last executing test programs: 18.060271295s ago: executing program 1 (id=41): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f0000000440)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="0412"]) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000fff1f9a9232472a33fd1c2840ad928098c0231e2da6b944ccbd35f24e3714234878a5a3ca1243ed0bc04dcbd83e5f518fb9fca143b19723e5fb6033c0783271e706892ff20c17d75349a78a323c57f3f72323d46b5e2a052e6da5b319773d5e030150b2adfa6e7ec516a91256b24a3f855e024c0a503"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = io_uring_setup(0x3103, &(0x7f0000000940)={0x0, 0x4bb2, 0x800, 0x2, 0x249}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000af6000/0x2000)=nil, 0x2000, 0x0, 0x8031, r1, 0x947d5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000001440)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xd4\x06\xe8>1\xf5\xd3LY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xee7W\x95\x13\xc7.\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000030000ca000000100800000000616100"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r1}, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpon=interleave=static:0,\x00']) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {r8, r9/1000+10000}}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 17.643172061s ago: executing program 1 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd4d", 0xd}}, 0xee) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0xc4) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 17.455253494s ago: executing program 1 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 17.382326255s ago: executing program 1 (id=49): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x76, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) write$binfmt_script(r7, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17.298511536s ago: executing program 1 (id=51): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x48000200, &(0x7f0000000080)="242a129a5558eec249d8c33e1b97364dd6dbbfcd0dc5c5ae5594fcbd714fc461be068333d421be6933617930306ecddc7d1e30eb5dde8ae3959cbbb4e08a01266b22d759988c2a5770203adc569cf2892409dc0297adc9b95c06c39d20c149c40735fa78da2385c4410f04d9c393dd5f3d1779d03c92b29d395043357b708f64a62ef21438c08b112e7ebe2df157bfa6e4b5fa31e8f36623b05c63a2bd1c2cd0613df7a7f7ecf5c5", 0xa8, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x42e8c601, 0x0, 0x0, 0x0, 0xe4e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="97100000", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf25100000000c000280060002004e22000008000500060000004400018008000b00736970000c0007002200000000000000080005000000000008000b00736970000c0007003c000000000000000700060073680000080009000a0000000800060066680000080005000700000008000400ff03000030000280080003000100000014000100e000000100000000000000000000000006000b0002000000080008000200000008000600040000000800040008000000080005000d0000003000038008000100010000001400060000000000000000000000ffffe000000108000100020000000600040006000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000000) readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r4 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$eventfd(r2, &(0x7f00000003c0), 0x8) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.097098489s ago: executing program 1 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25010000000c0001", @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020207025000000002dba51bd7b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000000000000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="eceb2950b9e61b0edad00be07bbca19e613b48379d2f60218aadf62b1141c1f6535ea7e7eea9ada9c4c7dc7afc977d96c6c26026242ab806cfc4995ba0ddb27119e07b3b82e8182f3d3e83374e027a915028ffb634b2becaa23ee6ef1cb91f0bb2bd49628f6390a754dbaf650e6141efd48b664941ea610b12"], 0x1c}}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000005c0)=""/245) 17.070705729s ago: executing program 32 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25010000000c0001", @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020207025000000002dba51bd7b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000000000000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="eceb2950b9e61b0edad00be07bbca19e613b48379d2f60218aadf62b1141c1f6535ea7e7eea9ada9c4c7dc7afc977d96c6c26026242ab806cfc4995ba0ddb27119e07b3b82e8182f3d3e83374e027a915028ffb634b2becaa23ee6ef1cb91f0bb2bd49628f6390a754dbaf650e6141efd48b664941ea610b12"], 0x1c}}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000005c0)=""/245) 2.991688439s ago: executing program 0 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd4d", 0xd}}, 0xee) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0xc4) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.759152103s ago: executing program 0 (id=223): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x48000200, &(0x7f0000000080)="242a129a5558eec249d8c33e1b97364dd6dbbfcd0dc5c5ae5594fcbd714fc461be068333d421be6933617930306ecddc7d1e30eb5dde8ae3959cbbb4e08a01266b22d759988c2a5770203adc569cf2892409dc0297adc9b95c06c39d20c149c40735fa78da2385c4410f04d9c393dd5f3d1779d03c92b29d395043357b708f64a62ef21438c08b112e7ebe2df157bfa6e4b5fa31e8f36623b05c63a2bd1c2cd0613df7a7f7ecf5c5", 0xa8, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x42e8c601, 0x0, 0x0, 0x0, 0xe4e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000000) readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r4, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$eventfd(r2, &(0x7f00000003c0), 0x8) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.758750163s ago: executing program 3 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) write$selinux_user(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 2.411541207s ago: executing program 3 (id=227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) llistxattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRES32=r6, @ANYBLOB="59900d"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020207025000000002dba51bd7b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000000000000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="eceb2950b9e61b0edad00be07bbca19e613b48379d2f60218aadf62b1141c1f6535ea7e7eea9ada9c4c7dc7afc977d96c6c26026242ab806cfc4995ba0ddb27119e07b3b82e8182f3d3e83374e027a915028ffb634b2becaa23ee6ef1cb91f0bb2bd49628f6390a754dbaf650e6141efd48b664941ea610b12"], 0x1c}}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r13, &(0x7f0000000200)={0x1d, r14}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000005c0)=""/245) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 2.106253212s ago: executing program 4 (id=229): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/148, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/223, 0xdf) r0 = socket(0x8, 0x3, 0xdd01) connect$netlink(r0, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/87, 0x57) getsockname$unix(r0, &(0x7f0000000280), &(0x7f0000000300)=0x6e) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1c, 0x0, 0x10000, 0x10, 0x800, r1, 0x7ff, '\x00', 0x0, r2, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000480)=@req3={0x80, 0x9, 0x81, 0x8, 0xffffff54, 0x7e3}, 0x1c) rmdir(&(0x7f00000004c0)='./file0\x00') r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xs_stream_read_request\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r4 = getpgid(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0xe, 0x6, 0x1, 0x0, 0x8, 0x34613, 0x693f89273c8a0ac4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc9, 0x1, @perf_config_ext={0x7, 0x2}, 0x8800, 0xe8e, 0x400, 0x6, 0x81, 0x401, 0x8000, 0x0, 0xc4, 0x0, 0x2}, r4, 0x1, r3, 0x8) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e20, @multicast2}, {0x302, @local}, 0x14, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'pimreg\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x70, 0x0, &(0x7f0000000880)=[@clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/167, 0xa7, 0x2, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/109, 0x6d, 0x2, 0xa}}, &(0x7f0000000840)={0x0, 0x18, 0x40}}}], 0x17, 0x0, &(0x7f0000000900)="580cbaff128345a277ba3baa5d8036f6c389f97cf8e776"}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x110, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x40}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbff3459f0d0f1f993199ba7736121264e67c5e1dfdfe4f5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "efa9fe90613e1a8804b223f59064881065cdbc6dd9642150"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d338987a3119b9714e86c164d809896a952b71696874a2e9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "87261d7c03fced8056debd5b68b12c45df9794e07e592acb"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x110}, 0x1, 0x0, 0x0, 0x22004800}, 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) r10 = ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ppoll(&(0x7f0000000d80)=[{r10, 0x10}, {r3, 0x100}, {r6, 0x200}, {r3, 0x1}, {r0, 0x28}], 0x5, &(0x7f0000000dc0)={0x77359400}, &(0x7f0000000e00)={[0x9]}, 0x8) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000fc0)={&(0x7f0000000e40), 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49dbd1a6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x54b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1088}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000001000)={0x0, 0x10000}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000001080)={r11, 0x7}, &(0x7f00000010c0)=0x8) 2.000225143s ago: executing program 3 (id=230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRES32=r6, @ANYBLOB="59900d"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020207025000000002dba51bd7b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000000000000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="eceb2950b9e61b0edad00be07bbca19e613b48379d2f60218aadf62b1141c1f6535ea7e7eea9ada9c4c7dc7afc977d96c6c26026242ab806cfc4995ba0ddb27119e07b3b82e8182f3d3e83374e027a915028ffb634b2becaa23ee6ef1cb91f0bb2bd49628f6390a754dbaf650e6141efd48b664941ea610b12"], 0x1c}}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r13, &(0x7f0000000200)={0x1d, r14}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000005c0)=""/245) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.820935066s ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000100)={'system_u:object_r:crack_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x9}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000002c0)=""/3, 0x3, 0x0, &(0x7f0000000300)=""/58, 