last executing test programs: 4.068187522s ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x9c3d8d0328ed670d) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000100)="47cf16ea1e9ae3df107f966698ffbcbb69f3ebbf5f8ec4af6d01e8f9ac147852ea8567aefee0d218fcdac9d069318fa7da145e607c5738d21f50c2b9c76128a46a", &(0x7f0000000180)="452fbc4d126c58cb0fa0d51aed5aadb0a884c5d751a02eba67d31b1c3eb68479d047abaa80b95379261f1fef27b06ac2cfdc672782a14b23bd69a07b76771820c773ed25a0d2eafcadbdbdb525f4b00627a70498df4f25669aea3d15b773ce56f5078af70e3c67a0b0bc7270416e26c3"}}, &(0x7f0000bbdffc)=0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) readv(r1, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 4.006120672s ago: executing program 1 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r6, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004050) r7 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r7, &(0x7f0000000280)={0x22, 0x7d, 0x4, 0x9, 0x14}, 0x6) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r9}, 0x8) fsetxattr$system_posix_acl(r9, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020006000000000000000000040000000000000020000004277c882ee5dfeb61592800000000002000000000000100b5150fb4643b72fa0ee26accd9f8e2ab31b4869d5e7b3e6920b2a23d1289cd05e617c2dfbeab8e77784163f4cad198eeeb17fee15504c9654b4213c024419fd4bc32306ad28b4f09f975ee7d71b8223b13fc8c80e1fb5b0000"], 0x24, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x200}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x81}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe22}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3ff}], [{0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='cifs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3.846729291s ago: executing program 1 (id=7): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x2000}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) (async) mount$9p_rdma(0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x3b00004, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) (async) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x100000000) getpeername$packet(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac00000009000000070000000000000e02000000020000000300000000000007000000000900000000000007000000000600000002000004ff0100000c000000020000000000ffff070000000300000005000000000000000700000d00000000020000000500000002000000030000000800000001000000040000000000000007000000030000000c0000000300000009000000050000000a000000000000090100000006000000000000110500005f5f002e00"/205], &(0x7f0000000440)=""/127, 0xcd, 0x7f, 0x1, 0xa, 0x0, @void, @value}, 0x28) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0xd}}, './file0\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000680), 0x10000, 0x131000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 3.744146701s ago: executing program 1 (id=8): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) ioperm(0x2, 0x1, 0x9) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x37, 0x17, ""/23}, &(0x7f0000000040)=0x37, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0xd}, {0x6, 0xfff1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x884) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x22}], &(0x7f00000002c0)='GPL\x00', 0x3, 0xa0, &(0x7f0000000300)=""/160, 0x41100, 0x8, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000400)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x3, 0xa}], 0x10, 0x6, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x10080) 3.638154691s ago: executing program 1 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000340)=""/97, 0x61, 0x0, &(0x7f00000005c0)=""/230, 0xe6}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5800000010002104000000fc16dbdf2100f20000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d00000000140002800800010001000000080002001180000008000a00", @ANYRES32=r4], 0x58}}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xfffffffffffffff5}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r7, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000480), r7}}, 0x18) r8 = memfd_secret(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x3, 