last executing test programs: 4.830762085s ago: executing program 4 (id=151): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x1000, 0x0, 0x8, 0x1, 0xe3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x1000) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000008c0)={r5, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r6}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={r6, 0x7}, 0xfffffffffffffe4f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) 3.979340593s ago: executing program 4 (id=158): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x7, 0x8b, 0x9, @mcast2, @mcast2, 0x700, 0x700, 0xeb44, 0x8}}) socket(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x20000000}}], 0x1, 0x20004001) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x1, 0xbf1e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x2, 0x0) shutdown(r2, 0x1) 3.692201836s ago: executing program 1 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@alg, &(0x7f00000002c0)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="d40000003681a9a3a50ba629df421f379dffb7e90b03d283478cbc0f8686a7dd19282891c71cfad4f0d43ad27de758b48e1dfadf0c63d6276c8bafac58580228f9a03b58ffabec46ae60b54ad1b24811fdcae33255d933b7eb9fa0f45f89fd0d4f65f450268dc785c86e1b19eb1a135253734292da66ecfdadb33245d026a3076226e1e0a8af496c819e53adaca0d46e858a5d14021d7b0d642d7987d72cf0055a4af23bb4f455a58720a791040783c792dfa05de4a74680ef0b4dad02a4a74714ebb16cbc7556b8d790312946c549a7f553751cd41c3a121efcd6dbc16c51e838aac6cea831f005d781ab9fbf222c08c623de281c7c393dff45d21e57a03fdbf92e4a2775c9b7893f1dc30ab40403af9b4427a6def394c17e8b05b5ac990a4c169dd2", @ANYRES16=r2, @ANYBLOB="06002bbd7000ffdbdf25170000000c000380080001000500000068000180380004001400010002004e22000000000000000000000000200002000a004e2300000002fe880000000000000000000000000001060000002c000280080004000300000008000100200000000800030000000000080001000b00000008000400090000004c000980080001000b00000008000100000000000800020000000100080001000d00000008000200faffffff0800020081ffffff080001000500000008000100010100000800020002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4041}, 0x20000804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}, 0x1, 0x0, 0x0, 0x204c000}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 3.057608857s ago: executing program 2 (id=163): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYBLOB="4ecec27cf18820a4ec18ee210249ec702546b28b4c5f493dcd2c11e3196dff3bcc2e6c0a404411b6d5c50e0c63cd149f8ead3c7649648a89819b27f75f6bae4a0066941724496461619a30d3afcca1c53a57e4013f60fdb1052c1296e4d2f4b214a3ef152dcde73e99fe1bce0c63fddadef196f0d44879ff94d8408a4f8dbd33d48a66d0e60541dac7276f7e34a40a4dd7b752c3d88c63bf1416d851ec91dcfff6dd7cfa38edba20ada5e7e852687a9c1e3ff0109c9fc23ab2b8b813092ea1bda0ef97a86e9fbda3d374edc5e7702987587313f09d727875ee676d00"/234, @ANYRES64, @ANYBLOB='\t\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="03373ada06a20413d6b660e857923da8ae4287d92f04b68ff6af741da628c139b5922540e75fb38cbf6829ffffb8b8b42daaf1aab3b29dc4b469ae449cedb1c8c22648e78ee489"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x3, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES64=r2], 0x140}, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000940)="912a31a3e770234f2c4e52c03da5a7dfa5aa54f85a39d58496c464cffce6bf60ce229bd6bf11744080e7cfe730a831c2238fbef25847ae4588872caae41959a439ddeca96f54e8748c7f361545d809d7814d09d010f16d41f3dab527474e61371bb2bf4b734ac423dde1aa73ed30138cffac8013dee6cc8f07e5490d0bb07297f0f69317f9f43c9acd9ab624e47d623ff3c41ee717ecb0ac814958e85f"}, {&(0x7f0000000b80)="250f2f6c0caf4062889c778f50896aad1daa31d6a2322857600cabf49cdc08701be57784da9d4e34941d9781106f56f2032f83ac8ae4798c3ead6dc108ba7000a9874370669968d0c72b795041aa64884be384e5c7b6f62ac4cbc6614d4dfe54aae2136db566cf0885c467546a698ef5d5d6f39068cc860c4281e03db56e9a46a9b70c428bbb70b976ae3ce3857178ae3c50d0831789131717eab92ca6ac4016765fc8dba371af16483f2b9a6c957dc1328b4ef76a1160eefa0d8c95ca1f5653704838cacfa2b81a1343775a92b62535dc6ff50838a9a668525a6afbfecd"}, {&(0x7f0000000c80)="ef3a45b0cd0c3f7b0b2c1cfca32e657498f050a3137f674f9b67181baf48c49b00b3bd582aaaeeb71de5b0c3ed3e99636fc74a1a65aabb5022ec11579c44e403482d86013d27705648f5855f2b02a5cbb21e69f0f775d86ba0e43e6c7b24bb02885f2f2d4cc39a43a29a66442c8e6df08847a4909563c6772007b1dae8eeacaa5b962099f99a2d40c281f5e7545c4f64a7744e5bbdfd8e64d4828ce26f1e3cf87df6ada811dae8131628ca617fddf9a9dc3d8d96eeba46fa254174c4f3f7630aec2030d0710c9bbcb4d91d21f66050d55d0bc441fbb4405b919b64d046330eeb632e35678e618d3c4dceca3a72fffcfec5419304a5"}, {&(0x7f0000000d80)="781273415217f4577745b419adea274f22429ba43090cc98b3e2938c5e1394c6a7b511365548674360415fa48c880be686b0acf12586c912a4d0c3aec56b9dc96c442dff2424594b23bb3a95de89879dfb96d9416a284490845c0c6ccdcc2f56a0550036d1c3f29b5eca185e2d92437222c5c8bbceba177f2070761bddf844e49b8bfae0fa0bb37c1ff55353d1f8eb62efb0573b44960c57db313853c151fa3aecb71ed1f0c57734db2b4feca9f191abfc5592fc3961216c7b2a8191219d189680d73184d1808780ec4da326febe81727376831f297b43468fd1e7e7c69b"}, {&(0x7f0000000f80)="16266a204a0b32e8cac12b11043905c2e605cd5e3b09e5dff49601ee9aa30f1d8a8338d5b8a9b40a07cc4f745e9dfd1b5c97e4b900534428fb5c3e2dc40111094ee847e447072b608e85053c755cd3f14222a7b3167af29158ac71057b8219731b7bcc4879f7124b6fa06566df7ee140c6d7e3245a00c9402bf3e43b47dce107f694a6"}], 0x2a, 0x0, 0x0, 0x1f00c00e}, 0x20040084) r7 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0x447f, 0x40, 0x1, 0x1cd}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0x20, 0x0, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r8, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) 3.003419981s ago: executing program 4 (id=164): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r0 = inotify_init() lstat(&(0x7f0000001080)='\x00', 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, &(0x7f0000001140)={0x9, 0x80000001, 0x8, 0x9, 0xf958, 0xa51e, 0xf, 0x2, 0x4}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fspick(r3, &(0x7f00000011c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x3, 0x10, 0x6, 0x6, 0x0, 0x100, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r9, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r10, 0x3, 0x0) write$UHID_INPUT(r1, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xffffffffffffffb2) 2.561547566s ago: executing program 4 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000000000070000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fsi_master_gpio_poll_response_busy\x00', r5}, 0x2b) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x10}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffa0}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000380)={'pim6reg1\x00', {0x2, 0x0, @empty}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind(r7, &(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r10 = epoll_create(0x8) epoll_wait(r10, &(0x7f0000000880)=[{}], 0x1, 0x8) 2.539814348s ago: executing program 2 (id=170): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x2000000, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r6, 0xffffffffffffffff, 0x0) 2.5089763s ago: executing program 3 (id=171): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000804000000040000000a00000000000000ad4ae641b338bd3ba04ecaab23d246d251e4550847db414720241ec355a9ac2e51dc2f000000b5010000008a27b12a18271aa7205a16504277d309ee25170b191cb3b2edbfd7aba0050de07df6e69126c603e76291aae1d6aafdf81f929ae3329954134ce94c9cf9c8b711fa2601fbb13d7ce1875f61b542fbf7ac6b37f228c4ee4db98afcee0760b663a4b811b04be25a8e470830242250c4588c234101445fb565d9a82bdc5a3da3a2e9ba60f8870487f86431fd6ae883cd136ce6b3da02b740a4a249782387b8391f0946ef8345e42b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffdffffffffffe}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r4, &(0x7f0000000340)=""/211, 0xd3, 0x12122, &(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000004000001c0018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) 2.362512742s ago: executing program 1 (id=172): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000804000000040000000a00000000000000ad4ae641b338bd3ba04ecaab23d246d251e4550847db414720241ec355a9ac2e51dc2f000000b5010000008a27b12a18271aa7205a16504277d309ee25170b191cb3b2edbfd7aba0050de07df6e69126c603e76291aae1d6aafdf81f929ae3329954134ce94c9cf9c8b711fa2601fbb13d7ce1875f61b542fbf7ac6b37f228c4ee4db98afcee0760b663a4b811b04be25a8e470830242250c4588c234101445fb565d9a82bdc5a3da3a2e9ba60f8870487f86431fd6ae883cd136ce6b3da02b740a4a249782387b8391f0946ef8345e42b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffdffffffffffe}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r5, &(0x7f0000000340)=""/211, 0xd3, 0x12122, &(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000004000001c0018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 2.330017044s ago: executing program 2 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8c4, 0x47, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000480)={{0xc, @empty, 0x4e20, 0x3, 'none\x00', 0x20, 0xc0, 0x4f}, {@empty, 0x4e23, 0x0, 0x7fffffff, 0x236, 0x8a}}, 0x44) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 2.284647248s ago: executing program 1 (id=175): lchown(0x0, 0x0, 0xee01) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000000000000000000000001700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000009b000000b7080000000000007b8af8ff00000000b7080000003c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.142436449s ago: executing program 2 (id=176): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x7, 0x8b, 0x9, @mcast2, @mcast2, 0x700, 0x700, 0xeb44, 0x8}}) socket(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x20000000}}], 0x1, 0x20004001) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x1, 0xbf1e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x2, 0x0) shutdown(r2, 0x1) 1.87702802s ago: executing program 0 (id=178): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x3, 0xb}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200004, &(0x7f0000000200)=ANY=[], 0x1, 