0x3a}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@grpid}, {@errors_remount}, {@dioread_nolock}, {@delalloc}, {@jqfmt_vfsv1}]}, 0xf5, 0x485, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$selinux_access(r2, &(0x7f0000000100)={'system_u:object_r:crack_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x9}, 0x4e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000002c0)=""/3, 0x3, 0x0, &(0x7f0000000300)=""/58, 0x3a}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@grpid}, {@errors_remount}, {@dioread_nolock}, {@delalloc}, {@jqfmt_vfsv1}]}, 0xf5, 0x485, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tlB9yMDEaTTxoNNEDxtO6LQQpYKAmQIiiB4zxYEi8G48m/gWe9GLUk4lXvBsSYriAntbMzkx/LLulLVu2sJ9PMux7M7O89903b/fNe7sNoGeNZP8kEesj4nJEDEdEpfmEkfzhxrXztX+vna8lUa+/80+SPS2uXztfK/6LxpZZl++o14v8mhblXnw/ojo1NXmqyI9NH/9o7PTZc88fPV49Mnlk8sT4wYP79m4fODC+vyNxZnFd3/rJyW1bXn/v0pu1Q5c++O2HrL7ri+NlHJ00kr+6LT3V6cK6bMOcdFLpYkVYkqzd+ovtcgxHXwzNHBuO1z7vauWAlVZp9flcuFAH7mHZQB3oReUHfXb/W253aNyxKlx9OZ/wyOK+UWz5kUqkxTn9Tfe3nTQYEYcu/PdttsUKzUMAAMz1Uzb+ea7V+C+Nh+acd1+xhrIxIu6PiE0R8UBEbI6IByMa5z4cEY8ssfzmFZKbxz/plXnZet8SS1hYNv57sVjbmj/+K0d/sbGvyG1oxN+fHD46Nbm7eE12Rf+aLL9n3lPm+/nVP79u3vdVMc0+Mmf8l21Z+fMjTK80T9BNVKertx957upnEVsrreJPZtYBk4jYEhFbl1nG0We+39buWKv4y7HwLXVgnan+XcTTeftfiKb4S0nb9ck9LxwY3z82GFOTu8fKq+Jmv/9x8e125d9W/B2Qtf/altd/Hn92j5gMRpw+e+5YY7329DIK+euLWtLm0OZbxn/z9V/bGTGQvNtID5RnFY8DyRvZw1C5/0x1evrU+Oxzy/yZ6vRMb921Yzb+asz2/0357VnjlXg0IrKLeHtEPBYRjxdt90REPBkROxYI/9dXdn7Y7lj79l9gVr6DsvafWKD9s7e8LDXb/ktIpNFI9B375cd25dcX1f77GqldxZ7FvP8ttqa389oBAADA3SJtfAc+SUdn0mk6Opp/h39zrE0rEfHs4ZMfn5jIvyu/MfrTcqZreM586J5ibrjMjzfl9xbzxt/0DTXyo7WTUxPdDh563Lo2/T/zd2eXWoDVqHkdrd1iDXDv8XtN6F36P/Qu/R9610vdrgDQHQOtd396p+sBdMXSx/+DK1IP4M5z/w+9S/+H3qX/Q09q+9v4dHk/+b/LE5XVUY2WiaHVUY0yEemqqEbnEm99mXeJFS5rw1KfVVn0H7NYZmJNy0PdfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojP8DAAD//xIp1kc=") (async) 1.741596986s ago: executing program 4 (id=232): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1.684851887s ago: executing program 0 (id=233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.648863528s ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e06", 0xab}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) sendmmsg$inet6(r4, &(0x7f000000c140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d00)="743b7ddac825c248", 0x8}, {&(0x7f0000002d40)="369a21388564386b676b0afdd78acfaa54a92b16598cc438243fef941f3943d69bb2b7efc91a88f7d96fd07cc0395916e5a2207150b53fe9923c9ab235282452c3c9ed967ae2e5d131796e78575ea2826e6717f8e8dd2049429c0afb59f9eb706e112cecb381a281859b537f49ce63c0703ad9490e55592869f3517fe0345e989eb681bc2436d02d2f3b01e34d8251255b39278d2412b63bd4473791bfd453a2e170fb362e50a647cc36fe550e0424e808e67bed0140759c7c7602af75b69b68b5978e0cd4b99b622e3fe428170337db38d73baca557ca53f22fbbf824408e72c2776cc0c004f32cf8ce0d42880a7b570e99c0d9aa451e1ba0", 0xf9}, {&(0x7f0000002e40)="8f1ceb135a882c9ee5552789f23a116684243c53acf19a707e4e0976321684d50c1767dd3e6bcf9631858e89fff6c41de7835ee1153d1012bf705bbc5a8d4ee55d2dad58c1405487725dca2edfd98ffb7c2951a7f4b1c675f87303c8138b2ec96515d7b072f16e35b2f8e029dad42eaa97c6e7652f94d6412e2f87", 0x7b}, {&(0x7f0000009f40)="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", 0x461}], 0x4}}], 0x5, 0x20048090) 1.648016278s ago: executing program 3 (id=236): r0 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000180001002dbd7000000000001d0100001500010000000000fc0000003bad90732d8c59f707000000080005000103000208000e00", @ANYRES32=0xee01, @ANYBLOB="d7fd463af6c26e9cc677c877ab4df259e010222b5e83aa88371a64699833515c40c3d27665c329061a34011c034a456800f0dfc8e185f7dd349646acb1cc5a4ce00125fe9de83cb168d3f397427bd6df5fe7c8749ca392baf60f8b744fe758"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0xa, 0x8, 0x7fff, 0x4, 0x1, 0xf}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c0009000800"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000c5878a129bc29de5099c58b6000000000090892bef5d31e1e4720214e44300b6c0fc587350c5abf9b9516617f7454bf0955398ebe455795b27892575a4a28989703403fce65c1f3c9daa2547986178af782a638efff113bd1e080dd8a13b475122a4289d1b0390d646a36b2b627fc9424a436f211d592bcbb4d11b01c3149a3efb50235c9ba60c0831f2f77b105bf57c8ff6e9f803ce6de8169a1e"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRESDEC=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xec, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.603623528s ago: executing program 4 (id=237): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x70103, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000500)=""/136, 0x88, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0xf4, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0x1, 0x3, 0x0, 0x0, 0x9}}) 1.562829659s ago: executing program 3 (id=239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3a67, 0x8401) unlink(&(0x7f00000007c0)='./cgroup\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x181880, 0x0) openat(r3, &(0x7f0000004280)='.\x00', 0x60000, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000280)={0x6, [0x1, 0xff28, 0xa, 0x7, 0x100, 0x9]}, &(0x7f0000000380)=0x10) write$eventfd(r5, &(0x7f0000000240)=0x9, 0x8) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x9) r8 = syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17ec, 0x400, 0x2, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900)) io_uring_register$IORING_UNREGISTER_NAPI(r8, 0x1c, &(0x7f0000001980), 0x1) fallocate(r5, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x8, 0x0, 0x2}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 1.518312859s ago: executing program 2 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000400000100c28000050003"], 0x50}}, 0x0) 1.45627966s ago: executing program 2 (id=241): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/148, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/223, 0xdf) r0 = socket(0x8, 0x3, 0xdd01) connect$netlink(r0, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/87, 0x57) getsockname$unix(r0, &(0x7f0000000280), &(0x7f0000000300)=0x6e) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1c, 0x0, 0x10000, 0x10, 0x800, r1, 0x7ff, '\x00', 0x0, r2, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000480)=@req3={0x80, 0x9, 0x81, 0x8, 0xffffff54, 0x7e3}, 0x1c) rmdir(&(0x7f00000004c0)='./file0\x00') r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xs_stream_read_request\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r4 = getpgid(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0xe, 0x6, 0x1, 0x0, 0x8, 0x34613, 0x693f89273c8a0ac4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc9, 0x1, @perf_config_ext={0x7, 0x2}, 0x8800, 0xe8e, 0x400, 0x6, 0x81, 0x401, 0x8000, 0x0, 0xc4, 0x0, 0x2}, r4, 0x1, r3, 0x8) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e20, @multicast2}, {0x302, @local}, 0x14, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'pimreg\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x70, 0x0, &(0x7f0000000880)=[@clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/167, 0xa7, 0x2, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/109, 0x6d, 0x2, 0xa}}, &(0x7f0000000840)={0x0, 0x18, 0x40}}}], 0x18, 0x0, &(0x7f0000000900)="580cbaff128345a277ba3baa5d8036f6c389f97cf8e7769e"}) setsockopt$sock_linger(r6, 0x1, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x110, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x40}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbff3459f0d0f1f993199ba7736121264e67c5e1dfdfe4f5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "efa9fe90613e1a8804b223f59064881065cdbc6dd9642150"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d338987a3119b9714e86c164d809896a952b71696874a2e9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "87261d7c03fced8056debd5b68b12c45df9794e07e592acb"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x110}, 0x1, 0x0, 0x0, 0x22004800}, 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) r10 = ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ppoll(&(0x7f0000000d80)=[{r10, 0x10}, {r3, 0x100}, {r6, 0x200}, {r3, 0x1}, {r0, 0x28}], 0x5, &(0x7f0000000dc0)={0x77359400}, &(0x7f0000000e00)={[0x9]}, 0x8) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000fc0)={&(0x7f0000000e40), 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49dbd1a6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x54b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1088}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000001000)={0x0, 0x10000}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000001080)={r11, 0x7}, &(0x7f00000010c0)=0x8) 1.313395472s ago: executing program 2 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1.277912842s ago: executing program 2 (id=243): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.276671993s ago: executing program 0 (id=253): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.152947804s ago: executing program 2 (id=244): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x48000200, &(0x7f0000000080)="242a129a5558eec249d8c33e1b97364dd6dbbfcd0dc5c5ae5594fcbd714fc461be068333d421be6933617930306ecddc7d1e30eb5dde8ae3959cbbb4e08a01266b22d759988c2a5770203adc569cf2892409dc0297adc9b95c06c39d20c149c40735fa78da2385c4410f04d9c393dd5f3d1779d03c92b29d395043357b708f64a62ef21438c08b112e7ebe2df157bfa6e4b5fa31e8f36623b05c63a2bd1c2cd0613df7a7f7ecf5c5", 0xa8, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x42e8c601, 0x0, 0x0, 0x0, 0xe4e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000000) readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r4, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$eventfd(r2, &(0x7f00000003c0), 0x8) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.058879925s ago: executing program 4 (id=245): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x1018, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.000288436s ago: executing program 0 (id=246): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x48000200, &(0x7f0000000080)="242a129a5558eec249d8c33e1b97364dd6dbbfcd0dc5c5ae5594fcbd714fc461be068333d421be6933617930306ecddc7d1e30eb5dde8ae3959cbbb4e08a01266b22d759988c2a5770203adc569cf2892409dc0297adc9b95c06c39d20c149c40735fa78da2385c4410f04d9c393dd5f3d1779d03c92b29d395043357b708f64a62ef21438c08b112e7ebe2df157bfa6e4b5fa31e8f36623b05c63a2bd1c2cd0613df7a7f7ecf5c5", 0xa8, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x42e8c601, 0x0, 0x0, 0x0, 0xe4e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) readlinkat(r1, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 942.870237ms ago: executing program 3 (id=247): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x48000200, &(0x7f0000000080)="242a129a5558eec249d8c33e1b97364dd6dbbfcd0dc5c5ae5594fcbd714fc461be068333d421be6933617930306ecddc7d1e30eb5dde8ae3959cbbb4e08a01266b22d759988c2a5770203adc569cf2892409dc02", 0x54, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x42e8c601, 0x0, 0x0, 0x0, 0xe4e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="97100000", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf25100000000c000280060002004e22000008000500060000004400018008000b00736970000c0007002200000000000000080005000000000008000b00736970000c0007003c000000000000000700060073680000080009000a0000000800060066680000080005000700000008000400ff03000030000280080003000100000014000100e000000100000000000000000000000006000b0002000000080008000200000008000600040000000800040008000000080005000d0000003000038008000100010000001400060000000000000000000000ffffe000000108000100020000000600040006000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000000) readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r4 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$eventfd(r2, &(0x7f00000003c0), 0x8) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 941.883677ms ago: executing program 5 (id=258): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) llistxattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRES32=r6, @ANYBLOB="59900d"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020207025000000002dba51bd7b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000000000000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="eceb2950b9e61b0edad00be07bbca19e613b48379d2f60218aadf62b1141c1f6535ea7e7eea9ada9c4c7dc7afc977d96c6c26026242ab806cfc4995ba0ddb27119e07b3b82e8182f3d3e83374e027a915028ffb634b2becaa23ee6ef1cb91f0bb2bd49628f6390a754dbaf650e6141efd48b664941ea610b12"], 0x1c}}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r13, &(0x7f0000000200)={0x1d, r14}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000005c0)=""/245) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 603.289392ms ago: executing program 5 (id=248): creat(0x0, 0xecf86c37d53049cc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) 523.707453ms ago: executing program 5 (id=249): r0 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000180001002dbd7000000000001d0100001500010000000000fc0000003bad90732d8c59f707000000080005000103000208000e00", @ANYRES32=0xee01, @ANYBLOB="d7fd463af6c26e9cc677c877ab4df259e010222b5e83aa88371a64699833515c40c3d27665c329061a34011c034a456800f0dfc8e185f7dd349646acb1cc5a4ce00125fe9de83cb168d3f397427bd6df5fe7c8749ca392baf60f8b744fe758"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0xa, 0x8, 0x7fff, 0x4, 0x1, 0xf}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c0009000800"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000c5878a129bc29de5099c58b6000000000090892bef5d31e1e4720214e44300b6c0fc587350c5abf9b9516617f7454bf0955398ebe455795b27892575a4a28989703403fce65c1f3c9daa2547986178af782a638efff113bd1e080dd8a13b475122a4289d1b0390d646a36b2b627fc9424a436f211d592bcbb4d11b01c3149a3efb50235c9ba60c0831f2f77b105bf57c8ff6e9f803ce6de8169a1e"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRESDEC=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xec, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 411.381715ms ago: executing program 5 (id=250): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e06", 0xab}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) sendmmsg$inet6(r4, &(0x7f000000c140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d00)="743b7ddac825c248", 0x8}, {&(0x7f0000002d40)="369a21388564386b676b0afdd78acfaa54a92b16598cc438243fef941f3943d69bb2b7efc91a88f7d96fd07cc0395916e5a2207150b53fe9923c9ab235282452c3c9ed967ae2e5d131796e78575ea2826e6717f8e8dd2049429c0afb59f9eb706e112cecb381a281859b537f49ce63c0703ad9490e55592869f3517fe0345e989eb681bc2436d02d2f3b01e34d8251255b39278d2412b63bd4473791bfd453a2e170fb362e50a647cc36fe550e0424e808e67bed0140759c7c7602af75b69b68b5978e0cd4b99b622e3fe428170337db38d73baca557ca53f22fbbf824408e72c2776cc0c004f32cf8ce0d42880a7b570e99c0d9aa451e1ba0", 0xf9}, {&(0x7f0000002e40)="8f1ceb135a882c9ee5552789f23a116684243c53acf19a707e4e0976321684d50c1767dd3e6bcf9631858e89fff6c41de7835ee1153d1012bf705bbc5a8d4ee55d2dad58c1405487725dca2edfd98ffb7c2951a7f4b1c675f87303c8138b2ec96515d7b072f16e35b2f8e029dad42eaa97c6e7652f94d6412e2f87", 0x7b}, {&(0x7f0000009f40)="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", 0x461}], 0x4}}], 0x5, 0x20048090) 342.983675ms ago: executing program 5 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd4d", 0xd}}, 0xee) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0xc4) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 184.137127ms ago: executing program 5 (id=252): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x0, 0xb2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 9.97307ms ago: executing program 4 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 0 (id=255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 33.579424][ T29] audit: type=1400 audit(1748026651.916:65): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.580664][ T3306] cgroup: Unknown subsys name 'net' [ 33.602513][ T29] audit: type=1400 audit(1748026651.916:66): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.630723][ T29] audit: type=1400 audit(1748026651.946:67): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.811632][ T3306] cgroup: Unknown subsys name 'cpuset' [ 33.819192][ T3306] cgroup: Unknown subsys name 'rlimit' [ 33.979811][ T29] audit: type=1400 audit(1748026652.316:68): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.003924][ T29] audit: type=1400 audit(1748026652.316:69): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.024838][ T29] audit: type=1400 audit(1748026652.316:70): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.046063][ T29] audit: type=1400 audit(1748026652.316:71): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.068084][ T29] audit: type=1400 audit(1748026652.316:72): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.081743][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.100990][ T29] audit: type=1400 audit(1748026652.316:73): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.138015][ T29] audit: type=1400 audit(1748026652.456:74): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.172667][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.452448][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.497067][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.508563][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 35.530853][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.564105][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.571899][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.579525][ T3318] bridge_slave_0: entered allmulticast mode [ 35.589698][ T3318] bridge_slave_0: entered promiscuous mode [ 35.599955][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.607509][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.616131][ T3318] bridge_slave_1: entered allmulticast mode [ 35.623847][ T3318] bridge_slave_1: entered promiscuous mode [ 35.706456][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.746540][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.763459][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.770884][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.778385][ T3328] bridge_slave_0: entered allmulticast mode [ 35.786208][ T3328] bridge_slave_0: entered promiscuous mode [ 35.793185][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.801455][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.808798][ T3320] bridge_slave_0: entered allmulticast mode [ 35.816024][ T3320] bridge_slave_0: entered promiscuous mode [ 35.838070][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.847697][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.856229][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.863827][ T3328] bridge_slave_1: entered allmulticast mode [ 35.871057][ T3328] bridge_slave_1: entered promiscuous mode [ 35.877949][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.885135][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.892756][ T3320] bridge_slave_1: entered allmulticast mode [ 35.899588][ T3320] bridge_slave_1: entered promiscuous mode [ 35.906553][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.913787][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.921965][ T3315] bridge_slave_0: entered allmulticast mode [ 35.928960][ T3315] bridge_slave_0: entered promiscuous mode [ 35.936865][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.947434][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.955599][ T3315] bridge_slave_1: entered allmulticast mode [ 35.964461][ T3315] bridge_slave_1: entered promiscuous mode [ 35.972260][ T3318] team0: Port device team_slave_0 added [ 36.009510][ T3318] team0: Port device team_slave_1 added [ 36.022743][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.041801][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.054426][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.080669][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.100009][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.110629][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.118225][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.145295][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.169497][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.180024][ T3328] team0: Port device team_slave_0 added [ 36.186785][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.193888][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.222300][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.248989][ T3328] team0: Port device team_slave_1 added [ 36.259909][ T3315] team0: Port device team_slave_0 added [ 36.271808][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.278924][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.287348][ T3316] bridge_slave_0: entered allmulticast mode [ 36.294766][ T3316] bridge_slave_0: entered promiscuous mode [ 36.317752][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.324902][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.351910][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.363838][ T3315] team0: Port device team_slave_1 added [ 36.369806][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.377157][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.384694][ T3316] bridge_slave_1: entered