last executing test programs: 2.558466694s ago: executing program 4 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x200000000000000) 2.503893898s ago: executing program 3 (id=223): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shutdown(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095dc41be2e9873937207ba5ad59f0ed3f85dd2506dd806841dd653a5d18db96c0f075b76e1c9c01a16fbee42f2"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x3, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="6252862969", 0x5}], 0x1}, 0x4024001) 2.463038321s ago: executing program 2 (id=225): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x0, &(0x7f0000000580)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x5f}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2418, 0x10000, 0x40000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.411674865s ago: executing program 4 (id=226): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000400)={'mangle\x00', 0xc3, "2c0d09d694d05e5f2c5db1f85d741a27421fd2db1fc596af6e9db55e6d764e7cab4820bb02600c9fffff6a70cf1928d838264d38d1ea22cdc95846d243fed75393a0e3234e8344ab673f333c82e1fb0ad17d08250e4afe90faf3a3974914c83b0bcbdc3b9e4a2524ae5a1c9e4df82e25002313ae2f9cc644853b645d89774aefbde29f3041e8e65e712e96cc9c1a0c6c32a4cdb10d01c288d776ed99f9eaa392d1942e68a24cddb9cd9da3eb5ac289f8d24a01e8a595e9eaa499e411e57ab1659584fa"}, &(0x7f0000000000)=0xea) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 2.115556369s ago: executing program 3 (id=227): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="bd38", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="185dfa0001070000000000000000000018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query], &(0x7f00000011c0)='syzkaller\x00', 0x5, 0x54, &(0x7f0000001200)=""/84, 0x100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x2, 0x3, 0x4ce}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, r1, r0, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], &(0x7f0000001340)=[{0x1, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x9, 0x6}, {0x2, 0x5, 0x5}, {0x3, 0x1, 0xb, 0x8}, {0x5, 0x3, 0xe, 0xf529f8d25f58f4ea}, {0x1, 0x5, 0x4, 0x9}, {0x3, 0x1, 0xd, 0x5}, {0x2, 0x5, 0xb, 0x1}], 0x10, 0x4}, 0x94) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x290) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 1.991942789s ago: executing program 3 (id=228): time(&(0x7f0000000040)) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd00", 0x22) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) semget(0x3, 0x4, 0x428) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x3fffff) 1.925157244s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 1.830522172s ago: executing program 0 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 1.790871625s ago: executing program 3 (id=231): io_uring_setup(0x6f9e, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0xfcb4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f00000006c0)='./file1\x00', 0x4c, &(0x7f0000000e40)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000e80), 0xc}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) fsync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x3000046, &(0x7f0000000d80)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@journal_async_commit}, {@abort}, {@quota}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0700000004000000800000400400000068270000", @ANYRES32, @ANYBLOB="c91abf2647a8a5d39287f8dc211d43494e1b7da37800e5e93a9842936d6619eb8461e7cead248844ab59e2a616b6bcfcdeab841373feb9f4c4d13357c44047c505741d08bbacd4c1d04d2bb04dd286a1f7c66222ae3f4cd173422fe92c873d00"/110, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000b80)={0x1d, r2, 0x2, {0x1, 0x0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x2, 0xff, 0x2}, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000940)='R', 0x1, 0x4fed3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r9, 0x3379c000) 1.756666878s ago: executing program 0 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES64], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000c40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000440)=""/195}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x207, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x9) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000391031cab662d17b020080000000000000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000101000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000007e8f00"/28], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x24f, &(0x7f0000000840)="$eJzs3T9oJGUcBuB3ZneNuVvk1EYQ/4CIaCCcnWBzVsKBHIeIoEJExEZJhJhgl7WysdBaJZVNEAvBaClpgo0iWEVNERtBg4XBQouV3Uk0JiuabNyRzPPAZGYy883vG3beb6eZ2QCNdSnJlSStJDNJOkmKwzvcXU2X9ldXpzfnkn7/8Z+K4X7VeuWg3cUkvSQPJdkoi7zYTpbXn975ZevR+95Y6tz73vpT0xM9yX27O9uP7b177fWPrj64/MVXP1wrciXdv5zX2StG/K9dJLf8F8X+J4p23T3g37j+6gdfD3J/a5J7hvnvpEz14b25eMNGJw+883dt3/rxy9sn2Vfg7PX7ncF3YK8PNE6ZpJuinE1SLZfl7Gx1D/9N60L50sLiKzMvLCzNP1/3SAWcle7gxv+TqY8vHsn/960q/8D51U22n7i+9u1gea9Vd2+Aibijmg3yP/Psyv2Rf2gc+Yfmkn9oLvmH5pJ/aC75h+aSfzjHOgcLvZGb5R/OiQ9P3kT+obnkH5rrcP4BgGbpT9X9BDJQl7rHHwAAAAAAAAAAAAAAAAAA4LjV6c25g2lSNT97O9l9JEl7VP3W8PeIkxuHfy/8XAx2+0NRNRvLM3eNeYAxvV/z09c3fVdv/c/vrLf+ynzSey3J5Xb7+PVX7F9/p3fzP2zvPDdmgRMqjqw//ORk6x/121q99a9uJZ8Oxp/Lo8afMrcN5yPGn6nh+9P+fMXyKb3865gHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGJ+DwAA//8O9G1k") socket$inet6(0xa, 0x2, 0xfffffffd) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x7) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0001000000060010000900000008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.643141207s ago: executing program 4 (id=233): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff36030004000000004000000000000000f500000000000000000000002c8f380003000000000000000d00000000000000c801800000000000e20000000000000010fe0000000000000300000000000000e28996e0f3a5ad5502"], 0xe5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) r3 = epoll_create(0x400) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0xfe, 0x6cd}]}) r6 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x5, &(0x7f0000000580)=""/158, 0x9e}, 0x2120) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x0, 0xc5, 0xc5, &(0x7f0000000640)="b7806ce577e82f62df1890efa5665a8f7d0a687f25611804d696a9e67fd3497970bdf9df5bf3d457eb9a9b24e3cce90f8ef27aa5c2c9e9b3229d4d374997fc3690216833c67362f9c81f8ca29abd7b5727441ae4f3c3484067acdb4bc429c6b17d2306a38e0714c87f4b2f9a796d4e35677f3af2be4f2e402db8ceff6cf47e8abbd13412fabdc122e88dc5828bbe65969558017b0b195702a3857f917c69847dce0967be7d907220a39b88c2b99291808a5593cdd38ab50d1dd360bed7fdc5f80924f36bde", &(0x7f0000000a00)=""/197, 0xf, 0x0, 0x76, 0x79, &(0x7f00000008c0)="76d7ecd717dcd75093e83179b9379acb93662f31f7e09044b2108e577e771da4d4a26ce12fe54b8aab2b50c583b9f8831baad999ba3980ddc14c49b06b4120687f6389d3f329435681ccdbed0f5555dfe731342bec9fa00458a08452020a62ab76b013c97c3e6b10294f3d66d77bdf5f3e5f4d01e071", &(0x7f0000000b00)="08fb8ac27c03221453cec03340c28cf2483dac43b6aafe4a09886dc938734ed7f723832892ffddbba8a6bc67e55b33c33a516616718a09d268e44fa27492c09e6713dc8e074f49c8fbb2505c8686878249bb17a81cfbb6b63375eacaae594593a6548877c9f7e2966106951a5e15f8df56e63424f532d73241", 0x1, 0x0, 0xffffffff}, 0x50) 1.451670742s ago: executing program 1 (id=235): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,privport']) sendto(r0, &(0x7f00000005c0)="a1695339d8cfbc19bbbbdb77797326193252c0e9aafef7c3e1225dbf1186424ee9d8f749e6a8b28a6de4d2feb06a34a80936f618b63ebcf5d3f21fa3a4b901b748aa0bc4fd6b0f61d0dddb35b50ba6f52cdba9b979b9e4a8d010e5c50d4412e0c95254870bd4c567d5c9e391fb601c4c6df129f93e5dc494edea6ed64d59652e8a278480a97db80fcb7ccd78", 0x8c, 0x4000081, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) 1.256542188s ago: executing program 1 (id=236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0xd2}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x2d, 0xfffffffc, 0x81}, 0x9c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240343, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x800}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x24, r13, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x1d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r14 = socket$inet6(0xa, 0x3, 0x800000ff) setsockopt$inet6_int(r14, 0x29, 0x46, &(0x7f0000fcb000), 0x4) fsync(r14) setsockopt$inet6_int(r14, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) write$sndseq(r15, &(0x7f00000000c0)=[{0x8, 0xbd, 0x0, 0x2, @time={0xfffffffd, 0x9}, {0x9, 0x10}, {0x0, 0x8}, @raw32={[0x9, 0x9, 0x8]}}, {0x10, 0x1, 0x80, 0x1, @time={0xba, 0x1}, {0xb, 0x48}, {0x1, 0x4}, @connect={{0x5, 0x40}, {0x20, 0x2}}}, {0x0, 0xbd, 0x2, 0x3, @tick=0x7, {0x3, 0x7d}, {0x3, 0x5}, @queue={0x1, {0x9, 0xe}}}, {0xc, 0x2, 0x6, 0x1, @time={0xb, 0x1}, {0x1, 0x8}, {0x30, 0x2}, @ext={0xcf, &(0x7f0000000480)="3e58f0ba230b7fc7cc1f49f5d9899bc8666afd43d6d34607cbd6496d7e4a2c83b481781a3417c0ac240c8983e2754ef120daa58bbfb6a6ab4665f151626f238c3d1a6af637470a4b2cf8fb08ed17c6a99af64fdd20c66ff6ee28d6c283196c41fe63cd9a3af23829e87a892b6673c958547bdeeded58c4378477338139d35691867c73b5a4b35c49f7691a2d92d5b8a2e124e334d4188e7c8633362087d687d2f3acd5867681639805d3b22163a16b5836091fa2a825a9dfd5f7521ad52b69cf04de8a39e8779122475659f2ded414"}}, {0x40, 0x73, 0x8c, 0x8, @time={0x7, 0x200}, {0xff, 0xf}, {0x2, 0x8}, @addr={0x2, 0x8}}], 0x8c) 1.127544308s ago: executing program 2 (id=237): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]) sendto(r0, &(0x7f00000005c0)="a1695339d8cfbc19bbbbdb77797326193252c0e9aafef7c3e1225dbf1186424ee9d8f749e6a8b28a6de4d2feb06a34a80936f618b63ebcf5d3f21fa3a4b901b748aa0bc4fd6b0f61d0dddb35b50ba6f52cdba9b979b9e4a8d010e5c50d4412e0c95254870bd4c567d5c9e391fb601c4c6df129f93e5dc494edea6ed64d59652e8a278480a97db80fcb7ccd78", 0x8c, 0x4000081, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x45}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) 1.123610599s ago: executing program 0 (id=238): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000100"], 0x30}}, 0x44) (fail_nth: 5) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x20280c8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) 735.21267ms ago: executing program 0 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="bd38", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="185dfa0001070000000000000000000018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query], &(0x7f00000011c0)='syzkaller\x00', 0x5, 0x54, &(0x7f0000001200)=""/84, 0x100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x2, 0x3, 0x4ce}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, r1, r0, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], &(0x7f0000001340)=[{0x1, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x9, 0x6}, {0x2, 0x5, 0x5}, {0x3, 0x1, 0xb, 0x8}, {0x5, 0x3, 0xe, 0xf529f8d25f58f4ea}, {0x1, 0x5, 0x4, 0x9}, {0x3, 0x1, 0xd, 0x5}, {0x2, 0x5, 0xb, 0x1}], 0x10, 0x4}, 0x94) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x290) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 728.928221ms ago: executing program 0 (id=240): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="5429e5087a45e68d187a1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRESDEC=r4, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x800}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xbe2}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0xb, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x4dac, 0x0, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="967130d148f1eae02c13ff25a84fb83ac71b91e427e3e839a253eaccb4dbea607eb519c01eb48959495ed03bbc1ef9de7e9e48ace129774d85ad0e32872c77622bb819675caba6b4716c01f02e0af5fdc94d780db2f12988c13f6189c7", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000006020000000900010073797a30000000000900020073797a320000000005000740c500000018000480140001800b0001007470726f7879"], 0x74}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) 728.431451ms ago: executing program 3 (id=241): time(&(0x7f0000000040)) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd0000", 0x23) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) semget(0x3, 0x4, 0x428) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x3fffff) 693.281554ms ago: executing program 4 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 670.682465ms ago: executing program 2 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 669.302806ms ago: executing program 4 (id=244): r0 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) accept4(r0, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80, 0x80000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b104}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xd}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000280), &(0x7f0000000840)=r6}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve1\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5535, 0x3acd, 0x22, 0x0, 0x0) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x810, &(0x7f0000000540)={0xc9, 0x0, r8}, 0x14) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r12) 646.536517ms ago: executing program 2 (id=245): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 573.650093ms ago: executing program 2 (id=246): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,privport']) sendto(r0, &(0x7f00000005c0)="a1695339d8cfbc19bbbbdb77797326193252c0e9aafef7c3e1225dbf1186424ee9d8f749e6a8b28a6de4d2feb06a34a80936f618b63ebcf5d3f21fa3a4b901b748aa0bc4fd6b0f61d0dddb35b50ba6f52cdba9b979b9e4a8d010e5c50d4412e0c95254870bd4c567d5c9e391fb601c4c6df129f93e5dc494edea6ed64d59652e8a278480a97db80fcb7ccd78", 0x8c, 0x4000081, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) 490.59798ms ago: executing program 2 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff36030004000000004000000000000000f500000000000000000000002c8f380003000000000000000d00000000000000c801800000000000e20000000000000010fe0000000000000300000000000000e28996e0f3a5ad5502"], 0xe5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) r3 = epoll_create(0x400) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0xfe, 0x6cd}]}) r6 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x5, &(0x7f0000000580)=""/158, 0x9e}, 0x2120) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x0, 0xc5, 0xc5, &(0x7f0000000640)="b7806ce577e82f62df1890efa5665a8f7d0a687f25611804d696a9e67fd3497970bdf9df5bf3d457eb9a9b24e3cce90f8ef27aa5c2c9e9b3229d4d374997fc3690216833c67362f9c81f8ca29abd7b5727441ae4f3c3484067acdb4bc429c6b17d2306a38e0714c87f4b2f9a796d4e35677f3af2be4f2e402db8ceff6cf47e8abbd13412fabdc122e88dc5828bbe65969558017b0b195702a3857f917c69847dce0967be7d907220a39b88c2b99291808a5593cdd38ab50d1dd360bed7fdc5f80924f36bde", &(0x7f0000000a00)=""/197, 0xf, 0x0, 0x76, 0x79, &(0x7f00000008c0)="76d7ecd717dcd75093e83179b9379acb93662f31f7e09044b2108e577e771da4d4a26ce12fe54b8aab2b50c583b9f8831baad999ba3980ddc14c49b06b4120687f6389d3f329435681ccdbed0f5555dfe731342bec9fa00458a08452020a62ab76b013c97c3e6b10294f3d66d77bdf5f3e5f4d01e071", &(0x7f0000000b00)="08fb8ac27c03221453cec03340c28cf2483dac43b6aafe4a09886dc938734ed7f723832892ffddbba8a6bc67e55b33c33a516616718a09d268e44fa27492c09e6713dc8e074f49c8fbb2505c8686878249bb17a81cfbb6b63375eacaae594593a6548877c9f7e2966106951a5e15f8df56e63424f532d73241", 0x1, 0x0, 0xffffffff}, 0x50) 484.89203ms ago: executing program 3 (id=248): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x0, &(0x7f0000000580)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x5f}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2418, 0x10000, 0x40000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 483.551101ms ago: executing program 4 (id=249): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="5429e5087a45e68d187a1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000", @ANYRESDEC=r4, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x800}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xbe2}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0xb, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x4dac, 0x0, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="967130d148f1eae02c13ff25a84fb83ac71b91e427e3e839a253eaccb4dbea607eb519c01eb48959495ed03bbc1ef9de7e9e48ace129774d85ad0e32872c77622bb819675caba6b4716c01f02e0af5fdc94d780db2f12988c13f6189c7", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000006020000000900010073797a30000000000900020073797a320000000005000740c500000018000480140001800b0001007470726f7879"], 0x74}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) 398.428757ms ago: executing program 1 (id=250): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002080)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x5df, &(0x7f0000002680)="$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") 83.064173ms ago: executing program 1 (id=251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="bd38", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="185dfa0001070000000000000000000018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query], &(0x7f00000011c0)='syzkaller\x00', 0x5, 0x54, &(0x7f0000001200)=""/84, 0x100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x2, 0x3, 0x4ce}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, r1, r0, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], &(0x7f0000001340)=[{0x1, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x9, 0x6}, {0x2, 0x5, 0x5}, {0x3, 0x1, 0xb, 0x8}, {0x5, 0x3, 0xe, 0xf529f8d25f58f4ea}, {0x1, 0x5, 0x4, 0x9}, {0x3, 0x1, 0xd, 0x5}, {0x2, 0x5, 0xb, 0x1}], 0x10, 0x4}, 0x94) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x290) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 75.158083ms ago: executing program 1 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) epoll_create(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079104900000000005500ffff110000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, r0}, 0x94) 0s ago: executing program 1 (id=253): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff36030004000000004000000000000000f500000000000000000000002c8f380003000000000000000d00000000000000c801800000000000e20000000000000010fe0000000000000300000000000000e28996e0f3a5ad5502"], 0xe5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) r3 = epoll_create(0x400) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0xfe, 0x6cd}]}) r6 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x5, &(0x7f0000000580)=""/158, 0x9e}, 0x2120) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x0, 0xc5, 0xc5, &(0x7f0000000640)="b7806ce577e82f62df1890efa5665a8f7d0a687f25611804d696a9e67fd3497970bdf9df5bf3d457eb9a9b24e3cce90f8ef27aa5c2c9e9b3229d4d374997fc3690216833c67362f9c81f8ca29abd7b5727441ae4f3c3484067acdb4bc429c6b17d2306a38e0714c87f4b2f9a796d4e35677f3af2be4f2e402db8ceff6cf47e8abbd13412fabdc122e88dc5828bbe65969558017b0b195702a3857f917c69847dce0967be7d907220a39b88c2b99291808a5593cdd38ab50d1dd360bed7fdc5f80924f36bde", &(0x7f0000000a00)=""/197, 0xf, 0x0, 0x76, 0x79, &(0x7f00000008c0)="76d7ecd717dcd75093e83179b9379acb93662f31f7e09044b2108e577e771da4d4a26ce12fe54b8aab2b50c583b9f8831baad999ba3980ddc14c49b06b4120687f6389d3f329435681ccdbed0f5555dfe731342bec9fa00458a08452020a62ab76b013c97c3e6b10294f3d66d77bdf5f3e5f4d01e071", &(0x7f0000000b00)="08fb8ac27c03221453cec03340c28cf2483dac43b6aafe4a09886dc938734ed7f723832892ffddbba8a6bc67e55b33c33a516616718a09d268e44fa27492c09e6713dc8e074f49c8fbb2505c8686878249bb17a81cfbb6b63375eacaae594593a6548877c9f7e2966106951a5e15f8df56e63424f532d73241", 0x1, 0x0, 0xffffffff}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 32.228340][ T29] audit: type=1400 audit(1756403804.013:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.229113][ T3291] cgroup: Unknown subsys name 'net' [ 32.253324][ T29] audit: type=1400 audit(1756403804.013:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.283035][ T29] audit: type=1400 audit(1756403804.043:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.420288][ T3291] cgroup: Unknown subsys name 'cpuset' [ 32.426859][ T3291] cgroup: Unknown subsys name 'rlimit' [ 32.566315][ T29] audit: type=1400 audit(1756403804.353:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.594364][ T29] audit: type=1400 audit(1756403804.353:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.608615][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.617233][ T29] audit: type=1400 audit(1756403804.353:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.645860][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.647863][ T29] audit: type=1400 audit(1756403804.353:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.678645][ T29] audit: type=1400 audit(1756403804.363:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.704909][ T29] audit: type=1400 audit(1756403804.363:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.729990][ T29] audit: type=1400 audit(1756403804.413:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.050089][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 34.074792][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 34.099975][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 34.148104][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 34.182889][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.190921][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.199986][ T3300] bridge_slave_0: entered allmulticast mode [ 34.207080][ T3300] bridge_slave_0: entered promiscuous mode [ 34.233042][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.240267][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.247982][ T3300] bridge_slave_1: entered allmulticast mode [ 34.255974][ T3300] bridge_slave_1: entered promiscuous mode [ 34.301180][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.309879][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.319547][ T3302] bridge_slave_0: entered allmulticast mode [ 34.326557][ T3302] bridge_slave_0: entered promiscuous mode [ 34.336985][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.348205][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.357837][ T3302] bridge_slave_1: entered allmulticast mode [ 34.365153][ T3302] bridge_slave_1: entered promiscuous mode [ 34.372043][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.380048][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.389024][ T3307] bridge_slave_0: entered allmulticast mode [ 34.397752][ T3307] bridge_slave_0: entered promiscuous mode [ 34.418795][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 34.442873][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.451248][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.459646][ T3307] bridge_slave_1: entered allmulticast mode [ 34.467343][ T3307] bridge_slave_1: entered promiscuous mode [ 34.481035][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.494543][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.512694][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.521862][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.531144][ T3310] bridge_slave_0: entered allmulticast mode [ 34.540275][ T3310] bridge_slave_0: entered promiscuous mode [ 34.548711][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.582814][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.592999][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.601604][ T3310] bridge_slave_1: entered allmulticast mode [ 34.609570][ T3310] bridge_slave_1: entered promiscuous mode [ 34.618423][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.631438][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.643576][ T3300] team0: Port device team_slave_0 added [ 34.665499][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.688223][ T3300] team0: Port device team_slave_1 added [ 34.725992][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.741369][ T3302] team0: Port device team_slave_0 added [ 34.750571][ T3307] team0: Port device team_slave_0 added [ 34.771727][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.788776][ T3302] team0: Port device team_slave_1 added [ 34.799626][ T3307] team0: Port device team_slave_1 added [ 34.808022][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.818105][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.857055][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.871825][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.880828][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.889517][ T3303] bridge_slave_0: entered allmulticast mode [ 34.897782][ T3303] bridge_slave_0: entered promiscuous mode [ 34.927883][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.938152][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.972221][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.984196][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.993036][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.001478][ T3303] bridge_slave_1: entered allmulticast mode [ 35.008854][ T3303] bridge_slave_1: entered promiscuous mode [ 35.016368][ T3310] team0: Port device team_slave_0 added [ 35.048710][ T3310] team0: Port device team_slave_1 added [ 35.057363][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.066972][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.105729][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.131718][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.141139][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.179119][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.207961][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.217429][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.248195][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.263543][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.271801][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.302005][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.317792][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.346305][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.358324][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.393814][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.409011][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.418351][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.453209][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.469660][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.510691][ T3300] hsr_slave_0: entered promiscuous mode [ 35.518922][ T3300] hsr_slave_1: entered promiscuous mode [ 35.546487][ T3303] team0: Port device team_slave_0 added [ 35.554223][ T3303] team0: Port device team_slave_1 added [ 35.576526][ T3307] hsr_slave_0: entered promiscuous mode [ 35.584693][ T3307] hsr_slave_1: entered promiscuous mode [ 35.591830][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 35.602031][ T3307] Cannot create hsr debugfs directory [ 35.614051][ T3302] hsr_slave_0: entered promiscuous mode [ 35.624521][ T3302] hsr_slave_1: entered promiscuous mode [ 35.633022][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 35.648638][ T3302] Cannot create hsr debugfs directory [ 35.685502][ T3310] hsr_slave_0: entered promiscuous mode [ 35.694482][ T3310] hsr_slave_1: entered promiscuous mode [ 35.702038][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 35.709607][ T3310] Cannot create hsr debugfs directory [ 35.719351][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.728072][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.762243][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.775825][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.784764][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.822717][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.917812][ T3303] hsr_slave_0: entered promiscuous mode [ 35.926943][ T3303] hsr_slave_1: entered promiscuous mode [ 35.935575][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 35.942542][ T3303] Cannot create hsr debugfs directory [ 36.099295][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.109873][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.128204][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.146855][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.183627][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.194925][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.208296][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.220639][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.244802][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.255915][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.267150][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.278467][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.323373][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.345033][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.355229][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.366575][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.394437][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.415902][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.440719][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.449132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.463948][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.474628][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.485839][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.496440][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.513527][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.528459][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.560166][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.579337][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.602861][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.614787][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.631207][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.639676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.648474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.656194][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.675187][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.682828][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.701495][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.709673][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.731849][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.757299][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.769040][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.785135][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.808883][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.826141][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.835098][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.873403][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.882443][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.930921][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.950737][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.996654][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.009060][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.026247][ T3300] veth0_vlan: entered promiscuous mode [ 37.060252][ T3300] veth1_vlan: entered promiscuous mode [ 37.080124][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.097975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.107285][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.134115][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.143826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.174001][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.186180][ T3310] veth0_vlan: entered promiscuous mode [ 37.211578][ T3310] veth1_vlan: entered promiscuous mode [ 37.223793][ T3300] veth0_macvtap: entered promiscuous mode [ 37.240773][ T3300] veth1_macvtap: entered promiscuous mode [ 37.290601][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.304149][ T3310] veth0_macvtap: entered promiscuous mode [ 37.318555][ T3310] veth1_macvtap: entered promiscuous mode [ 37.329778][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.346665][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.358312][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.378850][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.405182][ T3302] veth0_vlan: entered promiscuous mode [ 37.419827][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.444204][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.460705][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.468462][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 37.468476][ T29] audit: type=1400 audit(1756403809.253:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.7622Vn/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.511163][ T29] audit: type=1400 audit(1756403809.253:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.536328][ T29] audit: type=1400 audit(1756403809.263:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.7622Vn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.567016][ T29] audit: type=1400 audit(1756403809.263:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.598227][ T29] audit: type=1400 audit(1756403809.263:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.7622Vn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.634468][ T29] audit: type=1400 audit(1756403809.263:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.7622Vn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.666310][ T29] audit: type=1400 audit(1756403809.263:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.691879][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.705762][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.722425][ T29] audit: type=1400 audit(1756403809.303:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.724223][ T3302] veth1_vlan: entered promiscuous mode [ 37.755165][ T29] audit: type=1400 audit(1756403809.303:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.793310][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.801929][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.831952][ T29] audit: type=1400 audit(1756403809.623:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.858672][ T3302] veth0_macvtap: entered promiscuous mode [ 37.895376][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.906149][ T3469] loop1: detected capacity change from 0 to 1024 [ 37.918754][ T3302] veth1_macvtap: entered promiscuous mode [ 37.927731][ T3469] ======================================================= [ 37.927731][ T3469] WARNING: The mand mount option has been deprecated and [ 37.927731][ T3469] and is ignored by this kernel. Remove the mand [ 37.927731][ T3469] option from the mount to silence this warning. [ 37.927731][ T3469] ======================================================= [ 37.994886][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.009954][ T3307] veth0_vlan: entered promiscuous mode [ 38.011940][ T3469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.023319][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.038824][ T3469] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.045331][ T3307] veth1_vlan: entered promiscuous mode [ 38.079306][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.088516][ T3478] loop2: detected capacity change from 0 to 2048 [ 38.114329][ T3307] veth0_macvtap: entered promiscuous mode [ 38.125962][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.134876][ T3294] loop2: p2 p3 p7 [ 38.151840][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.163524][ T3307] veth1_macvtap: entered promiscuous mode [ 38.178315][ T3457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.181971][ T3478] loop2: p2 p3 p7 [ 38.196399][ T3303] veth0_vlan: entered promiscuous mode [ 38.209874][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.236720][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.244455][ T3481] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.2: lblock 1 mapped to illegal pblock 1 (length 15) [ 38.270043][ T3481] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 38.288960][ T3481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.288960][ T3481] [ 38.301965][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.326221][ T3303] veth1_vlan: entered promiscuous mode [ 38.330802][ T3481] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 38.369676][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.394077][ T3484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 38.427131][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.437555][ T3303] veth0_macvtap: entered promiscuous mode [ 38.446216][ T3303] veth1_macvtap: entered promiscuous mode [ 38.468617][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.486085][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.500773][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.514243][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.541764][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.561880][ T3488] loop3: detected capacity change from 0 to 1024 [ 38.588247][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.590808][ T3490] SELinux: failed to load policy [ 38.604671][ T3488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.619844][ T3488] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.641332][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.653763][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.712763][ T3495] SELinux: failed to load policy [ 38.750533][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.755232][ T3498] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.4: lblock 1 mapped to illegal pblock 1 (length 15) [ 38.828059][ T3500] SELinux: failed to load policy [ 38.848693][ T3498] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 38.862715][ T3498] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.862715][ T3498] [ 38.892795][ T3498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 38.914195][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 38.927689][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 38.932534][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 38.997689][ T3509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.045349][ T3509] loop1: detected capacity change from 0 to 128 [ 39.073951][ T3509] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.088579][ T3509] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.157300][ T3512] SELinux: failed to load policy [ 39.316468][ T3517] SELinux: failed to load policy [ 39.352201][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.417227][ T3522] loop4: detected capacity change from 0 to 1024 [ 39.456889][ T3522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.471615][ T3522] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.606905][ T3536] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.17: lblock 1 mapped to illegal pblock 1 (length 15) [ 39.653875][ T3540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 39.687980][ T3546] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 39.691453][ T3536] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 39.713019][ T3536] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.713019][ T3536] [ 39.743715][ T3536] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.939134][ T3566] loop0: detected capacity change from 0 to 1024 [ 39.957734][ T3566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.009658][ T3566] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.043232][ T3572] loop2: detected capacity change from 0 to 2048 [ 40.123450][ T3506] loop2: p2 p3 p7 [ 40.157146][ T3572] loop2: p2 p3 p7 [ 40.166057][ T3589] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.30: lblock 1 mapped to illegal pblock 1 (length 15) [ 40.206640][ T3589] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 40.222414][ T3589] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.222414][ T3589] [ 40.250735][ T3589] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 40.288136][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.777008][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.788517][ T3604] loop3: detected capacity change from 0 to 1024 [ 40.800991][ T3604] EXT4-fs: inline encryption not supported [ 40.807416][ T3604] EXT4-fs: Ignoring removed i_version option [ 40.832240][ T3604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.859640][ T3608] loop1: detected capacity change from 0 to 736 [ 40.876413][ T3608] rock: directory entry would overflow storage [ 40.884478][ T3608] rock: sig=0x3b10, size=4, remaining=3 [ 41.068445][ T3617] loop0: detected capacity change from 0 to 736 [ 41.089010][ T3616] loop2: detected capacity change from 0 to 736 [ 41.112431][ T3616] rock: directory entry would overflow storage [ 41.119704][ T3616] rock: sig=0x3b10, size=4, remaining=3 [ 41.134325][ T3617] rock: directory entry would overflow storage [ 41.141898][ T3617] rock: sig=0x3b10, size=4, remaining=3 [ 41.392247][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.396384][ T3666] SELinux: failed to load policy [ 41.417123][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 41.422750][ T3672] loop4: detected capacity change from 0 to 4096 [ 41.482722][ T3680] loop3: detected capacity change from 0 to 1024 [ 41.498206][ T3672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.551707][ T3690] Zero length message leads to an empty skb [ 41.563331][ T3680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.573901][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 41.578491][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.607443][ T3691] loop0: detected capacity change from 0 to 2048 [ 41.607496][ T3680] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.706305][ T3691] loop0: p2 p3 p7 [ 41.725144][ T3696] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.50: lblock 1 mapped to illegal pblock 1 (length 15) [ 41.750086][ T3696] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 41.765463][ T3696] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.765463][ T3696] [ 41.779048][ T3696] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 42.069823][ T3698] loop2: detected capacity change from 0 to 736 [ 42.090910][ T3698] rock: directory entry would overflow storage [ 42.098561][ T3698] rock: sig=0x3b10, size=4, remaining=3 [ 42.277861][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 42.315927][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.476479][ T3753] loop3: detected capacity change from 0 to 2048 [ 42.483223][ T3751] loop2: detected capacity change from 0 to 4096 [ 42.507602][ T3749] SELinux: failed to load policy [ 42.528313][ T3751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.563552][ T3506] loop3: p2 p3 p7 [ 42.594571][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.607207][ T3753] loop3: p2 p3 p7 [ 42.722534][ T3767] SELinux: failed to load policy [ 42.747824][ T3774] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 42.759963][ T3774] SELinux: failed to load policy [ 42.784710][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 42.784728][ T29] audit: type=1326 audit(1756403814.573:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 42.793422][ T3760] loop4: detected capacity change from 0 to 736 [ 42.835384][ T3777] loop2: detected capacity change from 0 to 1024 [ 42.848872][ T3760] rock: directory entry would overflow storage [ 42.857534][ T3760] rock: sig=0x3b10, size=4, remaining=3 [ 42.867826][ T29] audit: type=1326 audit(1756403814.573:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 42.894135][ T29] audit: type=1326 audit(1756403814.573:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 42.919701][ T29] audit: type=1326 audit(1756403814.573:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 42.944409][ T29] audit: type=1326 audit(1756403814.573:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 42.969910][ T29] audit: type=1326 audit(1756403814.573:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 42.996442][ T29] audit: type=1326 audit(1756403814.573:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 43.000102][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'. [ 43.022835][ T29] audit: type=1326 audit(1756403814.573:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 43.060437][ T29] audit: type=1326 audit(1756403814.573:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 43.087364][ T29] audit: type=1326 audit(1756403814.573:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0402bebe9 code=0x7ffc0000 [ 43.116203][ T3777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.141135][ T3777] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.172819][ T3788] loop4: detected capacity change from 0 to 1024 [ 43.225758][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.238837][ T3788] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.261396][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 43.287054][ T3796] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.75: lblock 1 mapped to illegal pblock 1 (length 15) [ 43.397113][ T3796] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 43.410804][ T3796] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.410804][ T3796] [ 43.440542][ T3814] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.76: lblock 1 mapped to illegal pblock 1 (length 15) [ 43.450377][ T3796] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.486339][ T3814] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 43.499152][ T3814] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.499152][ T3814] [ 43.541210][ T3814] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.647405][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.672724][ T3844] loop0: detected capacity change from 0 to 1024 [ 43.686624][ T3840] SELinux: failed to load policy [ 43.725367][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.779531][ T3844] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.923839][ T3858] SELinux: failed to load policy [ 43.925327][ T3864] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.83: lblock 1 mapped to illegal pblock 1 (length 15) [ 43.950584][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 43.996220][ T3864] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 44.010189][ T3864] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.010189][ T3864] [ 44.057142][ T3864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.057609][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.114930][ T3870] loop2: detected capacity change from 0 to 2048 [ 44.183877][ T3874] SELinux: failed to load policy [ 44.193780][ T3870] loop2: p2 p3 p7 [ 44.262623][ T3878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 44.366113][ T3881] loop1: detected capacity change from 0 to 2048 [ 44.435417][ T3811] loop1: p2 p3 p7 [ 44.456670][ T3881] loop1: p2 p3 p7 [ 44.501085][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.571606][ T3885] loop0: detected capacity change from 0 to 4096 [ 44.587028][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.612436][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.656869][ T3890] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.666775][ T3890] SELinux: failed to load policy [ 44.701828][ T3894] FAULT_INJECTION: forcing a failure. [ 44.701828][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.715881][ T3894] CPU: 0 UID: 0 PID: 3894 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.715912][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.715924][ T3894] Call Trace: [ 44.715933][ T3894] [ 44.716021][ T3894] __dump_stack+0x1d/0x30 [ 44.716120][ T3894] dump_stack_lvl+0xe8/0x140 [ 44.716137][ T3894] dump_stack+0x15/0x1b [ 44.716151][ T3894] should_fail_ex+0x265/0x280 [ 44.716184][ T3894] should_fail+0xb/0x20 [ 44.716283][ T3894] should_fail_usercopy+0x1a/0x20 [ 44.716314][ T3894] _copy_from_iter+0x390/0xe80 [ 44.716397][ T3894] ? skb_page_frag_refill+0xc0/0x300 [ 44.716426][ T3894] tcp_sendmsg_locked+0x16be/0x2c00 [ 44.716463][ T3894] ? __pfx_tcp_sendmsg+0x10/0x10 [ 44.716543][ T3894] tcp_sendmsg+0x2f/0x50 [ 44.716570][ T3894] inet_sendmsg+0x76/0xd0 [ 44.716593][ T3894] __sock_sendmsg+0x102/0x180 [ 44.716623][ T3894] ____sys_sendmsg+0x345/0x4e0 [ 44.716646][ T3894] ___sys_sendmsg+0x17b/0x1d0 [ 44.716679][ T3894] __sys_sendmmsg+0x178/0x300 [ 44.716731][ T3894] __x64_sys_sendmmsg+0x57/0x70 [ 44.716744][ T3894] x64_sys_call+0x1c4a/0x2ff0 [ 44.716757][ T3894] do_syscall_64+0xd2/0x200 [ 44.716773][ T3894] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.716839][ T3894] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.716866][ T3894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.716911][ T3894] RIP: 0033:0x7f788c9cebe9 [ 44.716922][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.716934][ T3894] RSP: 002b:00007f788b42f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.716948][ T3894] RAX: ffffffffffffffda RBX: 00007f788cbf5fa0 RCX: 00007f788c9cebe9 [ 44.716956][ T3894] RDX: 0000000000000004 RSI: 0000200000000f40 RDI: 0000000000000003 [ 44.716965][ T3894] RBP: 00007f788b42f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.717014][ T3894] R10: 0000000004048841 R11: 0000000000000246 R12: 0000000000000001 [ 44.717022][ T3894] R13: 00007f788cbf6038 R14: 00007f788cbf5fa0 R15: 00007ffc958f0f18 [ 44.717106][ T3894] [ 45.010947][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 45.064857][ T3903] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 45.084045][ T3903] SELinux: failed to load policy [ 45.124804][ T3904] loop3: detected capacity change from 0 to 2048 [ 45.133151][ T3900] SELinux: failed to load policy [ 45.185975][ T3811] loop3: p2 p3 p7 [ 45.196665][ T3913] loop2: detected capacity change from 0 to 1024 [ 45.214860][ T3904] loop3: p2 p3 p7 [ 45.252198][ T3916] loop0: detected capacity change from 0 to 1024 [ 45.268880][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.288271][ T3913] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.325763][ T3916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.341321][ T3916] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.412624][ T3929] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.108: lblock 1 mapped to illegal pblock 1 (length 15) [ 45.440639][ T3929] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 45.455354][ T3929] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.455354][ T3929] [ 45.470251][ T3929] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.496510][ T3935] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.110: lblock 1 mapped to illegal pblock 1 (length 15) [ 45.513953][ T3935] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 45.533851][ T3935] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.533851][ T3935] [ 45.549230][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 45.557892][ T3935] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.603787][ T3942] loop1: detected capacity change from 0 to 1024 [ 45.622283][ T3942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.639720][ T3942] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.715563][ T3945] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.117: lblock 1 mapped to illegal pblock 1 (length 15) [ 45.732584][ T3945] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 45.747054][ T3945] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.747054][ T3945] [ 45.759598][ T3945] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.863686][ T3947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 45.948543][ T3950] SELinux: failed to load policy [ 46.032950][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.084359][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.216178][ T3975] loop0: detected capacity change from 0 to 4096 [ 46.228682][ T3975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.346293][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.397449][ T3987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 46.406662][ T3987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 46.525848][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.541543][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 46.705109][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.135'. [ 46.745858][ T3995] loop4: detected capacity change from 0 to 1024 [ 46.810737][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.839151][ T3995] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.903093][ T4006] SELinux: failed to load policy [ 46.903736][ T4015] netlink: 272 bytes leftover after parsing attributes in process `syz.3.139'. [ 46.919578][ T3995] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 46.962070][ T3995] EXT4-fs (loop4): Remounting filesystem read-only [ 47.037475][ T3995] netem: unknown loss type 12 [ 47.043887][ T3995] netem: change failed [ 47.070407][ T3995] syz.4.134 (3995) used greatest stack depth: 9480 bytes left [ 47.105490][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.125575][ T4027] loop1: detected capacity change from 0 to 1024 [ 47.155689][ T4027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.179589][ T4027] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.261400][ T4035] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 47.349081][ T4039] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 47.360791][ T4039] SELinux: failed to load policy [ 47.427463][ T4041] loop4: detected capacity change from 0 to 4096 [ 47.439893][ T4041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.474596][ T4050] loop3: detected capacity change from 0 to 2048 [ 47.494059][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.537070][ T3811] loop3: p2 p3 p7 [ 47.589435][ T4050] loop3: p2 p3 p7 [ 47.693411][ T4056] loop4: detected capacity change from 0 to 2048 [ 47.746109][ T4056] loop4: p2 p3 p7 [ 47.942301][ T4060] FAULT_INJECTION: forcing a failure. [ 47.942301][ T4060] name failslab, interval 1, probability 0, space 0, times 1 [ 47.956563][ T4060] CPU: 0 UID: 0 PID: 4060 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.956588][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.956598][ T4060] Call Trace: [ 47.956605][ T4060] [ 47.956613][ T4060] __dump_stack+0x1d/0x30 [ 47.956636][ T4060] dump_stack_lvl+0xe8/0x140 [ 47.956710][ T4060] dump_stack+0x15/0x1b [ 47.956728][ T4060] should_fail_ex+0x265/0x280 [ 47.956748][ T4060] should_failslab+0x8c/0xb0 [ 47.956773][ T4060] kmem_cache_alloc_node_noprof+0x57/0x320 [ 47.956804][ T4060] ? __alloc_skb+0x101/0x320 [ 47.956842][ T4060] __alloc_skb+0x101/0x320 [ 47.956858][ T4060] pfkey_sendmsg+0xd7/0x900 [ 47.956886][ T4060] ? avc_has_perm+0xf7/0x180 [ 47.957040][ T4060] ? selinux_socket_sendmsg+0x175/0x1b0 [ 47.957151][ T4060] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 47.957201][ T4060] __sock_sendmsg+0x145/0x180 [ 47.957306][ T4060] ____sys_sendmsg+0x31e/0x4e0 [ 47.957332][ T4060] ___sys_sendmsg+0x17b/0x1d0 [ 47.957364][ T4060] __x64_sys_sendmsg+0xd4/0x160 [ 47.957391][ T4060] x64_sys_call+0x191e/0x2ff0 [ 47.957477][ T4060] do_syscall_64+0xd2/0x200 [ 47.957501][ T4060] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.957523][ T4060] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.957605][ T4060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.957695][ T4060] RIP: 0033:0x7f788c9cebe9 [ 47.957711][ T4060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.957729][ T4060] RSP: 002b:00007f788b42f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.957748][ T4060] RAX: ffffffffffffffda RBX: 00007f788cbf5fa0 RCX: 00007f788c9cebe9 [ 47.957760][ T4060] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 47.957771][ T4060] RBP: 00007f788b42f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.957850][ T4060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.957864][ T4060] R13: 00007f788cbf6038 R14: 00007f788cbf5fa0 R15: 00007ffc958f0f18 [ 47.957882][ T4060] [ 48.197128][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.294303][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 48.294322][ T29] audit: type=1326 audit(1756403820.083:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.337107][ T29] audit: type=1326 audit(1756403820.083:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.397329][ T29] audit: type=1326 audit(1756403820.083:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.423572][ T29] audit: type=1326 audit(1756403820.083:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.448834][ T29] audit: type=1326 audit(1756403820.183:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.476062][ T29] audit: type=1326 audit(1756403820.183:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.503907][ T29] audit: type=1326 audit(1756403820.193:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.534738][ T29] audit: type=1326 audit(1756403820.203:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.560602][ T29] audit: type=1326 audit(1756403820.203:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.585891][ T29] audit: type=1326 audit(1756403820.213:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6d58e0ebe9 code=0x7ffc0000 [ 48.770277][ T4085] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 48.815315][ T4085] SELinux: failed to load policy [ 48.825766][ T4084] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 48.854471][ T4084] SELinux: failed to load policy [ 48.900592][ T4094] FAULT_INJECTION: forcing a failure. [ 48.900592][ T4094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.916146][ T4094] CPU: 1 UID: 0 PID: 4094 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.916221][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.916234][ T4094] Call Trace: [ 48.916287][ T4094] [ 48.916295][ T4094] __dump_stack+0x1d/0x30 [ 48.916318][ T4094] dump_stack_lvl+0xe8/0x140 [ 48.916339][ T4094] dump_stack+0x15/0x1b [ 48.916357][ T4094] should_fail_ex+0x265/0x280 [ 48.916397][ T4094] should_fail+0xb/0x20 [ 48.916414][ T4094] should_fail_usercopy+0x1a/0x20 [ 48.916438][ T4094] copy_folio_from_iter_atomic+0x278/0x11b0 [ 48.916479][ T4094] ? shmem_write_begin+0xa8/0x190 [ 48.916541][ T4094] ? shmem_write_begin+0xe1/0x190 [ 48.916562][ T4094] generic_perform_write+0x2c2/0x490 [ 48.916585][ T4094] shmem_file_write_iter+0xc5/0xf0 [ 48.916671][ T4094] do_iter_readv_writev+0x499/0x540 [ 48.916697][ T4094] vfs_writev+0x2df/0x8b0 [ 48.916734][ T4094] __se_sys_pwritev2+0xfc/0x1c0 [ 48.916806][ T4094] __x64_sys_pwritev2+0x67/0x80 [ 48.916828][ T4094] x64_sys_call+0x2c55/0x2ff0 [ 48.916916][ T4094] do_syscall_64+0xd2/0x200 [ 48.916946][ T4094] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.916968][ T4094] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.916990][ T4094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.917052][ T4094] RIP: 0033:0x7fa8f783ebe9 [ 48.917067][ T4094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.917082][ T4094] RSP: 002b:00007fa8f62a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 48.917100][ T4094] RAX: ffffffffffffffda RBX: 00007fa8f7a65fa0 RCX: 00007fa8f783ebe9 [ 48.917112][ T4094] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 48.917203][ T4094] RBP: 00007fa8f62a7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.917214][ T4094] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000002 [ 48.917225][ T4094] R13: 00007fa8f7a66038 R14: 00007fa8f7a65fa0 R15: 00007ffcd9cae168 [ 48.917242][ T4094] [ 49.157884][ T4095] loop4: detected capacity change from 0 to 4096 [ 49.167489][ T4095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.258715][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.322567][ T4102] __nla_validate_parse: 3 callbacks suppressed [ 49.322586][ T4102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 49.361107][ T4104] loop4: detected capacity change from 0 to 164 [ 49.378478][ T4104] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.426081][ T4104] FAULT_INJECTION: forcing a failure. [ 49.426081][ T4104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.440078][ T4104] CPU: 1 UID: 0 PID: 4104 Comm: syz.4.168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.440106][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.440149][ T4104] Call Trace: [ 49.440156][ T4104] [ 49.440163][ T4104] __dump_stack+0x1d/0x30 [ 49.440184][ T4104] dump_stack_lvl+0xe8/0x140 [ 49.440201][ T4104] dump_stack+0x15/0x1b [ 49.440263][ T4104] should_fail_ex+0x265/0x280 [ 49.440283][ T4104] should_fail+0xb/0x20 [ 49.440359][ T4104] should_fail_usercopy+0x1a/0x20 [ 49.440381][ T4104] strncpy_from_user+0x25/0x230 [ 49.440413][ T4104] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 49.440471][ T4104] strncpy_from_user_nofault+0x68/0xf0 [ 49.440496][ T4104] bpf_bprintf_prepare+0x88f/0xd90 [ 49.440522][ T4104] ? bpf_trace_run2+0xf5/0x1c0 [ 49.440545][ T4104] bpf_trace_printk+0x84/0x1c0 [ 49.440612][ T4104] ? trie_delete_elem+0x38f/0x5b0 [ 49.440660][ T4104] ? bpf_trace_run2+0xf5/0x1c0 [ 49.440680][ T4104] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 49.440697][ T4104] bpf_trace_run2+0x107/0x1c0 [ 49.440789][ T4104] ? rock_continue+0x53/0x2e0 [ 49.440839][ T4104] ? rock_continue+0x53/0x2e0 [ 49.440857][ T4104] __traceiter_kfree+0x2e/0x50 [ 49.440879][ T4104] ? rock_continue+0x53/0x2e0 [ 49.440896][ T4104] kfree+0x27b/0x320 [ 49.440997][ T4104] rock_continue+0x53/0x2e0 [ 49.441018][ T4104] get_rock_ridge_filename+0x503/0x5b0 [ 49.441100][ T4104] isofs_lookup+0x3c4/0x930 [ 49.441133][ T4104] ? __rcu_read_unlock+0x4f/0x70 [ 49.441229][ T4104] __lookup_slow+0x193/0x250 [ 49.441263][ T4104] lookup_slow+0x3c/0x60 [ 49.441293][ T4104] walk_component+0x1ec/0x220 [ 49.441361][ T4104] path_lookupat+0xfe/0x2a0 [ 49.441389][ T4104] filename_lookup+0x147/0x340 [ 49.441433][ T4104] user_path_at+0x3e/0x130 [ 49.441486][ T4104] do_utimes+0xd9/0x210 [ 49.441513][ T4104] __x64_sys_futimesat+0xd2/0x1a0 [ 49.441541][ T4104] x64_sys_call+0x2eb2/0x2ff0 [ 49.441561][ T4104] do_syscall_64+0xd2/0x200 [ 49.441653][ T4104] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.441676][ T4104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.441700][ T4104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.441801][ T4104] RIP: 0033:0x7fd0402bebe9 [ 49.441815][ T4104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.441831][ T4104] RSP: 002b:00007fd03ed27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 49.441850][ T4104] RAX: ffffffffffffffda RBX: 00007fd0404e5fa0 RCX: 00007fd0402bebe9 [ 49.441864][ T4104] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 49.441877][ T4104] RBP: 00007fd03ed27090 R08: 0000000000000000 R09: 0000000000000000 [ 49.441888][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.441900][ T4104] R13: 00007fd0404e6038 R14: 00007fd0404e5fa0 R15: 00007ffc8f486748 [ 49.441996][ T4104] [ 49.442010][ T4104] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.819318][ T4112] loop3: detected capacity change from 0 to 1024 [ 49.851025][ T4104] Symlink component flag not implemented [ 49.858414][ T4104] Symlink component flag not implemented [ 49.877663][ T4109] capability: warning: `syz.0.171' uses 32-bit capabilities (legacy support in use) [ 49.892033][ T4104] Symlink component flag not implemented (7) [ 49.896289][ T4109] program syz.0.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.899795][ T4104] Symlink component flag not implemented (116) [ 49.961306][ T4112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.989869][ T4112] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.044492][ T4112] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.067064][ T4112] EXT4-fs (loop3): Remounting filesystem read-only [ 50.118097][ T4112] syz.3.170 (4112) used greatest stack depth: 9288 bytes left [ 50.172596][ T4124] SELinux: failed to load policy [ 50.199653][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.259951][ T4130] loop4: detected capacity change from 0 to 1024 [ 50.280803][ T4132] loop0: detected capacity change from 0 to 1024 [ 50.301808][ T4130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.351701][ T4132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.389633][ T4132] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.409510][ T4130] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.459004][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 50.517624][ T4149] loop3: detected capacity change from 0 to 2048 [ 50.610386][ T3811] loop3: p2 p3 p7 [ 50.613583][ T4171] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.637542][ T4172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.691691][ T4149] loop3: p2 p3 p7 [ 50.778676][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 50.779132][ T3811] udevd[3811]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 50.791247][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 50.839875][ T4181] loop2: detected capacity change from 0 to 2048 [ 50.934931][ T3811] loop2: p2 p3 p7 [ 50.962822][ T4181] loop2: p2 p3 p7 [ 50.997394][ T4186] loop1: detected capacity change from 0 to 2048 [ 51.057279][ T4186] loop1: p2 p3 p7 [ 51.099734][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.116780][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.204656][ T4193] loop4: detected capacity change from 0 to 1024 [ 51.253369][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.304164][ T4193] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.356401][ T4193] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 51.405125][ T4193] EXT4-fs (loop4): Remounting filesystem read-only [ 51.435334][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.690579][ T4242] SELinux: failed to load policy [ 51.692410][ T4244] loop2: detected capacity change from 0 to 1024 [ 51.737902][ T4245] loop3: detected capacity change from 0 to 2048 [ 51.761774][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.768227][ T3376] Process accounting resumed [ 51.780207][ T4244] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.797088][ T4250] loop0: detected capacity change from 0 to 512 [ 51.810391][ T3811] loop3: p2 p3 p7 [ 51.831313][ T4245] loop3: p2 p3 p7 [ 51.836161][ T4250] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.866250][ T4250] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.882022][ T4250] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.897926][ T4251] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 51.934006][ T4250] EXT4-fs (loop0): 1 truncate cleaned up [ 51.952027][ T4250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.135976][ T4259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 52.306327][ T4274] loop1: detected capacity change from 0 to 2048 [ 52.394322][ T3811] loop1: p2 p3 p7 [ 52.424554][ T4274] loop1: p2 p3 p7 [ 52.593391][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.625061][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.629336][ T3811] udevd[3811]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 52.640911][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 52.775191][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 52.777083][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.789228][ T3811] udevd[3811]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 52.820707][ T4309] loop2: detected capacity change from 0 to 1024 [ 52.890310][ T4309] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 52.918326][ T4315] FAULT_INJECTION: forcing a failure. [ 52.918326][ T4315] name failslab, interval 1, probability 0, space 0, times 0 [ 52.935749][ T4315] CPU: 0 UID: 0 PID: 4315 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.935842][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.935900][ T4315] Call Trace: [ 52.935908][ T4315] [ 52.935916][ T4315] __dump_stack+0x1d/0x30 [ 52.935940][ T4315] dump_stack_lvl+0xe8/0x140 [ 52.935961][ T4315] dump_stack+0x15/0x1b [ 52.935979][ T4315] should_fail_ex+0x265/0x280 [ 52.936001][ T4315] should_failslab+0x8c/0xb0 [ 52.936054][ T4315] __kmalloc_cache_node_noprof+0x54/0x320 [ 52.936141][ T4315] ? alloc_workqueue_noprof+0x500/0x1330 [ 52.936175][ T4315] alloc_workqueue_noprof+0x500/0x1330 [ 52.936198][ T4315] ? __rcu_read_unlock+0x4f/0x70 [ 52.936218][ T4315] ? loop_set_status_from_info+0x114/0x170 [ 52.936237][ T4315] loop_configure+0x649/0x9c0 [ 52.936265][ T4315] lo_ioctl+0x5aa/0x1240 [ 52.936291][ T4315] ? avc_has_extended_perms+0x73d/0x940 [ 52.936360][ T4315] ? blkdev_common_ioctl+0xad6/0x1ad0 [ 52.936385][ T4315] ? do_vfs_ioctl+0x866/0xe10 [ 52.936405][ T4315] ? selinux_file_ioctl+0x308/0x3a0 [ 52.936429][ T4315] ? __pfx_lo_ioctl+0x10/0x10 [ 52.936458][ T4315] ? __pfx_blkdev_ioctl+0x10/0x10 [ 52.936495][ T4315] blkdev_ioctl+0x34f/0x440 [ 52.936517][ T4315] __se_sys_ioctl+0xce/0x140 [ 52.936536][ T4315] __x64_sys_ioctl+0x43/0x50 [ 52.936630][ T4315] x64_sys_call+0x1816/0x2ff0 [ 52.936654][ T4315] do_syscall_64+0xd2/0x200 [ 52.936677][ T4315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.936710][ T4315] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.936737][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.936761][ T4315] RIP: 0033:0x7fd0402bebe9 [ 52.936778][ T4315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.936798][ T4315] RSP: 002b:00007fd03ed27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.936822][ T4315] RAX: ffffffffffffffda RBX: 00007fd0404e5fa0 RCX: 00007fd0402bebe9 [ 52.936911][ T4315] RDX: 0000200000000140 RSI: 0000000000004c0a RDI: 0000000000000004 [ 52.936925][ T4315] RBP: 00007fd03ed27090 R08: 0000000000000000 R09: 0000000000000000 [ 52.936939][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.936951][ T4315] R13: 00007fd0404e6038 R14: 00007fd0404e5fa0 R15: 00007ffc8f486748 [ 52.937024][ T4315] [ 53.214848][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.228210][ T4311] loop2: detected capacity change from 0 to 8192 [ 53.236548][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 53.259933][ T3811] loop2: p1 p2 p4 [ 53.265846][ T3811] loop2: p1 size 65536 extends beyond EOD, truncated [ 53.300849][ T3811] loop2: p2 start 861536256 is beyond EOD, truncated [ 53.309586][ T3811] loop2: p4 size 65536 extends beyond EOD, truncated [ 53.337700][ T4311] loop2: p1 p2 p4 [ 53.352734][ T4311] loop2: p1 size 65536 extends beyond EOD, truncated [ 53.362328][ T4311] loop2: p2 start 861536256 is beyond EOD, truncated [ 53.369969][ T4311] loop2: p4 size 65536 extends beyond EOD, truncated [ 53.380412][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 53.380428][ T29] audit: type=1400 audit(1756403825.173:540): avc: denied { search } for pid=4307 comm="syz.2.211" name="/" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.416808][ T29] audit: type=1400 audit(1756403825.173:541): avc: denied { search } for pid=4307 comm="syz.2.211" name="/" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.452583][ T4326] loop4: detected capacity change from 0 to 512 [ 53.456872][ T29] audit: type=1400 audit(1756403825.203:542): avc: denied { search } for pid=4307 comm="syz.2.211" name="/" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.489730][ T29] audit: type=1400 audit(1756403825.203:543): avc: denied { search } for pid=4307 comm="syz.2.211" name="/" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.540379][ T4329] loop0: detected capacity change from 0 to 2048 [ 53.543405][ T29] audit: type=1400 audit(1756403825.283:544): avc: denied { mount } for pid=4325 comm="syz.4.218" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.616657][ T29] audit: type=1400 audit(1756403825.403:545): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.619551][ T3294] loop0: p2 p3 p7 [ 53.650112][ T4335] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 53.675922][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 53.677800][ T4335] SELinux: failed to load policy [ 53.733985][ T4329] loop0: p2 p3 p7 [ 53.786311][ T3376] Process accounting resumed [ 53.806906][ T4341] loop2: detected capacity change from 0 to 512 [ 53.845063][ T4347] loop1: detected capacity change from 0 to 2048 [ 53.859748][ T4341] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.891878][ T4341] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.912064][ T4341] EXT4-fs (loop2): 1 truncate cleaned up [ 53.924315][ T3482] loop1: p2 p3 p7 [ 53.925120][ T4341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.011407][ T4347] loop1: p2 p3 p7 [ 54.016703][ T29] audit: type=1400 audit(1756403825.803:546): avc: denied { getopt } for pid=4344 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.042303][ T29] audit: type=1400 audit(1756403825.803:547): avc: denied { ioctl } for pid=4344 comm="syz.4.226" path="socket:[7254]" dev="sockfs" ino=7254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.192993][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 54.432911][ T4373] loop3: detected capacity change from 0 to 1024 [ 54.453235][ T29] audit: type=1400 audit(1756403826.233:548): avc: denied { append } for pid=4377 comm="syz.0.232" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.502119][ T4373] EXT4-fs: Mount option(s) incompatible with ext2 [ 54.566623][ T4373] loop3: detected capacity change from 0 to 1024 [ 54.579803][ T29] audit: type=1326 audit(1756403826.333:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0402bebe9 code=0x0 [ 54.607980][ T4384] loop0: detected capacity change from 0 to 128 [ 54.686782][ T4384] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.728373][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 54.740420][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 54.771057][ T4384] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.837877][ T4414] SELinux: failed to load policy [ 54.877507][ T4384] ipip0: entered promiscuous mode [ 55.054396][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 55.067331][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.080610][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.104186][ T4469] FAULT_INJECTION: forcing a failure. [ 55.104186][ T4469] name failslab, interval 1, probability 0, space 0, times 0 [ 55.123850][ T4469] CPU: 0 UID: 0 PID: 4469 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.123926][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.123958][ T4469] Call Trace: [ 55.123965][ T4469] [ 55.123972][ T4469] __dump_stack+0x1d/0x30 [ 55.123995][ T4469] dump_stack_lvl+0xe8/0x140 [ 55.124012][ T4469] dump_stack+0x15/0x1b [ 55.124087][ T4469] should_fail_ex+0x265/0x280 [ 55.124109][ T4469] should_failslab+0x8c/0xb0 [ 55.124165][ T4469] kmem_cache_alloc_noprof+0x50/0x310 [ 55.124188][ T4469] ? skb_clone+0x151/0x1f0 [ 55.124212][ T4469] skb_clone+0x151/0x1f0 [ 55.124234][ T4469] __netlink_deliver_tap+0x2c9/0x500 [ 55.124332][ T4469] netlink_unicast+0x66b/0x690 [ 55.124369][ T4469] netlink_sendmsg+0x58b/0x6b0 [ 55.124391][ T4469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.124476][ T4469] __sock_sendmsg+0x145/0x180 [ 55.124504][ T4469] ____sys_sendmsg+0x31e/0x4e0 [ 55.124577][ T4469] ___sys_sendmsg+0x17b/0x1d0 [ 55.124687][ T4469] __x64_sys_sendmsg+0xd4/0x160 [ 55.124713][ T4469] x64_sys_call+0x191e/0x2ff0 [ 55.124736][ T4469] do_syscall_64+0xd2/0x200 [ 55.124827][ T4469] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.124926][ T4469] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.124959][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.124978][ T4469] RIP: 0033:0x7f788c9cebe9 [ 55.125056][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.125075][ T4469] RSP: 002b:00007f788b42f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.125098][ T4469] RAX: ffffffffffffffda RBX: 00007f788cbf5fa0 RCX: 00007f788c9cebe9 [ 55.125112][ T4469] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000004 [ 55.125123][ T4469] RBP: 00007f788b42f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.125134][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.125178][ T4469] R13: 00007f788cbf6038 R14: 00007f788cbf5fa0 R15: 00007ffc958f0f18 [ 55.125221][ T4469] [ 55.450968][ T4474] SELinux: failed to load policy [ 55.467935][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 55.543227][ T4484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.586105][ T4486] loop0: detected capacity change from 0 to 2048 [ 55.666442][ T4493] SELinux: failed to load policy [ 55.696851][ T3811] loop0: p2 p3 p7 [ 55.721229][ T23] Process accounting resumed [ 55.742033][ T4505] loop3: detected capacity change from 0 to 512 [ 55.742702][ T4486] loop0: p2 p3 p7 [ 55.786652][ T4505] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.812216][ T4513] loop1: detected capacity change from 0 to 1024 [ 55.837893][ T4513] EXT4-fs: Ignoring removed orlov option [ 55.846048][ T4505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.861372][ T4511] loop4: detected capacity change from 0 to 2048 [ 55.883932][ T4505] EXT4-fs (loop3): 1 truncate cleaned up [ 55.902042][ T4513] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.905313][ T4511] loop4: p2 p3 p7 [ 55.928354][ T4513] EXT4-fs (loop1): mount failed [ 55.928486][ T4505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.275647][ T4526] ================================================================== [ 56.286333][ T4526] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 56.296496][ T4526] [ 56.299099][ T4526] write to 0xffff88811a49428c of 4 bytes by task 4505 on cpu 0: [ 56.307995][ T4526] xas_set_mark+0x12b/0x140 [ 56.312787][ T4526] __folio_start_writeback+0x1dd/0x440 [ 56.319192][ T4526] ext4_bio_write_folio+0x5ad/0x9f0 [ 56.324663][ T4526] mpage_process_page_bufs+0x4a1/0x620 [ 56.331037][ T4526] mpage_prepare_extent_to_map+0x786/0xc00 [ 56.337572][ T4526] ext4_do_writepages+0xa05/0x2750 [ 56.343051][ T4526] ext4_writepages+0x176/0x300 [ 56.348046][ T4526] do_writepages+0x1c3/0x310 [ 56.353693][ T4526] file_write_and_wait_range+0x156/0x2c0 [ 56.359955][ T4526] generic_buffers_fsync_noflush+0x45/0x120 [ 56.366236][ T4526] ext4_sync_file+0x1ab/0x690 [ 56.371309][ T4526] vfs_fsync_range+0x10d/0x130 [ 56.377168][ T4526] ext4_buffered_write_iter+0x34f/0x3c0 [ 56.383731][ T4526] ext4_file_write_iter+0xdbf/0xf00 [ 56.389807][ T4526] iter_file_splice_write+0x663/0xa60 [ 56.396507][ T4526] direct_splice_actor+0x153/0x2a0 [ 56.402082][ T4526] splice_direct_to_actor+0x30f/0x680 [ 56.408023][ T4526] do_splice_direct+0xda/0x150 [ 56.413248][ T4526] do_sendfile+0x380/0x650 [ 56.418915][ T4526] __x64_sys_sendfile64+0x105/0x150 [ 56.424830][ T4526] x64_sys_call+0x2bb0/0x2ff0 [ 56.429966][ T4526] do_syscall_64+0xd2/0x200 [ 56.434682][ T4526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.441031][ T4526] [ 56.443894][ T4526] read to 0xffff88811a49428c of 4 bytes by task 4526 on cpu 1: [ 56.452862][ T4526] __writeback_single_inode+0x1f9/0x7c0 [ 56.458916][ T4526] writeback_single_inode+0x167/0x3e0 [ 56.464770][ T4526] sync_inode_metadata+0x5b/0x90 [ 56.470145][ T4526] generic_buffers_fsync_noflush+0xd9/0x120 [ 56.476790][ T4526] ext4_sync_file+0x1ab/0x690 [ 56.481919][ T4526] vfs_fsync_range+0x10d/0x130 [ 56.486865][ T4526] ext4_buffered_write_iter+0x34f/0x3c0 [ 56.492946][ T4526] ext4_file_write_iter+0xdbf/0xf00 [ 56.499304][ T4526] iter_file_splice_write+0x663/0xa60 [ 56.506092][ T4526] direct_splice_actor+0x153/0x2a0 [ 56.511633][ T4526] splice_direct_to_actor+0x30f/0x680 [ 56.517317][ T4526] do_splice_direct+0xda/0x150 [ 56.523142][ T4526] do_sendfile+0x380/0x650 [ 56.528795][ T4526] __x64_sys_sendfile64+0x105/0x150 [ 56.534821][ T4526] x64_sys_call+0x2bb0/0x2ff0 [ 56.539769][ T4526] do_syscall_64+0xd2/0x200 [ 56.544511][ T4526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.551097][ T4526] [ 56.553848][ T4526] value changed: 0x0a000021 -> 0x04000021 [ 56.559746][ T4526] [ 56.562359][ T4526] Reported by Kernel Concurrency Sanitizer on: [ 56.569743][ T4526] CPU: 1 UID: 0 PID: 4526 Comm: syz.3.248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.579577][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.589835][ T4526] ================================================================== [ 56.791299][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.