0x657, &(0x7f0000000a00)="$eJzs3U9v2/Ydx/EPZdlWPCwotqEIgjT5NVkBB8sUSW4cGNlhGkXZ7CRRIOnBBgYUWWMXQeR0SzJg8aXwZX+A7gnsMvSywx7EgJ133wPYcUCx3QbsMA78Z0uy/jmVnXV5vwyHFPkl+f39qPALWiIpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgy25UKlVLLbezvWPGsxu+154wP13bom6nI7enbley4l+VSrqSTrryrZPZb8f/3NS19NU1leJBSYdfe/utB98sFvLlJyT0KnTWFT5/efjkYa+392zOiVywhzrdchVmWHDT6biB57brm45xA89srK9X7m41A9N0W06wG4RO29i+Uwg936zat011Y2PNOOVdb7uz2ai3nHzi/e/WKpV188FytvvvflAO7C231XI7m0lMPDuOuW8++3Ea4tTbxuw/7u2tTUsyDqrOElSbFlSr1GrVaq1WXb+3cW9BleLAhPuVSrEyRKci5v6mxVfM/A7ewJdUiOv/3yyppZI62taOzMgfWw358tTOpxQH52fy+v/eXWfidvvrf17lr5zMvqqk/l9PX10fV//H5GpkkgVGzbHGTH+1n+d6qUM90UP11NOens1nvTfml+E5/hSkTakouQrkyVVbdW3KkcmmGG1oXeuq6ENtqalARk25aslRoF0FCuWonewTX47qCuXJl9GqbN2WUVUb2tCajByVtStP2+poUw3V9a8oivb1OOn3tQl5Kg+qzhJUmxB0qphnE37yafo+pf6/6fLj1ywxwGsXZef/Z3TjfLIBAAAAAADnwUr++m4ln92/IylS0205ldedFgAAAAAAmKPkk/9r8WAxHntH1pjz/+jicwMAAAAAAPNhJdfYWZJWFrNJ+ZVQs3wJYOGc0wMAAAAAAHOQfP5/fUmKknuv3ZB1pvN/AAAAAADwFfDrvnvsF/N77Eb5x/oFSUF32frTP5blL1pH3Z1vWwf1eE79IIs59Q2AsHnVupzdqDcZLElKXtnOonXyYAAr+S2lL77Yn3avf8sfSmBpIf/zxbQE1ovZK32md9OYd7PtPjosKJmTbmWl6bacsu21HlRVr18uhM5OuDS0+v3Hvb3yR5/0HiW5HMWTjg7iPD4dSKcwLZcXyf0WkmsuRrX4kpp51/6m016xku1W8vYvqH6QbqF0lvb/UjfTmJsr6XDl8HgFcftLcfur5WSXpa3/+dPHv0juDmGdZFEdbvmoHTEmi1KSxa005tbqrXSQ55dl8Z0FqVbu2wdxFlL8DjjJotafRaG/0zP/ifqzsP55qi+mZBH3xVqcxZ/j5ozJYm1aFlP2CAC8LvsnVSi5ifnpe+wP191XOcpNr+7fH9zKi99F6QWHC1Ix+2xi4lZKio/oq2nMkpIDa/HqiCN6JasrJY05olcGqttfkzRmrW7xtv548gykLO1TWfw7iqIH1WS7vx2qqp/HC3w+tqoGrdpC3IV3Xxz8NLkBfuzjvY/3ntZqa+uV9yuVezUtJs3IBtQeAMAI05+xMzXCev/4rPrR399LxwYq3jeOv1JQ1kf6RD090p38EQI3Rq91pe9rCHdOn7XGsZekodjfL+rO2LO6pJb2rbd2HJtf+DB8BngSu3bOewEAgIt1c0odnqX+38nPu1evjjzvHqzlw08IHhH79Xh69WI7AgCAN4jjf2GthL+yfN/tfljd2KjWwy3H+J79Q+O7jU3HuJ3Q8e2temfTMV3fCz3ba5mur2W34QQm2O52PT80Tc83XS9wd5Inv5vs0e+B0653QtcOui2nHjjG9jph3Q5Nww1s093+QcsNthw/WTjoOrbbdO166HodE3jbvu2UjQkcpy/QbTid0G268WjHdH23Xfd3zY+81nbbMQ0nsH23G3rpCvNtuZ2m57eT1ZYVnflBhwAA/D96/vLwycNeb+/ZhJEjTY/JRpZGrfB1txEAAAyiSgMAAAAAAAAAAAAAAAAAAAAA8L9vluv/zjSyOOpiQel4ys8uz7QeS/NO7Cwjhbey7jn74n+ZEHPpeEre/f0xR/NtRXGW5LOY4vz78JI0+2Wjcxj53n7ao2Nj4pkjZy0f74vi/P87xCNP/zBmVhRF0eTFlwf7cGlSAwdHivG7d+lL7IKLPxYBuFj/DQAA//8zGEBw") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) open$dir(&(0x7f00000003c0)='./file1\x00', 0x80002, 0x122) 1.817863815s ago: executing program 0 (id=179): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x7, 0x8b, 0x9, @mcast2, @mcast2, 0x700, 0x700, 0xeb44, 0x8}}) socket(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x20000000}}], 0x1, 0x20004001) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x1, 0xbf1e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) shutdown(r2, 0x1) 1.638612949s ago: executing program 3 (id=180): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @multicast}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 1.638265889s ago: executing program 4 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[], 0x27, 0xfffffffffffffffb) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_io_uring_setup(0x15b7, &(0x7f00000005c0)={0x0, 0xb030, 0x4042, 0x0, 0xd9, 0x0, r3}, &(0x7f0000000640), &(0x7f0000000680)) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x0, 0x1c}}}}}, 0x36) 1.63516388s ago: executing program 1 (id=190): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a007) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x800, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000040), &(0x7f0000000180)=r3}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.367990481s ago: executing program 3 (id=182): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x15) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb46e, 0x80, 0x1, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.277535518s ago: executing program 2 (id=183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, 0x0, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200020d0}, 0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x24040810) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x1) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@jqfmt_vfsv0}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18) sendmsg$FOU_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300000000001400"], 0x58}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) 1.208621244s ago: executing program 1 (id=184): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) getxattr(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getpgrp(0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0x65, 0x45, ""/69}, &(0x7f00000000c0)=0x65, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@nombcache}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$eJzs3MtvG1UXAPAzdpy+v+Qr5dHSQqAgKh5Jkz7ogk0RSCxAQoJFEauQplWo26AkSLSKIGURlqgSe8QSib+ADWWDgBUSW9gjpICyobAyGnsmdRPbeTlxqX8/aZJ7fce693jm2sd3bAfQtQbSP0nE3oj4JSL6atU7dxio/bu1ODv29+LsWBKVyht/JtX9/lqcHct3ze+3p1apVFr0O/92xGi5PD6V1YdmLr83NH312nMTl0cvjl8cvzJy5szJE0d6T4+cakuc+9KxHvpw8vDBV9668drYuRvv/PBVOt69WXt9HO0yUHt0G3qy3Z112L66ctLTwYGwLsWISA9XqTr/+6IYu5ba+uLljzs6OGBLVSqFyo7mzXMV4B6WJupAN8pf6NP3v/m2TanHXWHhbCytY9zKtlpLTxSyfUrZe6StMBAR5+b++TzdYovWIQAA6t08GxHPNsr/CvFA3X7/y64N9UfE/yNif0TcFxEHIuL+iOq+D0bEQ2vsN19lXn6FZGX+U+nbcHBrkOZ/L2TXtu7M//LsL/qLWW1fNf5ScmGiPH48e0yORWlHWh9u0ce3L/38abO2+vwv3dL+81wwG8fvPcsW6M6PzoxuJuZ6C9cjDvU0ij9ZynnT/PhgRBzaYB8TT395uFnb6vG30IakvPJFxFO14z8Xy+LPJU2vTw4/f3rk1NDOKI8fH8rPipV+/Gn+9ay3ZHnbpuJvg4Wbldjd8PxfGmp/sjNi+uq1S9XrtdPr72P+10+avqfZ6Pnfm7xZLfdmt30wOjMzNRzRm7y68vaR2/fN6/n+6fl/7Gjj+b8/bj8SD0dEehIfiYhHIuLRbOyPRcTjEXG0Rfzfv/jEu+uPv8WqfBul8f9RWuX4R/3xX3+heOm7r9cffy49/ierpWPZLWt5/ms1rutTmzmbAQAA4L+nUP0MfFIYXCoXCoODtc/wH4jdhfLk9MwzFybfv3K+9ln5/igV8pWuvrr10OFsbTivjyyrn8jWjT8r7qrWB8cmy+c7HTx0uT1N5n/qt2KnRwdsOd/Xgu5l/kP3Mv+he5n/0L3Mf+hejeb/Rx0YB7D9Vnn937Vd4wC2n/wfupf5D93L/Ieu1PRL8oVNfeVfoUOFb3o391sNay9E4S4J+Z4plKJhU0/LH7NoQ2FHw6ZOPzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x78BAAD//0k+5Mg=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket(0x10, 0x803, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 964.658983ms ago: executing program 3 (id=185): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000804000000040000000a00000000000000ad4ae641b338bd3ba04ecaab23d246d251e4550847db414720241ec355a9ac2e51dc2f000000b5010000008a27b12a18271aa7205a16504277d309ee25170b191cb3b2edbfd7aba0050de07df6e69126c603e76291aae1d6aafdf81f929ae3329954134ce94c9cf9c8b711fa2601fbb13d7ce1875f61b542fbf7ac6b37f228c4ee4db98afcee0760b663a4b811b04be25a8e470830242250c4588c234101445fb565d9a82bdc5a3da3a2e9ba60f8870487f86431fd6ae883cd136ce6b3da02b740a4a249782387b8391f0946ef8345e42b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffdffffffffffe}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r5, &(0x7f0000000340)=""/211, 0xd3, 0x12122, &(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000004000001c0018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 923.735056ms ago: executing program 0 (id=186): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x3dd3e387) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r1, 0x5608, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) listen(r2, 0x1ff) unshare(0x30000c80) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x1d, 0x2, 0x6) getpeername$qrtr(r3, 0x0, 0x0) 906.586188ms ago: executing program 2 (id=187): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0xc, 0x1, 0xa76d669c}, {0x74, 0x3, 0x57, 0x6}, {0x6, 0xfd, 0xbe, 0x7f}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r3 = dup(r0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004783bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r8], 0x20}}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 873.88758ms ago: executing program 3 (id=188): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x1000, 0x0, 0x8, 0x1, 0xe3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x1000) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000008c0)={r6, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000240)={r7}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={r7, 0x7}, 0xfffffffffffffe4f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) 811.994906ms ago: executing program 0 (id=189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4050) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0x8008330e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8, 0xb, 0x6, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) setfsgid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = gettid() sched_setscheduler(r4, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r7, 0x10001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="796104000000000000007e00001b7010cbb6e72e75dbe73bdb4324de446be7bcaf7c1a894d2f9620d101e2b5ec841fe88b6ad4d05bdfc027292e3acb9eb6d14addb938a7690c075d462c823e1f34bed03dc0ed038874f30b49"], 0x14}}, 0x0) 639.950449ms ago: executing program 4 (id=191): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000804000000040000000a00000000000000ad4ae641b338bd3ba04ecaab23d246d251e4550847db414720241ec355a9ac2e51dc2f000000b5010000008a27b12a18271aa7205a16504277d309ee25170b191cb3b2edbfd7aba0050de07df6e69126c603e76291aae1d6aafdf81f929ae3329954134ce94c9cf9c8b711fa2601fbb13d7ce1875f61b542fbf7ac6b37f228c4ee4db98afcee0760b663a4b811b04be25a8e470830242250c4588c234101445fb565d9a82bdc5a3da3a2e9ba60f8870487f86431fd6ae883cd136ce6b3da02b740a4a249782387b8391f0946ef8345e42b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffdffffffffffe}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r4, &(0x7f0000000340)=""/211, 0xd3, 0x12122, &(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000004000001c0018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) 546.370056ms ago: executing program 0 (id=192): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}]}}, 0x0, 0x32}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c00000800038004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4b", 0x2a}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 536.316587ms ago: executing program 1 (id=193): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8) waitid(0x0, r0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe15}], 0x1, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r5, r4, 0x0, 0x3ffff) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback={0x80fe}}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1c4) 77.706764ms ago: executing program 0 (id=194): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x7, 0x8b, 0x9, @mcast2, @mcast2, 0x700, 0x700, 0xeb44, 0x8}}) socket(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x20000000}}], 0x1, 0x20004001) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x1, 0xbf1e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x2, 0x0) shutdown(r2, 0x1) 0s ago: executing program 3 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) keyctl$instantiate(0xc, r2, &(0x7f0000000000)=ANY=[], 0x27, 0xfffffffffffffffb) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_io_uring_setup(0x15b7, &(0x7f00000005c0)={0x0, 0xb030, 0x4042, 0x0, 0xd9, 0x0, r3}, &(0x7f0000000640), &(0x7f0000000680)) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x0, 0x1c}}}}}, 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 26.187675][ T29] audit: type=1400 audit(1755328075.313:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.188668][ T3287] cgroup: Unknown subsys name 'net' [ 26.210494][ T29] audit: type=1400 audit(1755328075.313:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.237855][ T29] audit: type=1400 audit(1755328075.343:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.350648][ T3287] cgroup: Unknown subsys name 'cpuset' [ 26.356763][ T3287] cgroup: Unknown subsys name 'rlimit' [ 26.547137][ T29] audit: type=1400 audit(1755328075.673:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.572371][ T29] audit: type=1400 audit(1755328075.673:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.592858][ T29] audit: type=1400 audit(1755328075.673:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.613184][ T29] audit: type=1400 audit(1755328075.673:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.621179][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.633437][ T29] audit: type=1400 audit(1755328075.683:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.633461][ T29] audit: type=1400 audit(1755328075.683:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.690028][ T29] audit: type=1400 audit(1755328075.813:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.741420][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.691529][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.710640][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.719166][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.785556][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.792685][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.799947][ T3300] bridge_slave_0: entered allmulticast mode [ 28.806484][ T3300] bridge_slave_0: entered promiscuous mode [ 28.813918][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.821057][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.828234][ T3300] bridge_slave_1: entered allmulticast mode [ 28.834756][ T3300] bridge_slave_1: entered promiscuous mode [ 28.873099][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.880350][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.887416][ T3299] bridge_slave_0: entered allmulticast mode [ 28.893859][ T3299] bridge_slave_0: entered promiscuous mode [ 28.902671][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.909799][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.916985][ T3299] bridge_slave_1: entered allmulticast mode [ 28.923422][ T3299] bridge_slave_1: entered promiscuous mode [ 28.957284][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.966442][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.975451][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.982596][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.989716][ T3307] bridge_slave_0: entered allmulticast mode [ 28.996276][ T3307] bridge_slave_0: entered promiscuous mode [ 29.011592][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.028071][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.035172][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.042350][ T3307] bridge_slave_1: entered allmulticast mode [ 29.048664][ T3307] bridge_slave_1: entered promiscuous mode [ 29.055747][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.083876][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.104646][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.114358][ T3300] team0: Port device team_slave_0 added [ 29.120999][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.136869][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.145861][ T3300] team0: Port device team_slave_1 added [ 29.158641][ T3299] team0: Port device team_slave_0 added [ 29.169818][ T3299] team0: Port device team_slave_1 added [ 29.184507][ T3307] team0: Port device team_slave_0 added [ 29.210165][ T3307] team0: Port device team_slave_1 added [ 29.223011][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.229974][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.256044][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.267134][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.274182][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.300235][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.322625][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.329552][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.355430][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.368670][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.375680][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.401611][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.416733][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.423846][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.430986][ T3305] bridge_slave_0: entered allmulticast mode [ 29.437235][ T3305] bridge_slave_0: entered promiscuous mode [ 29.454031][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.461115][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.487041][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.497811][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.504889][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.511982][ T3305] bridge_slave_1: entered allmulticast mode [ 29.518294][ T3305] bridge_slave_1: entered promiscuous mode [ 29.529011][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.536190][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.543364][ T3301] bridge_slave_0: entered allmulticast mode [ 29.549794][ T3301] bridge_slave_0: entered promiscuous mode [ 29.560964][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.567908][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.593847][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.616740][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.623871][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.631013][ T3301] bridge_slave_1: entered allmulticast mode [ 29.637397][ T3301] bridge_slave_1: entered promiscuous mode [ 29.650275][ T3299] hsr_slave_0: entered promiscuous mode [ 29.656305][ T3299] hsr_slave_1: entered promiscuous mode [ 29.667874][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.678261][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.732014][ T3300] hsr_slave_0: entered promiscuous mode [ 29.738087][ T3300] hsr_slave_1: entered promiscuous mode [ 29.743948][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 29.749677][ T3300] Cannot create hsr debugfs directory [ 29.760852][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.771107][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.782790][ T3307] hsr_slave_0: entered promiscuous mode [ 29.788664][ T3307] hsr_slave_1: entered promiscuous mode [ 29.794553][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 29.800312][ T3307] Cannot create hsr debugfs directory [ 29.807010][ T3305] team0: Port device team_slave_0 added [ 29.833550][ T3305] team0: Port device team_slave_1 added [ 29.846714][ T3301] team0: Port device team_slave_0 added [ 29.862858][ T3301] team0: Port device team_slave_1 added [ 29.881329][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.888260][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.914206][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.938608][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.945561][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.971596][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.004264][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.011321][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.037251][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.048226][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.055185][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.081153][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.154369][ T3305] hsr_slave_0: entered promiscuous mode [ 30.161352][ T3305] hsr_slave_1: entered promiscuous mode [ 30.167327][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.173073][ T3305] Cannot create hsr debugfs directory [ 30.183623][ T3301] hsr_slave_0: entered promiscuous mode [ 30.189530][ T3301] hsr_slave_1: entered promiscuous mode [ 30.195273][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.201003][ T3301] Cannot create hsr debugfs directory [ 30.234154][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.257790][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.267911][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.279039][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.355416][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.367594][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.378539][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.391163][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.422057][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.435426][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.445269][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.455171][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.463984][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.472551][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.482693][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.495753][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.529691][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.542748][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.550942][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.559933][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.574049][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.600445][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.619171][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.626304][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.635050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.642120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.688176][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.706632][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.724730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.731855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.743952][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.758666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.765788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.782459][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.793168][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.819020][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.826067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.834596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.841681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856867][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.866280][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.878253][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.885307][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.898390][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.910505][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.917554][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.950492][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.967173][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.974359][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.994973][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.002096][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.022506][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.084029][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.101208][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.157123][ T3299] veth0_vlan: entered promiscuous mode [ 31.171485][ T3299] veth1_vlan: entered promiscuous mode [ 31.188841][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.222309][ T3299] veth0_macvtap: entered promiscuous mode [ 31.247213][ T3299] veth1_macvtap: entered promiscuous mode [ 31.281920][ T3300] veth0_vlan: entered promiscuous mode [ 31.288504][ T3307] veth0_vlan: entered promiscuous mode [ 31.303447][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.311703][ T3305] veth0_vlan: entered promiscuous mode [ 31.319360][ T3300] veth1_vlan: entered promiscuous mode [ 31.327290][ T3307] veth1_vlan: entered promiscuous mode [ 31.337518][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.357218][ T3305] veth1_vlan: entered promiscuous mode [ 31.365503][ T3307] veth0_macvtap: entered promiscuous mode [ 31.380417][ T3307] veth1_macvtap: entered promiscuous mode [ 31.397887][ T311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.406654][ T311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.416084][ T3300] veth0_macvtap: entered promiscuous mode [ 31.423325][ T3300] veth1_macvtap: entered promiscuous mode [ 31.429838][ T311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.443990][ T311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.454506][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.468630][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.484970][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.493622][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.502554][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517186][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.527753][ T3301] veth0_vlan: entered promiscuous mode [ 31.533570][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.547775][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.547785][ T29] audit: type=1400 audit(1755328080.673:81): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.zP95pc/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.578772][ T29] audit: type=1400 audit(1755328080.673:82): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.585455][ T3305] veth0_macvtap: entered promiscuous mode [ 31.600878][ T29] audit: type=1400 audit(1755328080.673:83): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.zP95pc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.608221][ T3305] veth1_macvtap: entered promiscuous mode [ 31.631762][ T29] audit: type=1400 audit(1755328080.673:84): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.646297][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.659117][ T29] audit: type=1400 audit(1755328080.673:85): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.zP95pc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.668910][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.692917][ T29] audit: type=1400 audit(1755328080.673:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.zP95pc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.692963][ T29] audit: type=1400 audit(1755328080.673:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.748032][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.759173][ T3301] veth1_vlan: entered promiscuous mode [ 31.760117][ T29] audit: type=1400 audit(1755328080.873:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.787446][ T29] audit: type=1400 audit(1755328080.873:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=4679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.814113][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.823827][ T3301] veth0_macvtap: entered promiscuous mode [ 31.836594][ T3301] veth1_macvtap: entered promiscuous mode [ 31.842960][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.856014][ T29] audit: type=1400 audit(1755328080.983:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.904616][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.919508][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.922889][ T3471] loop2: detected capacity change from 0 to 2048 [ 31.938650][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.948563][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.961586][ T3293] loop2: p1 < > p4 [ 31.970850][ T3293] loop2: p4 size 8388608 extends beyond EOD, truncated [ 31.977769][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.006022][ T3471] loop2: p1 < > p4 [ 32.030146][ T3471] loop2: p4 size 8388608 extends beyond EOD, truncated [ 32.041316][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041704][ T3476] Zero length message leads to an empty skb [ 32.074251][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.113930][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146874][ T3484] loop1: detected capacity change from 0 to 128 [ 32.155033][ T3428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.175904][ T3481] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 32.180407][ T3407] IPVS: starting estimator thread 0... [ 32.192091][ T3428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.202086][ T3484] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.214497][ T3428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.233888][ T3490] loop4: detected capacity change from 0 to 512 [ 32.240874][ T3484] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.241847][ T3428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.272762][ T3488] IPVS: using max 2784 ests per chain, 139200 per kthread [ 32.281610][ T3490] ======================================================= [ 32.281610][ T3490] WARNING: The mand mount option has been deprecated and [ 32.281610][ T3490] and is ignored by this kernel. Remove the mand [ 32.281610][ T3490] option from the mount to silence this warning. [ 32.281610][ T3490] ======================================================= [ 32.331146][ T3490] EXT4-fs: Ignoring removed bh option [ 32.343356][ T3428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.359050][ T3490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.367531][ T3490] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048) [ 32.463230][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.617331][ T3498] bridge_slave_0: left allmulticast mode [ 32.623194][ T3498] bridge_slave_0: left promiscuous mode [ 32.628946][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.633573][ C0] hrtimer: interrupt took 36090 ns [ 32.644441][ T3498] bridge_slave_1: left allmulticast mode [ 32.650185][ T3498] bridge_slave_1: left promiscuous mode [ 32.655886][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.666418][ T3498] bond0: (slave bond_slave_0): Releasing backup interface [ 32.689228][ T3499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10'. [ 32.698500][ T3498] bond0: (slave bond_slave_1): Releasing backup interface [ 32.727270][ T3473] syz.3.4 (3473) used greatest stack depth: 10232 bytes left [ 32.736218][ T3498] team0: Port device team_slave_0 removed [ 32.754969][ T3498] team0: Port device team_slave_1 removed [ 32.765865][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.773450][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.785141][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.792684][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.857658][ T3485] udevd[3485]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 32.860039][ T3505] loop2: detected capacity change from 0 to 128 [ 32.931674][ T3505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'. [ 32.947565][ T3493] loop4: detected capacity change from 0 to 512 [ 33.025945][ T3513] loop1: detected capacity change from 0 to 512 [ 33.033199][ T3493] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 33.042973][ T3513] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.048010][ T3493] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 33.066231][ T3493] EXT4-fs (loop4): 1 truncate cleaned up [ 33.074212][ T3493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.087659][ T3513] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.14: iget: bad i_size value: -6917529027641081756 [ 33.099081][ T3493] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 33.104913][ T3513] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.14: couldn't read orphan inode 17 (err -117) [ 33.139419][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.289050][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.311340][ T3518] loop2: detected capacity change from 0 to 512 [ 33.320597][ T3518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.333748][ T3518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.355092][ T3518] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.410826][ T3518] EXT4-fs (loop2): 1 truncate cleaned up [ 33.416961][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.442351][ T3518] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 33.517890][ T3526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18'. [ 33.538623][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.685993][ T3513] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 33.693664][ T3513] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14'. [ 34.083339][ T3530] loop4: detected capacity change from 0 to 512 [ 34.143117][ T3530] msdos: Bad value for 'time_offset' [ 34.214834][ T3530] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 34.221376][ T3530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.228960][ T3530] vhci_hcd vhci_hcd.0: Device attached [ 34.470129][ T23] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 34.494909][ T3544] vhci_hcd: connection reset by peer [ 34.502942][ T12] vhci_hcd: stop threads [ 34.507239][ T12] vhci_hcd: release socket [ 34.511752][ T12] vhci_hcd: disconnect device [ 34.517746][ T3552] loop0: detected capacity change from 0 to 128 [ 34.528537][ T3549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 34.598148][ T3552] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.646958][ T3552] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.753867][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.786272][ T3563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26'. [ 34.874919][ T3563] gretap1: entered promiscuous mode [ 34.900954][ T3491] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 34.924973][ T3565] macvlan2: entered promiscuous mode [ 34.930455][ T3565] macvlan2: entered allmulticast mode [ 35.029757][ T3572] loop0: detected capacity change from 0 to 128 [ 35.054131][ T3572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 35.641923][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.738780][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 35.785924][ T3591] loop2: detected capacity change from 0 to 512 [ 35.798188][ T3588] loop3: detected capacity change from 0 to 1024 [ 35.806080][ T3591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.816868][ T3588] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.827800][ T3588] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.852814][ T3588] JBD2: no valid journal superblock found [ 35.858613][ T3588] EXT4-fs (loop3): Could not load journal inode [ 35.868833][ T3595] netlink: 'syz.1.35': attribute type 13 has an invalid length. [ 35.883826][ T3591] EXT4-fs (loop2): 1 truncate cleaned up [ 35.894631][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.933301][ T3588] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 36.034505][ T3595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.062354][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.206695][ T3603] loop2: detected capacity change from 0 to 2048 [ 36.656999][ T3603] EXT4-fs (loop2): failed to initialize system zone (-117) [ 36.719513][ T3613] loop4: detected capacity change from 0 to 1024 [ 36.734200][ T3603] EXT4-fs (loop2): mount failed [ 36.793070][ T29] kauditd_printk_skb: 697 callbacks suppressed [ 36.793089][ T29] audit: type=1326 audit(1755328085.923:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8de4f1d550 code=0x7ffc0000 [ 36.822846][ T29] audit: type=1326 audit(1755328085.923:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8de4f1e7eb code=0x7ffc0000 [ 36.901483][ T29] audit: type=1326 audit(1755328085.923:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8de4f1d84a code=0x7ffc0000 [ 36.924517][ T29] audit: type=1326 audit(1755328085.923:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 36.947655][ T29] audit: type=1326 audit(1755328085.923:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 36.971118][ T29] audit: type=1326 audit(1755328085.923:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 36.994773][ T29] audit: type=1326 audit(1755328085.923:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 37.002619][ T3603] loop2: detected capacity change from 0 to 1024 [ 37.018031][ T29] audit: type=1326 audit(1755328085.923:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 37.018068][ T29] audit: type=1326 audit(1755328085.953:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 37.018102][ T29] audit: type=1326 audit(1755328085.953:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 37.138725][ T3613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.151214][ T3613] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.190745][ T3613] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.39: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.240477][ T3613] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 37.252906][ T3613] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.252906][ T3613] [ 37.268370][ T3622] loop3: detected capacity change from 0 to 512 [ 37.272889][ T3613] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 37.437379][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 37.438053][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.474886][ T3633] capability: warning: `syz.2.43' uses 32-bit capabilities (legacy support in use) [ 37.666251][ T3636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 37.677665][ T3622] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.778854][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.868648][ T3618] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.40: corrupted inode contents [ 37.969127][ T3618] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.40: mark_inode_dirty error [ 37.990318][ T3642] loop2: detected capacity change from 0 to 512 [ 38.003802][ T3618] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.40: corrupted inode contents [ 38.036142][ T3618] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.40: mark_inode_dirty error [ 38.047101][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.061085][ T3642] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.094231][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.253321][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.298849][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 38.819808][ T3652] Set syz1 is full, maxelem 65536 reached [ 38.870529][ T3672] loop4: detected capacity change from 0 to 512 [ 38.885437][ T3672] EXT4-fs: Ignoring removed nobh option [ 38.939403][ T3672] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.53: corrupted inode contents [ 38.954225][ T3672] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.53: mark_inode_dirty error [ 38.966551][ T3672] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.53: corrupted inode contents [ 38.979757][ T3672] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.53: mark_inode_dirty error [ 39.005323][ T3672] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.53: Failed to acquire dquot type 0 [ 39.018146][ T3672] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.53: corrupted inode contents [ 39.224154][ T3681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.247412][ T3678] pimreg: entered allmulticast mode [ 39.263336][ T3672] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.53: mark_inode_dirty error [ 39.306751][ T3678] pimreg: left allmulticast mode [ 39.342666][ T3672] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.53: corrupted inode contents [ 39.438858][ T3672] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.53: mark_inode_dirty error [ 39.450570][ T3672] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.53: corrupted inode contents [ 39.462917][ T3672] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 39.471664][ T3672] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.53: corrupted inode contents [ 39.484091][ T3672] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.53: mark_inode_dirty error [ 39.495208][ T3672] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 39.505297][ T3672] EXT4-fs (loop4): 1 truncate cleaned up [ 39.511412][ T3672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.511729][ T3685] loop2: detected capacity change from 0 to 136 [ 39.526892][ T3672] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.530910][ T23] usb 9-1: enqueue for inactive port 0 [ 39.547024][ T23] usb 9-1: enqueue for inactive port 0 [ 39.555950][ T3685] Attempt to read inode for relocated directory [ 39.658749][ T23] vhci_hcd: vhci_device speed not set [ 39.667683][ T3692] random: crng reseeded on system resumption [ 39.688451][ T3695] loop0: detected capacity change from 0 to 512 [ 39.714032][ T3695] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.726533][ T3695] EXT4-fs (loop0): 1 truncate cleaned up [ 39.732945][ T3695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.847870][ T3705] loop3: detected capacity change from 0 to 2048 [ 39.866052][ T3705] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.884423][ T3699] loop1: detected capacity change from 0 to 32768 [ 39.895208][ T3672] syz.4.53 (3672) used greatest stack depth: 9760 bytes left [ 39.903794][ T3705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.916492][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.928862][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 39.941080][ T3699] loop1: p1 p3 < > [ 40.058611][ T3713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'. [ 40.144608][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.307729][ T3723] loop3: detected capacity change from 0 to 1024 [ 40.343317][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.362667][ T3723] netlink: 'syz.3.64': attribute type 4 has an invalid length. [ 40.385837][ T3723] netlink: 'syz.3.64': attribute type 4 has an invalid length. [ 40.489658][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.524676][ T3730] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.64: Allocating blocks 385-513 which overlap fs metadata [ 40.545284][ T3731] sd 0:0:1:0: device reset [ 40.558307][ T3730] EXT4-fs (loop3): pa ffff888107277230: logic 16, phys. 129, len 24 [ 40.566463][ T3730] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 41.226425][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.249135][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 41.363517][ T3761] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 41.372014][ T3761] netlink: 'syz.0.71': attribute type 13 has an invalid length. [ 41.379668][ T3761] netlink: 'syz.0.71': attribute type 17 has an invalid length. [ 41.464342][ T3761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.536286][ T3770] loop3: detected capacity change from 0 to 128 [ 41.551709][ T3770] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.592528][ T3770] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.597199][ T3773] bridge_slave_0: left allmulticast mode [ 41.608551][ T3773] bridge_slave_0: left promiscuous mode [ 41.614294][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.626224][ T3773] bridge_slave_1: left allmulticast mode [ 41.632223][ T3773] bridge_slave_1: left promiscuous mode [ 41.638413][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.692451][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.738204][ T3773] bond0: (slave bond_slave_0): Releasing backup interface [ 41.761526][ T3773] bond0: (slave bond_slave_1): Releasing backup interface [ 41.768701][ T3767] loop2: detected capacity change from 0 to 512 [ 41.784195][ T3773] team0: Port device team_slave_0 removed [ 41.814847][ T3773] team0: Port device team_slave_1 removed [ 41.823819][ T29] kauditd_printk_skb: 1799 callbacks suppressed [ 41.823835][ T29] audit: type=1400 audit(1755328090.953:2595): avc: denied { create } for pid=3783 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 41.852762][ T3784] loop3: detected