allmulticast mode [ 36.391471][ T3316] bridge_slave_1: entered promiscuous mode [ 36.398531][ T3320] team0: Port device team_slave_0 added [ 36.409607][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.416888][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.443645][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.478638][ T3320] team0: Port device team_slave_1 added [ 36.493546][ T3318] hsr_slave_0: entered promiscuous mode [ 36.500191][ T3318] hsr_slave_1: entered promiscuous mode [ 36.510202][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.517991][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.544226][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.557673][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.564799][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.592682][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.641483][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.651035][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.658009][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.684886][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.696970][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.704524][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.733998][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.753013][ T3328] hsr_slave_0: entered promiscuous mode [ 36.760514][ T3328] hsr_slave_1: entered promiscuous mode [ 36.766519][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.774407][ T3328] Cannot create hsr debugfs directory [ 36.781561][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.835050][ T3315] hsr_slave_0: entered promiscuous mode [ 36.841304][ T3315] hsr_slave_1: entered promiscuous mode [ 36.847389][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.855646][ T3315] Cannot create hsr debugfs directory [ 36.867080][ T3316] team0: Port device team_slave_0 added [ 36.883978][ T3320] hsr_slave_0: entered promiscuous mode [ 36.890973][ T3320] hsr_slave_1: entered promiscuous mode [ 36.898059][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.906048][ T3320] Cannot create hsr debugfs directory [ 36.918063][ T3316] team0: Port device team_slave_1 added [ 36.965011][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.972700][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.999975][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.014838][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.022128][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.048995][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.139719][ T3316] hsr_slave_0: entered promiscuous mode [ 37.146329][ T3316] hsr_slave_1: entered promiscuous mode [ 37.152873][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.161514][ T3316] Cannot create hsr debugfs directory [ 37.237858][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.252516][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.264525][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.280795][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.324366][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.334107][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.344305][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.353794][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.399072][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.409256][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.419220][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.429148][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.475205][ T3328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.485800][ T3328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.500219][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.520964][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.534316][ T3328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.560553][ T3328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.579642][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.591349][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.606131][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.616816][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.624441][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.634844][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.642272][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.663948][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.672052][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.681726][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.691577][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.702298][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.719647][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.727798][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.802551][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.827300][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.848790][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.876688][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.884221][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.907048][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.916437][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.923939][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.940956][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.951227][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.958527][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.968226][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.975481][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.998337][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.010920][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.030777][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.055379][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.071739][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.078955][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.095554][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.105975][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.130431][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.137743][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.175516][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.212818][ T3328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.259604][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.286726][ T3315] veth0_vlan: entered promiscuous mode [ 38.332294][ T3315] veth1_vlan: entered promiscuous mode [ 38.356342][ T3318] veth0_vlan: entered promiscuous mode [ 38.377647][ T3315] veth0_macvtap: entered promiscuous mode [ 38.388323][ T3318] veth1_vlan: entered promiscuous mode [ 38.396702][ T3315] veth1_macvtap: entered promiscuous mode [ 38.416991][ T3318] veth0_macvtap: entered promiscuous mode [ 38.428750][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.446920][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.457739][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.467148][ T3318] veth1_macvtap: entered promiscuous mode [ 38.482408][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.492336][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.502181][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.511711][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.523650][ T3320] veth0_vlan: entered promiscuous mode [ 38.536117][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.575159][ T3320] veth1_vlan: entered promiscuous mode [ 38.583437][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.593872][ T3316] veth0_vlan: entered promiscuous mode [ 38.603380][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.603396][ T29] audit: type=1400 audit(1748026656.946:84): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.tW0LGA/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.615976][ T3320] veth0_macvtap: entered promiscuous mode [ 38.635002][ T29] audit: type=1400 audit(1748026656.946:85): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.666642][ T3320] veth1_macvtap: entered promiscuous mode [ 38.672643][ T29] audit: type=1400 audit(1748026656.946:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.tW0LGA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.697892][ T29] audit: type=1400 audit(1748026656.946:87): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.709614][ T3316] veth1_vlan: entered promiscuous mode [ 38.720726][ T29] audit: type=1400 audit(1748026656.946:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.tW0LGA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.740064][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.757266][ T29] audit: type=1400 audit(1748026656.946:89): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.tW0LGA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.757309][ T29] audit: type=1400 audit(1748026656.946:90): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.758076][ T29] audit: type=1400 audit(1748026657.016:91): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.767006][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.797259][ T29] audit: type=1400 audit(1748026657.016:92): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.819275][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.878422][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.886405][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.886573][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.942440][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.959875][ T3316] veth0_macvtap: entered promiscuous mode [ 38.970951][ T29] audit: type=1400 audit(1748026657.306:93): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.032104][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.044372][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056372][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.069191][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083585][ T3316] veth1_macvtap: entered promiscuous mode [ 39.092511][ T3328] veth0_vlan: entered promiscuous mode [ 39.106241][ T3328] veth1_vlan: entered promiscuous mode [ 39.191729][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.222484][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.236207][ T3459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.240927][ T3328] veth0_macvtap: entered promiscuous mode [ 39.270091][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.279913][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289772][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.298991][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.311998][ T3461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.327123][ T3462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.339924][ T3328] veth1_macvtap: entered promiscuous mode [ 39.387121][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.397223][ T3459] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 39.443822][ T3461] syz.0.1 (3461) used greatest stack depth: 10272 bytes left [ 39.455871][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.474311][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.509509][ T3469] wireguard0: entered promiscuous mode [ 39.529179][ T3328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.538334][ T3328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.549211][ T3328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.558495][ T3328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.627536][ T3475] wireguard0: entered promiscuous mode [ 39.633656][ T3475] wireguard0: entered allmulticast mode [ 39.683714][ T3481] loop2: detected capacity change from 0 to 128 [ 39.687498][ T3479] bridge_slave_0: left allmulticast mode [ 39.696666][ T3479] bridge_slave_0: left promiscuous mode [ 39.702726][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.724455][ T3479] bridge_slave_1: left allmulticast mode [ 39.731853][ T3479] bridge_slave_1: left promiscuous mode [ 39.738095][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.748938][ T3479] bond0: (slave bond_slave_0): Releasing backup interface [ 39.777981][ T3479] bond0: (slave bond_slave_1): Releasing backup interface [ 39.792835][ T3479] team0: Port device team_slave_0 removed [ 39.802852][ T3479] team0: Port device team_slave_1 removed [ 39.810684][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.818929][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.830807][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.839435][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.857150][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 39.870815][ T3488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 39.940850][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 39.952839][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 40.002216][ T3492] netlink: 'syz.2.11': attribute type 21 has an invalid length. [ 40.014540][ T3494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 40.071940][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 40.083150][ T3495] netlink: 'syz.4.12': attribute type 21 has an invalid length. [ 40.092513][ T3498] lo speed is unknown, defaulting to 1000 [ 40.125842][ T3498] lo speed is unknown, defaulting to 1000 [ 40.153554][ T3498] lo speed is unknown, defaulting to 1000 [ 40.161333][ T3498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.171002][ T3498] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 40.226768][ T3498] lo speed is unknown, defaulting to 1000 [ 40.259089][ T3498] lo speed is unknown, defaulting to 1000 [ 40.296321][ T3498] lo speed is unknown, defaulting to 1000 [ 40.330979][ T3498] lo speed is unknown, defaulting to 1000 [ 40.362838][ T3507] netlink: 'syz.2.15': attribute type 21 has an invalid length. [ 40.372088][ T3498] lo speed is unknown, defaulting to 1000 [ 40.409938][ T3506] netlink: 'syz.4.16': attribute type 21 has an invalid length. [ 40.420549][ T3498] lo speed is unknown, defaulting to 1000 [ 40.481104][ T3518] mmap: syz.4.19 (3518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.609516][ T3521] wireguard0: entered promiscuous mode [ 40.615986][ T3521] wireguard0: entered allmulticast mode [ 40.645710][ T3526] loop2: detected capacity change from 0 to 128 [ 40.682937][ T3528] bridge_slave_0: left allmulticast mode [ 40.688847][ T3528] bridge_slave_0: left promiscuous mode [ 40.695184][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.715357][ T3528] bridge_slave_1: left allmulticast mode [ 40.719021][ T3531] siw: device registration error -23 [ 40.722157][ T3528] bridge_slave_1: left promiscuous mode [ 40.722484][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.746661][ T3528] bond0: (slave bond_slave_0): Releasing backup interface [ 40.757309][ T3528] bond0: (slave bond_slave_1): Releasing backup interface [ 40.769793][ T3528] team0: Port device team_slave_0 removed [ 40.778454][ T3528] team0: Port device team_slave_1 removed [ 40.787110][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.795099][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.804516][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.812288][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.832954][ T3523] netlink: 'syz.3.21': attribute type 21 has an invalid length. [ 40.888506][ T3535] wireguard0: entered promiscuous mode [ 40.894449][ T3535] wireguard0: entered allmulticast mode [ 40.983316][ T3537] bridge_slave_0: left allmulticast mode [ 40.989577][ T3537] bridge_slave_0: left promiscuous mode [ 40.995613][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.007825][ T3537] bridge_slave_1: left allmulticast mode [ 41.014109][ T3537] bridge_slave_1: left promiscuous mode [ 41.020783][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.063579][ T3537] bond0: (slave bond_slave_0): Releasing backup interface [ 41.077231][ T3537] bond0: (slave bond_slave_1): Releasing backup interface [ 41.092255][ T3537] team0: Port device team_slave_0 removed [ 41.108058][ T3537] team0: Port device team_slave_1 removed [ 41.116656][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.124902][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.140197][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.148004][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.209577][ T23] lo speed is unknown, defaulting to 1000 [ 41.216495][ T3545] netlink: 'syz.4.25': attribute type 21 has an invalid length. [ 41.311594][ T3550] lo speed is unknown, defaulting to 1000 [ 41.361693][ T3543] 9p: Unknown Cache mode or invalid value mmټ&ۺNcᖽqIIXGJxJPƅjD _#B=֚{ò [ 41.395598][ T3557] lo speed is unknown, defaulting to 1000 [ 41.412142][ T3547] ucma_write: process 27 (syz.2.27) changed security contexts after opening file descriptor, this is not allowed. [ 41.573727][ C1] hrtimer: interrupt took 30228 ns [ 41.864152][ T3567] loop1: detected capacity change from 0 to 128 [ 41.878974][ T3565] lo speed is unknown, defaulting to 1000 [ 41.882076][ T3567] ======================================================= [ 41.882076][ T3567] WARNING: The mand mount option has been deprecated and [ 41.882076][ T3567] and is ignored by this kernel. Remove the mand [ 41.882076][ T3567] option from the mount to silence this warning. [ 41.882076][ T3567] ======================================================= [ 42.026121][ T3571] netlink: 'syz.2.33': attribute type 21 has an invalid length. [ 42.060735][ T3567] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.091583][ T3567] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.219201][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.252733][ T3577] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.353744][ T3581] wireguard0: entered promiscuous mode [ 42.386671][ T3575] lo speed is unknown, defaulting to 1000 [ 42.648267][ T3592] loop1: detected capacity change from 0 to 128 [ 42.667510][ T3594] loop4: detected capacity change from 0 to 128 [ 42.721491][ T3594] syz.4.39: attempt to access beyond end of device [ 42.721491][ T3594] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 42.870835][ T3598] debugfs: Bad value for 'uid' [ 42.875990][ T3598] debugfs: Bad value for 'uid' [ 42.899880][ T3600] loop4: detected capacity change from 0 to 1024 [ 43.011365][ T3604] tmpfs: Unknown parameter 'mpon' [ 43.122516][ T3600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.155408][ T3600] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.312087][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.365724][ T3611] lo speed is unknown, defaulting to 1000 [ 43.387853][ T3614] lo speed is unknown, defaulting to 1000 [ 43.755118][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.814050][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.864283][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.885783][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 43.885802][ T29] audit: type=1400 audit(1748026662.226:593): avc: denied { mounton } for pid=3631 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.948328][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.083431][ T30] bridge_slave_1: left allmulticast mode [ 44.089741][ T30] bridge_slave_1: left promiscuous mode [ 44.095826][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.105032][ T30] bridge_slave_0: left allmulticast mode [ 44.111463][ T30] bridge_slave_0: left promiscuous mode [ 44.117554][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.273584][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.293544][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.308008][ T30] bond0 (unregistering): Released all slaves [ 44.338898][ T29] audit: type=1400 audit(1748026662.676:594): avc: denied { search } for pid=3045 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.357148][ T3631] lo speed is unknown, defaulting to 1000 [ 44.360580][ T29] audit: type=1400 audit(1748026662.676:595): avc: denied { read } for pid=3045 comm="dhcpcd" name="n25" dev="tmpfs" ino=864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.389883][ T29] audit: type=1400 audit(1748026662.676:596): avc: denied { open } for pid=3045 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.413529][ T29] audit: type=1400 audit(1748026662.676:597): avc: denied { getattr } for pid=3045 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.515320][ T3648] __nla_validate_parse: 13 callbacks suppressed [ 44.515339][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 44.520306][ T29] audit: type=1326 audit(1748026662.826:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cdc9e969 code=0x7ffc0000 [ 44.551259][ T3646] capability: warning: `syz.2.56' uses deprecated v2 capabilities in a way that may be insecure [ 44.555572][ T29] audit: type=1326 audit(1748026662.826:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cdc9e969 code=0x7ffc0000 [ 44.590674][ T29] audit: type=1326 audit(1748026662.826:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8cdc9e969 code=0x7ffc0000 [ 44.614181][ T29] audit: type=1326 audit(1748026662.826:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cdc9e969 