0x61, 0x11, 0x9c}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x185042, 0x1d8) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa, 0x11, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000040)='./file2\x00', 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r8, 0x2e, 0x4608, @void}, 0x10) 3.3565832s ago: executing program 2 (id=3): r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) mq_open(&(0x7f0000000100)='#,--#:\x00', 0x40, 0x60, &(0x7f0000000180)={0x7fffffff, 0x6, 0x21baf4ce, 0x1}) shutdown(r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000b000000008400770100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d7063303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f459574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801e26d335ef2ba9ac2423a358ccbb776b21e1d3b5ee4e0f21a4c775145ef26c98b4af40babc3b18cc5635b6da7c4d1b0fbb8f271016ecf316158c2be5a4bef251c82b85bbc335cae0a2920ce36f206f449fbf64a47e05bd4cf8312774a4e61", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 2.963236429s ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x7}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe000000007110100000000000e5000200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe75, 0x10, &(0x7f0000000c80)={0x0, 0x8, 0x0, 0xffffffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$P9_RAUTH(r3, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000b1000000b10000000a000000050000000000000804000000060000000400000f0100000001000000848000000300000002000000000000000500000002000000fe68000080ffffff020000000100000000040000930f0000000000000700000000020000000000000a01000000000000000000000300000000050000000100000002000000000000000000000300000000050000000300000006000000000000000100000d000000000e0000000500000010000000000000100400000000000000305f5f2e2e30305f00"], &(0x7f0000000100)=""/68, 0xd6, 0x44, 0x0, 0x81, 0x0, @void, @value}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000000), &(0x7f0000000380)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/160}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000000801010000000400000000000000060900010073797a31000000000600024086dd00000c00048008000140000000040500030006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x40840) 1.112933793s ago: executing program 4 (id=45): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x1c, 0x80000) sendmmsg$inet6(r3, &(0x7f0000002640)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="90fd1d321e45153d78417f88d10ff90cd1e8a474704ac2aab7a1d9f0ad0fd9f9ab58925d39696f3b3049c4ae8ecff98eb00df28d2b2bd698f5d1e83455fd89843602f3b1f2ec4787aa24cbbd754e42d749cd11b4f402e43447b6d2ef636f90d98098562606af608a0e1739f4bafe0384fbca5e9baa2823816bfa4301e3682de61ffc4ecf0f9bc30ddc517d4975cf997f6e135e43b843561c89ec7569644dfb72c761", 0xa2}, {&(0x7f0000000340)="5fea10d7ab471074b5f787f8d76a8d68c3cf919b209b27a0fdcca0f22d5dd84149d466eca5017747a6c6c025b81a3639b0ce736f8f76a6ff3617cc3f79bcf64e33e3f89ec1e99782635367e7a4cca6e9d17dd573c331b87e74b563b24f658f1ea3b02ce8a7292de523399863b5daa6c232ae17c11f6ef6bd2fb254b8ae5dffc9987128949775a71309ea3f7bf19e9ba46009af3695bccd8eca71f4891a5ede15d0d1021f77972aff1e83802459c28536d2cad00bf7746210d0acc682c55c51fe650413680a", 0xc5}, {&(0x7f0000000440)="abd26f986c0a58eda053feeab0b2bfe2134e7dc3616dbf726732eecdd26dbeec60f7f01daec56271602e40824828ea6caaf0d014de75360f5ebfe0673432a42fd255f314acb1afe7588c9711bf78061ba32a2521f5f5e88b10ab2f5076cab0f044d2dcbbc0211f673c786c47223882006b1b5f55687af629e3461ff0ae46cd1e846a8641815dcbb5bcd30a3f1c057a8e6a0639d59182a45541b29102f92521d80f55503013100477577a65b5d3", 0xad}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)="a4b0487d8eec524d4bbe660ab64a3eb7c3294ecc5426e1855b9fef93b875", 0x1e}], 0x5, &(0x7f00000006c0)=[@rthdr={{0x88, 0x29, 0x39, {0x4b, 0xe, 0x1, 0xe, 0x0, [@dev={0xfe, 0x80, '\x00', 0x31}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @empty, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="81823e76245f942c0c2603660ee9a5532ae90ec64bc61f6f65c66ea4ca0b121a037ded0a00d12b19e9930469bc4b209f57df07e03ef60a87b597968a1a89f4d0dab1166de5750400fb7790d03d08fb11a68bd141e62f454295c3c058b246cd4a610b", 