capacity change from 0 to 128 [ 41.859681][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.867161][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.877235][ T3767] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 41.878745][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.890961][ T3767] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 41.892680][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.902066][ T3767] EXT4-fs (loop2): 1 truncate cleaned up [ 41.914024][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.945637][ T3776] team0: Mode changed to "loadbalance" [ 41.983082][ T3765] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 42.002320][ T29] audit: type=1400 audit(1755328091.103:2596): avc: denied { mounton } for pid=3783 comm="syz.3.79" path="/20/file0/bus" dev="loop3" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 42.024832][ T29] audit: type=1400 audit(1755328091.103:2597): avc: denied { create } for pid=3764 comm="syz.2.73" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.053786][ T3773] team0: Device veth1_vlan failed to register rx_handler [ 42.059864][ T3791] loop3: detected capacity change from 0 to 1024 [ 42.077013][ T3791] EXT4-fs: Ignoring removed oldalloc option [ 42.083311][ T3791] EXT4-fs: Ignoring removed orlov option [ 42.132286][ T3791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.152103][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.160567][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.169361][ T29] audit: type=1400 audit(1755328091.283:2598): avc: denied { ioctl } for pid=3793 comm="syz.0.82" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.235571][ T29] audit: type=1400 audit(1755328091.333:2599): avc: denied { read } for pid=3798 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.301179][ T29] audit: type=1400 audit(1755328091.413:2600): avc: denied { write } for pid=3798 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.332771][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.437426][ T3801] infiniband syz!: set active [ 42.442164][ T3801] infiniband syz!: added team_slave_0 [ 42.751775][ T3801] RDS/IB: syz!: added [ 42.800863][ T3801] smc: adding ib device syz! with port count 1 [ 42.838797][ T3801] smc: ib device syz! port 1 has pnetid [ 43.166889][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.294011][ T29] audit: type=1400 audit(1755328091.533:2601): avc: denied { firmware_load } for pid=3792 comm="syz.1.81" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 43.318639][ T29] audit: type=1326 audit(1755328091.763:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 43.341915][ T29] audit: type=1326 audit(1755328091.763:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 43.365154][ T29] audit: type=1326 audit(1755328091.763:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de4f1ebe9 code=0x7ffc0000 [ 43.474053][ T3819] loop4: detected capacity change from 0 to 512 [ 43.519547][ T3819] journal_path: Non-blockdev passed as './bus' [ 43.525861][ T3819] EXT4-fs: error: could not find journal device path [ 43.575473][ T3821] loop0: detected capacity change from 0 to 512 [ 43.625946][ T3821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.635919][ T3821] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 43.650286][ T3819] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 43.657868][ T3819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.87'. [ 43.711042][ T3825] netlink: 'syz.4.87': attribute type 13 has an invalid length. [ 43.843528][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.850746][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.917262][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.928730][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.947672][ T3832] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.998258][ T3834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 44.049955][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.059156][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.234497][ T3840] loop3: detected capacity change from 0 to 512 [ 44.493430][ T3840] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.501587][ T3840] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.510144][ T3840] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.90: corrupted inode contents [ 44.525802][ T3840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.532652][ T3840] EXT4-fs (loop3): 1 truncate cleaned up [ 44.794999][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.837649][ T3841] gretap1: entered promiscuous mode [ 44.860966][ T311] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.871518][ T311] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.902239][ T311] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.913209][ T3840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.972409][ T3834] macvlan2: entered promiscuous mode [ 44.977793][ T3834] macvlan2: entered allmulticast mode [ 44.987641][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.111189][ T3865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 45.172735][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.185044][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.204449][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.406220][ T3875] SELinux: Context Ü is not valid (left unmapped). [ 45.527060][ T23] IPVS: starting estimator thread 0... [ 45.620264][ T3879] IPVS: using max 2544 ests per chain, 127200 per kthread [ 45.641140][ T3877] loop2: detected capacity change from 0 to 512 [ 45.655113][ T3877] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.100: error while reading EA inode 32 err=-116 [ 45.669035][ T3877] EXT4-fs (loop2): Remounting filesystem read-only [ 45.675673][ T3877] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 45.685869][ T3877] EXT4-fs (loop2): 1 orphan inode deleted [ 45.692134][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.705957][ T3877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.950998][ T3889] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 45.998733][ T3892] loop0: detected capacity change from 0 to 512 [ 46.015930][ T3892] EXT4-fs: Ignoring removed bh option [ 46.041161][ T3892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.049667][ T3892] EXT4-fs (loop0): fragment/cluster size (4096) != block size (2048) [ 46.217573][ T3903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.246943][ T3903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.290758][ T3903] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 46.323402][ T3903] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 46.354253][ T3908] gretap1: entered promiscuous mode [ 46.363763][ T3908] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 46.375456][ T3906] pimreg: entered allmulticast mode [ 46.388000][ T3906] pimreg: left allmulticast mode [ 46.401967][ T3903] macvlan2: entered promiscuous mode [ 46.407384][ T3903] macvlan2: entered allmulticast mode [ 46.414130][ T3903] bond1: entered promiscuous mode [ 46.419612][ T3903] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.428877][ T3903] bond1: left promiscuous mode [ 46.521302][ T3915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.568472][ T3920] loop3: detected capacity change from 0 to 512 [ 46.581590][ T3920] journal_path: Non-blockdev passed as './bus' [ 46.587828][ T3920] EXT4-fs: error: could not find journal device path [ 46.600556][ T3920] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 46.608279][ T3920] netlink: 224 bytes leftover after parsing attributes in process `syz.3.112'. [ 46.653376][ T3920] netlink: 'syz.3.112': attribute type 13 has an invalid length. [ 46.749152][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.756531][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.806559][ T3920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.817979][ T3920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.887539][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.907092][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.927393][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.938141][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.943364][ T3926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.114'. [ 47.019392][ T3929] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.152516][ T3932] loop3: detected capacity change from 0 to 512 [ 47.159255][ T3932] EXT4-fs: Ignoring removed nobh option [ 47.195553][ T3932] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.116: corrupted inode contents [ 47.337750][ T3932] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.116: mark_inode_dirty error [ 47.379710][ T3932] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.116: corrupted inode contents [ 47.836663][ T3932] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.116: mark_inode_dirty error [ 47.898882][ T3932] __quota_error: 277 callbacks suppressed [ 47.898963][ T3932] Quota error (device loop3): write_blk: dquota write failed [ 48.020508][ T3932] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 48.333833][ T3932] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.116: Failed to acquire dquot type 0 [ 48.395331][ T3932] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.116: corrupted inode contents [ 48.437715][ T3932] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.116: mark_inode_dirty error [ 48.478928][ T3932] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.116: corrupted inode contents [ 48.521482][ T3932] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.116: mark_inode_dirty error [ 48.559129][ T3932] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.116: corrupted inode contents [ 48.585281][ T3950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.593264][ T3932] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 48.611368][ T3932] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.116: corrupted inode contents [ 48.632022][ T3950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.638847][ T3932] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.116: mark_inode_dirty error [ 48.650501][ T3950] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 48.662099][ T3932] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 48.672942][ T3950] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 48.681855][ T3932] EXT4-fs (loop3): 1 truncate cleaned up [ 48.701548][ T3932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.731884][ T3932] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.754946][ T3952] gretap1: entered promiscuous mode [ 48.763344][ T3952] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 48.794821][ T3953] macvlan2: entered promiscuous mode [ 48.800300][ T3953] macvlan2: entered allmulticast mode [ 48.841801][ T29] audit: type=1326 audit(1755328097.973:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 48.881434][ T3953] bond1: entered promiscuous mode [ 48.901322][ T3953] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.911592][ T29] audit: type=1326 audit(1755328098.003:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 48.935022][ T29] audit: type=1326 audit(1755328098.003:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 48.958486][ T29] audit: type=1326 audit(1755328098.003:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 48.982169][ T29] audit: type=1326 audit(1755328098.003:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 49.005532][ T29] audit: type=1326 audit(1755328098.003:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 49.029182][ T29] audit: type=1326 audit(1755328098.003:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 49.052570][ T29] audit: type=1326 audit(1755328098.003:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9ace7ebe9 code=0x7ffc0000 [ 49.069005][ T3956] random: crng reseeded on system resumption [ 49.083210][ T3960] netlink: 132 bytes leftover after parsing attributes in process `syz.4.123'. [ 49.092286][ T3953] bond1: left promiscuous mode [ 49.113447][ T3961] bridge_slave_0: left allmulticast mode [ 49.119157][ T3961] bridge_slave_0: left promiscuous mode [ 49.124816][ T3961] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.185651][ T3961] bridge_slave_1: left allmulticast mode [ 49.191601][ T3961] bridge_slave_1: left promiscuous mode [ 49.194089][ T3969] loop0: detected capacity change from 0 to 1024 [ 49.197873][ T3961] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.215380][ T3969] EXT4-fs: Ignoring removed orlov option [ 49.237519][ T3961] bond0: (slave bond_slave_0): Releasing backup interface [ 49.255020][ T3969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.281471][ T3969] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.290752][ T3961] bond0: (slave bond_slave_1): Releasing backup interface [ 49.303576][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.316436][ T3961] team0: Port device team_slave_0 removed [ 49.324934][ T3961] team0: Port device team_slave_1 removed [ 49.331138][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.352893][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.386659][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'. [ 49.395668][ T3969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 49.404597][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'. [ 49.415526][ T3969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 49.449751][ T3969] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.124: bg 0: block 88: padding at end of block bitmap is not set [ 49.493146][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.514898][ T3982] loop0: detected capacity change from 0 to 128 [ 49.600674][ T3985] syz.0.126: attempt to access beyond end of device [ 49.600674][ T3985] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 49.617087][ T3985] syz.0.126: attempt to access beyond end of device [ 49.617087][ T3985] loop0: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 49.631825][ T3985] syz.0.126: attempt to access beyond end of device [ 49.631825][ T3985] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 49.645445][ T3985] syz.0.126: attempt to access beyond end of device [ 49.645445][ T3985] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 49.694971][ T3985] syz.0.126: attempt to access beyond end of device [ 49.694971][ T3985] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 49.708806][ T3987] syz!: rxe_newlink: already configured on team_slave_0 [ 49.730184][ T3985] syz.0.126: attempt to access beyond end of device [ 49.730184][ T3985] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 49.779183][ T3985] syz.0.126: attempt to access beyond end of device [ 49.779183][ T3985] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 49.793294][ T3985] syz.0.126: attempt to access beyond end of device [ 49.793294][ T3985] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 49.807841][ T3985] syz.0.126: attempt to access beyond end of device [ 49.807841][ T3985] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 49.834172][ T3985] syz.0.126: attempt to access beyond end of device [ 49.834172][ T3985] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 49.954857][ T3998] loop0: detected capacity change from 0 to 512 [ 49.975478][ T4002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.990545][ T3998] journal_path: Non-blockdev passed as './bus' [ 49.996781][ T3998] EXT4-fs: error: could not find journal device path [ 50.017329][ T4002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.025625][ T4001] loop2: detected capacity change from 0 to 1024 [ 50.035595][ T4002] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 50.047611][ T4001] EXT4-fs: Ignoring removed oldalloc option [ 50.055055][ T4001] EXT4-fs: Ignoring removed orlov option [ 50.063268][ T4002] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 50.086122][ T4001] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.099831][ T3998] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 50.107660][ T3998] netlink: 224 bytes leftover after parsing attributes in process `syz.0.133'. [ 50.123969][ T4004] gretap1: entered promiscuous mode [ 50.134875][ T4004] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 50.144499][ T3998] netlink: 'syz.0.133': attribute type 13 has an invalid length. [ 50.146487][ T4005] macvlan2: entered promiscuous mode [ 50.157675][ T4005] macvlan2: entered allmulticast mode [ 50.163796][ T4005] bond1: entered promiscuous mode [ 50.169244][ T4005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.176869][ T4005] bond1: left promiscuous mode [ 50.176988][ T4001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.223505][ T4001] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.132: Allocating blocks 497-513 which overlap fs metadata [ 50.319427][ T4011] loop3: detected capacity change from 0 to 2048 [ 50.351052][ T3293] loop3: p1 < > p4 [ 50.356296][ T3293] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.368468][ T4011] loop3: p1 < > p4 [ 50.373623][ T4011] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.439760][ T3858] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.450680][ T3858] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.459805][ T3858] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.471171][ T3858] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.548619][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.777584][ T4033] loop2: detected capacity change from 0 to 512 [ 50.796509][ T4033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.105131][ T4033] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.228476][ T4033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 51.355656][ T4044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.403284][ T4044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.421304][ T4044] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 51.433408][ T4044] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 51.458425][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.477466][ T4047] macvlan2: entered promiscuous mode [ 51.482825][ T4047] macvlan2: entered allmulticast mode [ 51.488660][ T4047] bond2: entered promiscuous mode [ 51.495305][ T4047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 51.580299][ T4047] bond2: left promiscuous mode [ 51.609144][ T4053] bridge_slave_0: left allmulticast mode [ 51.609166][ T4053] bridge_slave_0: left promiscuous mode [ 51.609352][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.616007][ T4053] bridge_slave_1: left allmulticast mode [ 51.616026][ T4053] bridge_slave_1: left promiscuous mode [ 51.616168][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.617980][ T4052] loop1: detected capacity change from 0 to 512 [ 51.654181][ T4052] journal_path: Non-blockdev passed as './bus' [ 51.654201][ T4052] EXT4-fs: error: could not find journal device path [ 51.666007][ T4053] bond0: (slave bond_slave_0): Releasing backup interface [ 51.667121][ T4053] bond0: (slave bond_slave_1): Releasing backup interface [ 51.668500][ T4053] team0: Port device team_slave_0 removed [ 51.669418][ T4053] team0: Port device team_slave_1 removed [ 51.669744][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.670210][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.671062][ T4053] bond1: (slave gretap1): Releasing backup interface [ 51.673657][ T4057] team0: Mode changed to "loadbalance" [ 51.684573][ T4053] team0: Device veth1_vlan failed to register rx_handler [ 51.695403][ T4052] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 51.749334][ T4052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.149'. [ 51.770498][ T4052] netlink: 'syz.1.149': attribute type 13 has an invalid length. [ 51.800607][ T4062] netlink: 'syz.2.148': attribute type 5 has an invalid length. [ 51.928052][ T4072] loop0: detected capacity change from 0 to 512 [ 51.958915][ T4072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.986327][ T4072] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.010308][ T4066] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.152: corrupted inode contents [ 52.035469][ T4066] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.152: mark_inode_dirty error [ 52.053486][ T3858] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.060310][ T4066] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.152: corrupted inode contents [ 52.074990][ T3858] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.087610][ T4066] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.152: mark_inode_dirty error [ 52.090071][ T3858] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.108000][ T3858] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.138220][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.384920][ T4085] loop3: detected capacity change from 0 to 512 [ 52.412769][ T4085] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 52.422224][ T4085] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 52.434044][ T4085] EXT4-fs (loop3): 1 truncate cleaned up [ 52.440390][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.456581][ T4085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 52.522317][ T4088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.547047][ T4089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 52.556014][ T4089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.157'. [ 52.585431][ T4088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.624389][ T4088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.637552][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.673463][ T4088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.740945][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.749590][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.779882][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.791219][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.879299][ T4101] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.961141][ T4103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.000934][ T4108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.008191][ T4108] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 53.069190][ T4109] loop1: detected capacity change from 0 to 2048 [ 53.087511][ T4108] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 53.130063][ T4103] gretap1: entered promiscuous mode [ 53.139502][ T4103] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 53.173136][ T4110] macvlan2: entered promiscuous mode [ 53.178437][ T4110] macvlan2: entered allmulticast mode [ 53.191279][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 53.191293][ T29] audit: type=1326 audit(1755328102.313:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.192446][ T4109] EXT4-fs (loop1): failed to initialize system zone (-117) [ 53.197484][ T29] audit: type=1326 audit(1755328102.313:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.251080][ T29] audit: type=1326 audit(1755328102.313:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.274421][ T29] audit: type=1326 audit(1755328102.313:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.281882][ T4110] bond1: entered promiscuous mode [ 53.297738][ T29] audit: type=1326 audit(1755328102.313:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.326026][ T29] audit: type=1326 audit(1755328102.313:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.326860][ T4110] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.349414][ T29] audit: type=1326 audit(1755328102.313:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.349442][ T29] audit: type=1326 audit(1755328102.313:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.360336][ T4109] EXT4-fs (loop1): mount failed [ 53.408833][ T4110] bond1: left promiscuous mode [ 53.454053][ T29] audit: type=1326 audit(1755328102.543:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.477423][ T29] audit: type=1326 audit(1755328102.543:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a92ebe9 code=0x7ffc0000 [ 53.546646][ T4114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.604513][ T4116] bridge_slave_0: left allmulticast mode [ 53.610261][ T4116] bridge_slave_0: left promiscuous mode [ 53.616115][ T4116] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.631600][ T4118] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 53.642599][ T4118] netlink: 'syz.4.164': attribute type 13 has an invalid length. [ 53.643866][ T4116] bridge_slave_1: left allmulticast mode [ 53.650521][ T4118] netlink: 'syz.4.164': attribute type 17 has an invalid length. [ 53.656223][ T4116] bridge_slave_1: left promiscuous mode [ 53.669586][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.694615][ T4120] loop3: detected capacity change from 0 to 1024 [ 53.701605][ T4116] bond0: (slave bond_slave_0): Releasing backup interface [ 53.737298][ T4116] bond0: (slave bond_slave_1): Releasing backup interface [ 53.749254][ T4116] team0: Port device team_slave_0 removed [ 53.749414][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.785234][ T4120] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.805126][ T4116] team0: Port device team_slave_1 removed [ 53.820783][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.828268][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.841086][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.844429][ T4120] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.165: lblock 1 mapped to illegal pblock 1 (length 15) [ 53.848482][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.871198][ T4120] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 53.883641][ T4120] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.883641][ T4120] [ 53.906210][ T4116] bond1: (slave gretap1): Releasing backup interface [ 53.939366][ T4120] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.961896][ T4118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.970769][ T4118] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.980899][ T4118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.997280][ T4122] team0: Mode changed to "loadbalance" [ 54.011261][ T4131] team0: Device veth1_vlan failed to register rx_handler [ 54.083657][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.145304][ T4148] netlink: 'syz.4.169': attribute type 5 has an invalid length. [ 54.277367][ T4154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.289060][ T4156] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 54.297231][ T4154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.305689][ T4154] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 54.317743][ T4154] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 54.322309][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.333845][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.347528][ T4159] macvlan2: entered promiscuous mode [ 54.352845][ T4159] macvlan2: entered allmulticast mode [ 54.384230][ T4159] bond2: entered promiscuous mode [ 54.389863][ T4159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.399241][ T4159] bond2: left promiscuous mode [ 54.727555][ T4167] loop0: detected capacity change from 0 to 164 [ 54.754355][ T4167] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 54.986926][ T4175] loop1: detected capacity change from 0 to 512 [ 54.997292][ T4177] __nla_validate_parse: 3 callbacks suppressed [ 54.997306][ T4177] netlink: 132 bytes leftover after parsing attributes in process `syz.3.180'. [ 55.108380][ T4175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.140549][ T4175] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.179676][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 55.335122][ T4191] loop2: detected capacity change from 0 to 512 [ 55.447867][ T4191] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 1: comm syz.2.183: invalid block [ 55.461424][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.471931][ T4191] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.183: couldn't read orphan inode 11 (err -117) [ 55.509010][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.649263][ T4191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 55.658752][ T4198] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 55.686732][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.699345][ T4201] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 55.787491][ T4208] random: crng reseeded on system resumption [ 55.854253][ T4194] loop1: detected capacity change from 0 to 512 [ 55.881864][ T4194] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 55.889871][ T4194] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 55.899821][ T4194] EXT4-fs (loop1): 1 truncate cleaned up [ 55.909209][ T4194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.966355][ T4194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 56.056171][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.102507][ T4220] tipc: Started in network mode [ 56.107380][ T4220] tipc: Node identity 6a07788c3b39, cluster identity 4711 [ 56.114644][ T4220] tipc: Enabled bearer , priority 0 [ 56.122308][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.128836][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.135890][ T3858] tipc: Resetting bearer [ 56.141914][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.153396][ T4224] loop1: detected capacity change from 0 to 128 [ 56.165140][ T4222] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.193'. [ 56.186527][ T4220] infiniband syz2: set down [ 56.191119][ T4220] infiniband syz2: added vxcan1 [ 56.196038][ T3409] vxcan1 speed is unknown, defaulting to 1000 [ 56.210554][ T4220] RDS/IB: syz2: added [ 56.216233][ T4220] smc: adding ib device syz2 with port count 1 [ 56.222684][ T4220] smc: ib device syz2 port 1 has pnetid [ 56.228602][ T3381] vxcan1 speed is unknown, defaulting to 1000 [ 56.235101][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.272629][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.307364][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.349927][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.389465][ T4220] vxcan1 speed is unknown, defaulting to 1000 [ 56.452923][ T4219] tipc: Resetting bearer [ 56.464824][ T4219] tipc: Disabling bearer [ 56.616126][ T4224] ================================================================== [ 56.624237][ T4224] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 56.632312][ T4224] [ 56.634639][ T4224] write to 0xffff8881257a1528 of 8 bytes by task 4222 on cpu 0: [ 56.642288][ T4224] filemap_splice_read+0x4f4/0x740 [ 56.647401][ T4224] splice_direct_to_actor+0x26c/0x680 [ 56.652774][ T4224] do_splice_direct+0xda/0x150 [ 56.657550][ T4224] do_sendfile+0x380/0x650 [ 56.661983][ T4224] __x64_sys_sendfile64+0x105/0x150 [ 56.667186][ T4224] x64_sys_call+0x2bb0/0x2ff0 [ 56.671864][ T4224] do_syscall_64+0xd2/0x200 [ 56.676378][ T4224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.682303][ T4224] [ 56.684619][ T4224] write to 0xffff8881257a1528 of 8 bytes by task 4224 on cpu 1: [ 56.692240][ T4224] filemap_splice_read+0x4f4/0x740 [ 56.697346][ T4224] splice_direct_to_actor+0x26c/0x680 [ 56.702713][ T4224] do_splice_direct+0xda/0x150 [ 56.707477][ T4224] do_sendfile+0x380/0x650 [ 56.711908][ T4224] __x64_sys_sendfile64+0x105/0x150 [ 56.717142][ T4224] x64_sys_call+0x2bb0/0x2ff0 [ 56.721818][ T4224] do_syscall_64+0xd2/0x200 [ 56.726323][ T4224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.732215][ T4224] [ 56.734533][ T4224] value changed: 0x000000000000049f -> 0x00000000000004a0 [ 56.741631][ T4224] [ 56.743965][ T4224] Reported by Kernel Concurrency Sanitizer on: [ 56.750117][ T4224] CPU: 1 UID: 0 PID: 4224 Comm: syz.1.193 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(voluntary) [ 56.762444][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.772515][ T4224] ==================================================================