code=0x7ffc0000 [ 44.638376][ T29] audit: type=1326 audit(1748026662.826:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa8cdc9e969 code=0x7ffc0000 [ 44.658396][ T3646] loop2: detected capacity change from 0 to 512 [ 44.673879][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 44.695347][ T3643] lo speed is unknown, defaulting to 1000 [ 44.744756][ T3646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.773138][ T3646] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.792898][ T3660] netlink: 'syz.3.57': attribute type 21 has an invalid length. [ 44.853255][ T3670] loop3: detected capacity change from 0 to 512 [ 44.876204][ T30] hsr_slave_0: left promiscuous mode [ 44.882947][ T30] hsr_slave_1: left promiscuous mode [ 44.889068][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.897027][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.908839][ T3670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.919235][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 44.964613][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.983136][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.990973][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.999934][ T3670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.59: invalid indirect mapped block 4294967295 (level 1) [ 45.031480][ T3670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.59: invalid indirect mapped block 4294967295 (level 1) [ 45.061887][ T30] veth1_macvtap: left promiscuous mode [ 45.067798][ T30] veth0_macvtap: left promiscuous mode [ 45.090099][ T3679] netlink: 'syz.2.60': attribute type 2 has an invalid length. [ 45.098130][ T3679] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 45.106765][ T3679] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.60'. [ 45.119113][ T30] veth1_vlan: left promiscuous mode [ 45.124789][ T3670] EXT4-fs (loop3): 2 truncates cleaned up [ 45.132280][ T30] veth0_vlan: left promiscuous mode [ 45.139149][ T3670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.177191][ T3670] EXT4-fs (loop3): shut down requested (2) [ 45.297970][ T30] team0 (unregistering): Port device team_slave_1 removed [ 45.312056][ T30] team0 (unregistering): Port device team_slave_0 removed [ 45.322588][ T3687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.344724][ T3687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.354213][ T3687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.438624][ T3682] lo speed is unknown, defaulting to 1000 [ 45.448379][ T3631] chnl_net:caif_netlink_parms(): no params data found [ 45.503427][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.624541][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.631825][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.676230][ T3631] bridge_slave_0: entered allmulticast mode [ 45.684517][ T3631] bridge_slave_0: entered promiscuous mode [ 45.691594][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.699188][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.706992][ T3631] bridge_slave_1: entered allmulticast mode [ 45.714098][ T3631] bridge_slave_1: entered promiscuous mode [ 45.735560][ T3722] loop4: detected capacity change from 0 to 1024 [ 45.773236][ T3631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.797813][ T3631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.800112][ T3722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.836141][ T3722] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.852288][ T3723] lo speed is unknown, defaulting to 1000 [ 45.861221][ T3631] team0: Port device team_slave_0 added [ 45.872483][ T3631] team0: Port device team_slave_1 added [ 45.939791][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.082095][ T3631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.089864][ T3631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.117654][ T3631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.166591][ T3631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.174071][ T3631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.175392][ T3749] Zero length message leads to an empty skb [ 46.201090][ T3631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.318194][ T3631] hsr_slave_0: entered promiscuous mode [ 46.330830][ T3631] hsr_slave_1: entered promiscuous mode [ 46.337445][ T3631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.350533][ T3631] Cannot create hsr debugfs directory [ 46.538159][ T3631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.567582][ T3631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.580883][ T3631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.590659][ T3631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.694622][ T3631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.712756][ T3631] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.723871][ T3773] lo speed is unknown, defaulting to 1000 [ 46.744852][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.753143][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.771412][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.779013][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.872831][ T3631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.885281][ T3631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.012710][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 47.066943][ T3631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.087057][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 47.129680][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 47.142160][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 47.267675][ T3811] netlink: 'syz.0.76': attribute type 21 has an invalid length. [ 47.446816][ T3816] siw: device registration error -23 [ 47.455250][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 47.634913][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 47.747882][ T3842] netlink: 'syz.0.81': attribute type 21 has an invalid length. [ 47.766411][ T3631] veth0_vlan: entered promiscuous mode [ 47.816266][ T3851] loop4: detected capacity change from 0 to 512 [ 47.863926][ T3851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.925581][ T3631] veth1_vlan: entered promiscuous mode [ 47.931764][ T3851] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.961443][ T3851] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.985582][ T3851] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.068063][ T3631] veth0_macvtap: entered promiscuous mode [ 48.082125][ T3851] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 48.108734][ T3631] veth1_macvtap: entered promiscuous mode [ 48.126421][ T3851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.83: bg 0: block 40: padding at end of block bitmap is not set [ 48.174323][ T3851] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 48.185665][ T3851] EXT4-fs (loop4): 1 truncate cleaned up [ 48.194667][ T3851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.240099][ T3631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.273795][ T3631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.284747][ T3877] netlink: 'syz.0.89': attribute type 5 has an invalid length. [ 48.313779][ T3631] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.323652][ T3631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.333007][ T3631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.341984][ T3631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.372120][ T3867] loop2: detected capacity change from 0 to 8192 [ 48.442073][ T3880] netlink: 'syz.3.87': attribute type 21 has an invalid length. [ 48.484766][ T3867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 48.494947][ T3867] FAT-fs (loop2): Filesystem has been set read-only [ 48.646484][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.682019][ T3904] netlink: 'syz.3.93': attribute type 21 has an invalid length. [ 48.827927][ T3916] wireguard0: entered promiscuous mode [ 48.883738][ T3924] wireguard0: entered promiscuous mode [ 48.890909][ T3924] wireguard0: entered allmulticast mode [ 49.200341][ T29] kauditd_printk_skb: 834 callbacks suppressed [ 49.200361][ T29] audit: type=1400 audit(1748026667.496:1428): avc: denied { execute } for pid=3911 comm="syz.4.95" name="file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.234005][ T29] audit: type=1400 audit(1748026667.496:1429): avc: denied { execute_no_trans } for pid=3911 comm="syz.4.95" path="/17/file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.395132][ T3942] netlink: 'syz.2.99': attribute type 5 has an invalid length. [ 49.419499][ T29] audit: type=1400 audit(1748026667.626:1430): avc: denied { create } for pid=3936 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.441787][ T29] audit: type=1400 audit(1748026667.646:1431): avc: denied { setopt } for pid=3936 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.467304][ T29] audit: type=1400 audit(1748026667.646:1432): avc: denied { write } for pid=3936 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.490664][ T29] audit: type=1400 audit(1748026667.646:1433): avc: denied { map_create } for pid=3936 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.512333][ T29] audit: type=1400 audit(1748026667.646:1434): avc: denied { map_read map_write } for pid=3936 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.532999][ T29] audit: type=1400 audit(1748026667.656:1435): avc: denied { prog_load } for pid=3936 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.554001][ T29] audit: type=1400 audit(1748026667.656:1436): avc: denied { bpf } for pid=3936 comm="syz.2.99" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.577977][ T29] audit: type=1400 audit(1748026667.656:1437): avc: denied { perfmon } for pid=3936 comm="syz.2.99" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.743594][ T3956] __nla_validate_parse: 11 callbacks suppressed [ 49.743642][ T3956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 49.768805][ T3957] $H: renamed from bond0 (while UP) [ 49.780173][ T3957] $H: entered promiscuous mode [ 49.797065][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 49.851447][ T3966] netlink: 'syz.0.104': attribute type 21 has an invalid length. [ 49.873978][ T3969] random: crng reseeded on system resumption [ 49.899938][ T3006] udevd[3006]: worker [3508] terminated by signal 33 (Unknown signal 33) [ 49.924069][ T3006] udevd[3006]: worker [3508] failed while handling '/devices/virtual/block/loop2' [ 49.930962][ T3973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.111'. [ 