abb4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.208176][ T4207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.208188][ T4207] R13: 0000000000000000 R14: 00007f3abd075fa0 R15: 00007ffd5f1e1698 [ 54.208209][ T4207] [ 54.443595][ T4212] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.454068][ T4212] SELinux: failed to load policy [ 54.565503][ T4216] loop2: detected capacity change from 0 to 512 [ 54.596423][ T4210] loop4: detected capacity change from 0 to 8192 [ 54.603327][ T4216] ext3: Bad value for 'debug_want_extra_isize' [ 54.678055][ T4221] sctp: [Deprecated]: syz.3.261 (pid 4221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.678055][ T4221] Use struct sctp_sack_info instead [ 54.734518][ T4221] syz.3.261 (4221) used greatest stack depth: 10200 bytes left [ 54.818078][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 54.849346][ T4222] ================================================================== [ 54.857498][ T4222] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 54.864632][ T4222] [ 54.866965][ T4222] write to 0xffff88810789c4cc of 2 bytes by task 4210 on cpu 0: [ 54.874603][ T4222] fat16_ent_put+0x28/0x60 [ 54.879039][ T4222] fat_ent_write+0x6c/0xe0 [ 54.883473][ T4222] fat_chain_add+0x15b/0x3f0 [ 54.888085][ T4222] fat_get_block+0x46c/0x5e0 [ 54.892690][ T4222] __block_write_begin_int+0x3fd/0xf90 [ 54.898169][ T4222] cont_write_begin+0x5fc/0x970 [ 54.903038][ T4222] fat_write_begin+0x4f/0xe0 [ 54.907650][ T4222] cont_write_begin+0x1ad/0x970 [ 54.912528][ T4222] fat_write_begin+0x4f/0xe0 [ 54.917136][ T4222] generic_cont_expand_simple+0xb0/0x150 [ 54.922781][ T4222] fat_cont_expand+0x3e/0x170 [ 54.927471][ T4222] fat_setattr+0x2a5/0x8a0 [ 54.931987][ T4222] notify_change+0x809/0x890 [ 54.936597][ T4222] do_ftruncate+0x34b/0x450 [ 54.941115][ T4222] __x64_sys_ftruncate+0x68/0xc0 [ 54.946063][ T4222] x64_sys_call+0xd65/0x2fb0 [ 54.950663][ T4222] do_syscall_64+0xd2/0x200 [ 54.955181][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.961087][ T4222] [ 54.963412][ T4222] read to 0xffff88810789c400 of 512 bytes by task 4222 on cpu 1: [ 54.971143][ T4222] fat_mirror_bhs+0x1df/0x320 [ 54.975832][ T4222] fat_ent_write+0xd0/0xe0 [ 54.980259][ T4222] fat_chain_add+0x15b/0x3f0 [ 54.984867][ T4222] fat_get_block+0x46c/0x5e0 [ 54.989470][ T4222] __block_write_begin_int+0x3fd/0xf90 [ 54.994937][ T4222] cont_write_begin+0x5fc/0x970 [ 54.999797][ T4222] fat_write_begin+0x4f/0xe0 [ 55.004405][ T4222] generic_perform_write+0x181/0x490 [ 55.009718][ T4222] __generic_file_write_iter+0x9e/0x120 [ 55.015277][ T4222] generic_file_write_iter+0x8d/0x2f0 [ 55.020660][ T4222] do_iter_readv_writev+0x3ee/0x4b0 [ 55.025957][ T4222] vfs_writev+0x2df/0x8b0 [ 55.030398][ T4222] __se_sys_pwritev2+0xfc/0x1c0 [ 55.035357][ T4222] __x64_sys_pwritev2+0x67/0x80 [ 55.040321][ T4222] x64_sys_call+0x1cea/0x2fb0 [ 55.045013][ T4222] do_syscall_64+0xd2/0x200 [ 55.049544][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.055446][ T4222] [ 55.057772][ T4222] Reported by Kernel Concurrency Sanitizer on: [ 55.064026][ T4222] CPU: 1 UID: 0 PID: 4222 Comm: syz.4.257 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 55.076013][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.086082][ T4222] ================================================================== [ 55.094274][ T809] tipc: Node number set to 2886997007