49.946234][ T3971] loop4: detected capacity change from 0 to 512 [ 49.977898][ T3975] siw: device registration error -23 [ 50.013724][ T3971] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.083997][ T3971] EXT4-fs (loop4): mount failed [ 50.139147][ T3971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.112'. [ 50.203303][ T3971] loop4: detected capacity change from 0 to 512 [ 50.210430][ T3971] EXT4-fs: Ignoring removed oldalloc option [ 50.243340][ T3971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.257652][ T3971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.304837][ T3971] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.112: invalid indirect mapped block 4294967295 (level 0) [ 50.333837][ T3997] netlink: 'syz.5.115': attribute type 5 has an invalid length. [ 50.342437][ T3971] EXT4-fs (loop4): Remounting filesystem read-only [ 50.351343][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 50.361397][ T3971] EXT4-fs (loop4): 1 orphan inode deleted [ 50.367248][ T3971] EXT4-fs (loop4): 1 truncate cleaned up [ 50.383174][ T3971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.477959][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.586259][ T4005] loop0: detected capacity change from 0 to 2048 [ 50.683030][ T4005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.743785][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 50.987054][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.119'. [ 51.014037][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 51.393278][ T4029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 51.446423][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 51.521859][ T4030] netlink: 'syz.4.123': attribute type 21 has an invalid length. [ 51.794246][ T4032] loop3: detected capacity change from 0 to 128 [ 51.808327][ T4040] netlink: 'syz.2.127': attribute type 5 has an invalid length. [ 52.196262][ T4046] loop3: detected capacity change from 0 to 512 [ 52.211838][ T4046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.230728][ T4046] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.303307][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.303890][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.336374][ T4050] siw: device registration error -23 [ 52.484428][ T4063] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 52.491685][ T4063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.500718][ T4063] vhci_hcd vhci_hcd.0: Device attached [ 52.539393][ T4063] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.554379][ T4063] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 52.561467][ T4063] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.562076][ T4068] loop5: detected capacity change from 0 to 256 [ 52.569212][ T4063] vhci_hcd vhci_hcd.0: Device attached [ 52.588334][ T4062] netlink: 'syz.4.136': attribute type 21 has an invalid length. [ 52.617578][ T4068] msdos: Bad value for 'gid' [ 52.622785][ T4068] msdos: Bad value for 'gid' [ 52.646281][ T4074] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 52.653568][ T4074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.661706][ T4074] vhci_hcd vhci_hcd.0: Device attached [ 52.675544][ T4068] loop5: detected capacity change from 0 to 512 [ 52.677555][ T4075] vhci_hcd: connection closed [ 52.682710][ T4069] vhci_hcd: connection closed [ 52.682880][ T4064] vhci_hcd: connection closed [ 52.694608][ T30] vhci_hcd: stop threads [ 52.704021][ T30] vhci_hcd: release socket [ 52.708734][ T30] vhci_hcd: disconnect device [ 52.726474][ T30] vhci_hcd: stop threads [ 52.731030][ T30] vhci_hcd: release socket [ 52.735504][ T30] vhci_hcd: disconnect device [ 52.741181][ T30] vhci_hcd: stop threads [ 52.745479][ T30] vhci_hcd: release socket [ 52.749927][ T30] vhci_hcd: disconnect device [ 52.760411][ T1039] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 52.788998][ T1039] usb 7-1: enqueue for inactive port 0 [ 52.789195][ T4068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.808092][ T4068] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.811645][ T1039] usb 7-1: enqueue for inactive port 0 [ 52.843690][ T4082] Cannot find set identified by id 0 to match [ 52.856374][ T4085] loop2: detected capacity change from 0 to 512 [ 52.872062][ T1039] usb 7-1: enqueue for inactive port 0 [ 52.922070][ T4085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.949659][ T4085] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.962946][ T1039] vhci_hcd: vhci_device speed not set [ 52.975518][ T4085] veth1_to_bond: entered allmulticast mode [ 52.981779][ T4085] veth1_to_bond: entered promiscuous mode [ 52.988470][ T4085] veth1_to_bond: left promiscuous mode [ 52.994257][ T4085] veth1_to_bond: left allmulticast mode [ 53.016282][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.030663][ T4089] loop0: detected capacity change from 0 to 512 [ 53.037586][ T4089] ext2: Unknown parameter 'nouser_xattr' [ 53.056058][ T4089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4089 comm=syz.0.139 [ 53.104923][ T4092] loop2: detected capacity change from 0 to 512 [ 53.123068][ T4092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.136106][ T4092] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.202358][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.387612][ T3631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.406985][ T4111] wireguard1: entered promiscuous mode [ 53.412779][ T4111] wireguard1: entered allmulticast mode [ 53.508099][ T4117] netlink: 'syz.5.148': attribute type 21 has an invalid length. [ 53.604665][ T4123] wireguard2: entered promiscuous mode [ 53.610561][ T4123] wireguard2: entered allmulticast mode [ 53.621670][ T4125] netlink: 'syz.5.151': attribute type 5 has an invalid length. [ 53.728793][ T4128] netlink: 'syz.0.153': attribute type 21 has an invalid length. [ 53.822195][ T4144] loop3: detected capacity change from 0 to 128 [ 53.845276][ T4146] siw: device registration error -23 [ 53.846787][ T4144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.864742][ T4144] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.929070][ T3328] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.944421][ T4150] lo speed is unknown, defaulting to 1000 [ 54.007154][ T4153] netlink: 'syz.4.162': attribute type 21 has an invalid length. [ 54.086953][ T4162] netlink: 'syz.4.165': attribute type 21 has an invalid length. [ 54.217502][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 54.217522][ T29] audit: type=1326 audit(1748026672.556:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76f1975927 code=0x7ffc0000 [ 54.283398][ T29] audit: type=1326 audit(1748026672.556:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f191ab39 code=0x7ffc0000 [ 54.308686][ T29] audit: type=1326 audit(1748026672.556:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f76f197e969 code=0x7ffc0000 [ 54.332986][ T29] audit: type=1326 audit(1748026672.596:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76f1975927 code=0x7ffc0000 [ 54.356599][ T29] audit: type=1326 audit(1748026672.596:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f191ab39 code=0x7ffc0000 [ 54.380471][ T29] audit: type=1326 audit(1748026672.596:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f76f197e969 code=0x7ffc0000 [ 54.404509][ T29] audit: type=1326 audit(1748026672.596:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76f1975927 code=0x7ffc0000 [ 54.429767][ T29] audit: type=1326 audit(1748026672.596:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f191ab39 code=0x7ffc0000 [ 54.455477][ T29] audit: type=1326 audit(1748026672.596:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f76f197e969 code=0x7ffc0000 [ 54.482018][ T29] audit: type=1326 audit(1748026672.606:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76f1975927 code=0x7ffc0000 [ 54.569912][ T4176] wireguard3: entered promiscuous mode [ 54.575699][ T4176] wireguard3: entered allmulticast mode [ 54.689378][ T4182] siw: device registration error -23 [ 54.724651][ T4180] wireguard0: entered promiscuous mode [ 54.786844][ T4187] loop4: detected capacity change from 0 to 128 [ 54.899525][ T4190] tipc: Started in network mode [ 54.905399][ T4190] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 54.914441][ T4190] tipc: Enabled bearer , priority 0 [ 54.926187][ T4199] validate_nla: 1 callbacks suppressed [ 54.926207][ T4199] netlink: 'syz.4.176': attribute type 5 has an invalid length. [ 54.944373][ T4200] __nla_validate_parse: 19 callbacks suppressed [ 54.944396][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 54.972744][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.178'. [ 55.007353][ T4196] netlink: 'syz.5.178': attribute type 21 has an invalid length. [ 55.072495][ T4210] loop0: detected capacity change from 0 to 512 [ 55.088304][ T4203] lo speed is unknown, defaulting to 1000 [ 55.119898][ T4214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.182'. [ 55.126355][ T4216] siw: device registration error -23 [ 55.148132][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 55.173478][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.182'. [ 55.202655][ T4206] lo speed is unknown, defaulting to 1000 [ 55.226591][ T4222] netlink: 'syz.5.182': attribute type 21 has an invalid length. [ 55.268806][ T4224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.184'. [ 55.279213][ T4210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.288269][ T4210] EXT4-fs (loop0): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 55.361785][ T4230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 55.414072][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 55.451608][ T4228] lo speed is unknown, defaulting to 1000 [ 55.492428][ T4234] netlink: 'syz.4.186': attribute type 21 has an invalid length. [ 55.551946][ T4236] loop0: detected capacity change from 0 to 128 [ 55.717657][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 55.971804][ T4245] FAULT_INJECTION: forcing a failure. [ 55.971804][ T4245] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.985325][ T4245] CPU: 0 UID: 0 PID: 4245 Comm: syz.0.190 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 55.985365][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.985457][ T4245] Call Trace: [ 55.985465][ T4245] [ 55.985473][ T4245] __dump_stack+0x1d/0x30 [ 55.985606][ T4245] dump_stack_lvl+0xe8/0x140 [ 55.985633][ T4245] dump_stack+0x15/0x1b [ 55.985655][ T4245] should_fail_ex+0x265/0x280 [ 55.985699][ T4245] should_fail+0xb/0x20 [ 55.985811][ T4245] should_fail_usercopy+0x1a/0x20 [ 55.985839][ T4245] _copy_from_user+0x1c/0xb0 [ 55.985870][ T4245] get_user_ifreq+0x53/0x110 [ 55.985906][ T4245] sock_ioctl+0x54e/0x610 [ 55.986016][ T4245] ? __pfx_sock_ioctl+0x10/0x10 [ 55.986132][ T4245] __se_sys_ioctl+0xcb/0x140 [ 55.986161][ T4245] __x64_sys_ioctl+0x43/0x50 [ 55.986187][ T4245] x64_sys_call+0x19a8/0x2fb0 [ 55.986213][ T4245] do_syscall_64+0xd0/0x1a0 [ 55.986306][ T4245] ? clear_bhb_loop+0x40/0x90 [ 55.986382][ T4245] ? clear_bhb_loop+0x40/0x90 [ 55.986412][ T4245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.986441][ T4245] RIP: 0033:0x7f76f197e969 [ 55.986468][ T4245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.986547][ T4245] RSP: 002b:00007f76effe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.986574][ T4245] RAX: ffffffffffffffda RBX: 00007f76f1ba5fa0 RCX: 00007f76f197e969 [ 55.986649][ T4245] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 55.986667][ T4245] RBP: 00007f76effe7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.986696][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.986711][ T4245] R13: 0000000000000000 R14: 00007f76f1ba5fa0 R15: 00007ffcd4b48c68 [ 55.986738][ T4245] [ 56.030405][ T3394] tipc: Node number set to 11578026 [ 56.286087][ T4262] wireguard0: entered promiscuous mode [ 56.291975][ T4262] wireguard0: entered allmulticast mode [ 56.328454][ T4267] loop4: detected capacity change from 0 to 164 [ 56.357805][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 56.403016][ T4267] FAULT_INJECTION: forcing a failure. [ 56.403016][ T4267] name failslab, interval 1, probability 0, space 0, times 0 [ 56.416766][ T4267] CPU: 1 UID: 0 PID: 4267 Comm: syz.4.196 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 56.416796][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.416810][ T4267] Call Trace: [ 56.416817][ T4267] [ 56.416827][ T4267] __dump_stack+0x1d/0x30 [ 56.416915][ T4267] dump_stack_lvl+0xe8/0x140 [ 56.416941][ T4267] dump_stack+0x15/0x1b [ 56.416958][ T4267] should_fail_ex+0x265/0x280 [ 56.416993][ T4267] should_failslab+0x8c/0xb0 [ 56.417083][ T4267] kmem_cache_alloc_noprof+0x50/0x310 [ 56.417110][ T4267] ? alloc_empty_file+0x76/0x200 [ 56.417135][ T4267] alloc_empty_file+0x76/0x200 [ 56.417155][ T4267] path_openat+0x68/0x2170 [ 56.417254][ T4267] ? _parse_integer_limit+0x170/0x190 [ 56.417295][ T4267] ? _parse_integer+0x27/0x40 [ 56.417342][ T4267] ? kstrtoull+0x111/0x140 [ 56.417410][ T4267] ? kstrtouint+0x76/0xc0 [ 56.417496][ T4267] do_filp_open+0x109/0x230 [ 56.417547][ T4267] do_sys_openat2+0xa6/0x110 [ 56.417577][ T4267] __x64_sys_creat+0x65/0x90 [ 56.417603][ T4267] x64_sys_call+0x114d/0x2fb0 [ 56.417668][ T4267] do_syscall_64+0xd0/0x1a0 [ 56.417740][ T4267] ? clear_bhb_loop+0x40/0x90 [ 56.417767][ T4267] ? clear_bhb_loop+0x40/0x90 [ 56.417796][ T4267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.417824][ T4267] RIP: 0033:0x7fa8cdc9e969 [ 56.417883][ T4267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.417906][ T4267] RSP: 002b:00007fa8cc307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 56.417930][ T4267] RAX: ffffffffffffffda RBX: 00007fa8cdec5fa0 RCX: 00007fa8cdc9e969 [ 56.417946][ T4267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 56.417962][ T4267] RBP: 00007fa8cc307090 R08: 0000000000000000 R09: 0000000000000000 [ 56.417978][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.418037][ T4267] R13: 0000000000000000 R14: 00007fa8cdec5fa0 R15: 00007fffee273658 [ 56.418069][ T4267] [ 56.488039][ T4262] tipc: Resetting bearer [ 56.720712][ T4271] netlink: 'syz.3.192': attribute type 21 has an invalid length. [ 56.890601][ T4279] loop2: detected capacity change from 0 to 128 [ 57.003193][ T4283] wireguard0: entered promiscuous mode [ 57.124710][ T4292] netlink: 'syz.3.204': attribute type 5 has an invalid length. [ 57.194283][ T4295] loop0: detected capacity change from 0 to 512 [ 57.294579][ T4304] wireguard0: entered promiscuous mode [ 57.318591][ T4295] EXT4-fs (loop0): 1 orphan inode deleted [ 57.330539][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 57.352086][ T4312] siw: device registration error -23 [ 57.373686][ T4295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.391798][ T4295] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.596379][ T4319] netlink: 'syz.2.214': attribute type 21 has an invalid length. [ 57.619064][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.703770][ T4332] loop0: detected capacity change from 0 to 128 [ 57.727688][ T4329] loop5: detected capacity change from 0 to 512 [ 57.748489][ T4332] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.776463][ T4332] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.890025][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.941581][ T4329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.004178][ T4329] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.167933][ T4349] lo speed is unknown, defaulting to 1000 [ 58.198884][ T4342] lo speed is unknown, defaulting to 1000 [ 58.343693][ T4350] SELinux: syz.3.224 (4350) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.376134][ T3631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.439421][ T4357] netlink: 'syz.4.225': attribute type 21 has an invalid length. [ 58.616107][ T4364] siw: device registration error -23 [ 58.705449][ T4368] netlink: 'syz.3.227': attribute type 21 has an invalid length. [ 59.033120][ T4377] loop4: detected capacity change from 0 to 512 [ 59.047129][ T4377] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 59.076400][ T4377] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 59.111582][ T4372] netlink: 'syz.3.230': attribute type 21 has an invalid length. [ 59.235699][ T4384] serio: Serial port ptm0 [ 59.243172][ T29] kauditd_printk_skb: 1123 callbacks suppressed [ 59.243190][ T29] audit: type=1400 audit(1748026677.586:2867): avc: denied { read write } for pid=4385 comm="syz.5.234" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.325481][ T29] audit: type=1400 audit(1748026677.616:2868): avc: denied { open } for pid=4385 comm="syz.5.234" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.351981][ T29] audit: type=1400 audit(1748026677.626:2869): avc: denied { setopt } for pid=4387 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.372173][ T29] audit: type=1326 audit(1748026677.636:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.397113][ T29] audit: type=1326 audit(1748026677.636:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.422254][ T29] audit: type=1326 audit(1748026677.636:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.450513][ T29] audit: type=1326 audit(1748026677.636:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.480871][ T29] audit: type=1326 audit(1748026677.636:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.510074][ T29] audit: type=1326 audit(1748026677.636:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.536850][ T29] audit: type=1326 audit(1748026677.636:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf766fe969 code=0x7ffc0000 [ 59.574864][ T4398] wireguard0: entered promiscuous mode [ 59.580656][ T4398] wireguard0: entered allmulticast mode [ 59.613594][ T4403] loop3: detected capacity change from 0 to 128 [ 59.668042][ T4403] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.693601][ T4409] serio: Serial port ptm0 [ 59.751062][ T4403] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.868660][ T4414] lo speed is unknown, defaulting to 1000 [ 59.963223][ T3328] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.004637][ T4428] __nla_validate_parse: 17 callbacks suppressed [ 60.004655][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.258'. [ 60.097204][ T4421] lo speed is unknown, defaulting to 1000 [ 60.110813][ T4424] validate_nla: 1 callbacks suppressed [ 60.110830][ T4424] netlink: 'syz.5.258': attribute type 21 has an invalid length. [ 60.196298][ T4434] lo speed is unknown, defaulting to 1000 [ 60.614208][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.251'. [ 60.791102][ T4465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.878846][ T3320] ================================================================== [ 60.887110][ T3320] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 60.894799][ T3320] [ 60.897161][ T3320] read-write to 0xffff888104d10ca8 of 8 bytes by task 4430 on cpu 1: [ 60.905423][ T3320] inode_add_bytes+0x47/0xe0 [ 60.910653][ T3320] __dquot_alloc_space+0x180/0x8a0 [ 60.916694][ T3320] shmem_inode_acct_blocks+0x129/0x240 [ 60.922175][ T3320] shmem_get_folio_gfp+0x5a7/0xd40 [ 60.927666][ T3320] shmem_write_begin+0xa8/0x190 [ 60.932985][ T3320] generic_perform_write+0x181/0x490 [ 60.938313][ T3320] shmem_file_write_iter+0xc5/0xf0 [ 60.944357][ T3320] __kernel_write_iter+0x253/0x4c0 [ 60.949868][ T3320] dump_user_range+0x5f4/0x8d0 [ 60.955933][ T3320] elf_core_dump+0x1dc2/0x1f80 [ 60.962829][ T3320] do_coredump+0x1836/0x1f40 [ 60.968817][ T3320] get_signal+0xd85/0xf70 [ 60.973528][ T3320] arch_do_signal_or_restart+0x97/0x480 [ 60.980574][ T3320] irqentry_exit_to_user_mode+0x5e/0xa0 [ 60.987191][ T3320] irqentry_exit+0x12/0x50 [ 60.992006][ T3320] exc_general_protection+0x15b/0x1f0 [ 60.998775][ T3320] asm_exc_general_protection+0x26/0x30 [ 61.005430][ T3320] [ 61.007875][ T3320] read to 0xffff888104d10ca8 of 8 bytes by task 3320 on cpu 0: [ 61.020968][ T3320] generic_fillattr+0x27d/0x340 [ 61.026504][ T3320] shmem_getattr+0x181/0x200 [ 61.032457][ T3320] vfs_getattr_nosec+0x143/0x1e0 [ 61.038043][ T3320] vfs_statx+0x11a/0x380 [ 61.043537][ T3320] vfs_fstatat+0xe1/0x160 [ 61.048188][ T3320] __se_sys_newfstatat+0x55/0x260 [ 61.054100][ T3320] __x64_sys_newfstatat+0x55/0x70 [ 61.060141][ T3320] x64_sys_call+0x2c22/0x2fb0 [ 61.066576][ T3320] do_syscall_64+0xd0/0x1a0 [ 61.071731][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.078662][ T3320] [ 61.081170][ T3320] value changed: 0x0000000000008688 -> 0x0000000000008690 [ 61.088734][ T3320] [ 61.091085][ T3320] Reported by Kernel Concurrency Sanitizer on: [ 61.097324][ T3320] CPU: 0 UID: 0 PID: 3320 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 61.111535][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.121692][ T3320] ================================================================== [ 61.283895][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 61.336149][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 61.392745][ T4494] netlink: 'syz.2.256': attribute type 21 has an invalid length.