0x62}, {&(0x7f0000000800)="9ceb875c3f0208439d5fe99753640e100e49a09e6b0092e86bcd9de6afd758426aff68e8eabb91f95f67053f0a467d6f0d0bde9997977bb638de692f8d481e5aab13f40628aafc135423c57d4e120af0816b08", 0x53}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="068843384baad3227eb6464a4fc4cc7b8f9ed986941b7f5093c39a2d4dbe5049069ab71def5375d468df8c56217cc25dfd0da2760f9fdc322508e0bf18124b71dc4637bdfdac4680b414702d757a947ea6a0f95f34c378e70436e05581d245fea26fba3631392bb0ac45c1a4149444842f912b16a97e4c80263db517effef356cef3fc5212e9a152754d139662e29a5d9c80502123214963242b3ac81451e1f9bc3d0c63ec59e664f6700bd9841c34378e7ca9a19a73e8", 0xb7}], 0x4}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000a00)="e886da7c0825fb5323b02400f5a129d51e0629459876b150f6e05d50e72a1d62936747809b9284a63a5a8d2a7db83c2b673035e25b7597d0687ed91a76cbf4f18ae4955e9532627984cec49c87f4b684a0ae12b1377b72bd57ed8cfaff8ec7324d764574e4a8fe78be454f100f9b2f6895b45025b0b3f4320c63d1b27c92907675c1d5", 0x83}, {&(0x7f0000000ac0)="3b52b3d11984115f15", 0x9}], 0x2, &(0x7f0000000b40)=[@hopopts_2292={{0x108, 0x29, 0x36, {0x2f, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x4, 0xdf, "8f580285c8bb9e8b72414fe1de70e8fb2566967af33f6f7f64c61bcd3562aadd466cc01d028f974780de9031513d2e223a864de7261b29371f06d45c377a7e4f27465192f997ab9a45146b10357a5fe697290ab5f4f83a4ed1ffc5b5f197e1d5436f91aaccbaf1cdfcde7c049d8c2461b81f119c2dfa1705356f872e3971a9a9262b9b4835b5a8e6033308f8d187af7ef7ec13150ca139773e7e82fae0986251e9a6b85c7acc4acd4f94c77e1d1e0a7e2d2ca1c7fffd0110bc1e8fd0120a380e256a642f1b1050a7225968ead1a974d19973d68cea41728535bc2d506148c1"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x2, 0x10, 0x0, [@empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @generic={0x0, 0x2f, "a0f683346d01acce38f0ebb50019da8bfaabdc3e5bed0cba7d36520f2f84147086d20f7421ddf5081e575455e8cc4b"}, @hao={0xc9, 0x10, @remote}]}}}], 0x1e8}}, {{&(0x7f0000000d40)={0xa, 0x4e24, 0xba, @local, 0x3}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000000d80)="464cd84c547a7c33dfefe2cbf0dc3a31210ab6cdb1dd055a755c1eff1953fd6a2cdf9307be8edde0b5a745e9cf2990392ad47eedfbd2b8e95501046e1b7b2eb53fd883509c52dd12b9c25ce06253244957bac2d240ce2f7e23ceca9d1e032b555594412108ea965f0c958291af779828bdebed910c0301fb172c12b75272a7679131c520cac69aec91a22fb256c0b5a87a86ad0cd959dc1cd39dd86f8657bfa4", 0xa0}, {&(0x7f0000000e40)="7beb092d1c082e2699af363d8f85dd56bf7478c9884c27950d918caca06f4b3e62ad5a54e6ea943d44aeb2c04a4d2215deae7cf5c26d4c224bf13567c853eae2525892a939d122c6acc32320cea32a5d93b62a9e1bd6dca038472e883a6b4e309211209eb9d3e00f47778745a2bb13813af631c1e8f3fdf17163375c18c1525bf4fbd4188ca85c8239295173033e89170e860eb6243147a0dd956a6ea5a43b09f84ce26ae1f40af6fca9694c2d7bf4ca1b3272954ca4648f17d1304f03c65c574ef7a1864e90c0fbc5b423399add83ceb3cbb111c1fa54cb373a967bcb31b5bd74408afaee0f2c38b4f1cab026ea8b", 0xef}, {&(0x7f0000000f40)="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", 0x1000}], 0x3}}, {{&(0x7f0000001f80)={0xa, 0x4e23, 0x1b63, @remote, 0xfff}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000001fc0)="df6236f2d3118e08f804fcc522f5a156aeeeb32022182c9d5080fed61a5f84bcdc84248b37dfced878d22acf9f63ccb586d18fccf551cfbe851ea4406998358c708575df6313a9d7faabe9fb76e39c9f18a88814736b471a49c6498bc16c44c10ea1ed6df181d5729029ae2273e1867ef39a5db64d46f60d44763d57261f12cad94e1a749d2a8bfa48b1bcdec41b913885ab3a20510415759312ae98a9fabec57a82d236", 0xa4}, {&(0x7f0000002080)="6e064de952250e79b20f7341f7066cff2874208ca5578ad5e5c0de72f4724627c74f057f07cdcca6a69414e96b2407374ce2d8ccb83a56b6e23a7298d7bf3fb83146781e35ef641bf6a444eab25b722578d458b5d643ae6b2c05add43ebfaa075971ae2892f96c88aded0bcfb6944b53c1a6cc2324fb6146762544d1e707d070a64a3dc52378d2287f569fd4b98b4d42c225fcd781d9f0ce93c66c219d66ea3e7a", 0xa1}, {&(0x7f0000002140)="f4c27e9de975b7d3af0cad4815ac9a327e31912af508fbef5e98755c874c49a65f41407ccfec71cb68cbfd777b1b314bc551703d0dca89fbafe615562626bef15a52bdc0fabdcb16fa7ce45671d0d3383ed12f17ffc48ed082dc3d083c1dbbe9c7687080fa851430936f110aa56fad7427e2d2362b785e45445593a8bce3a07ff17cb81d26b0d1cd89a3cc34adbf06463ac549a0b8ce58", 0x97}, {&(0x7f0000002200)="63ab19b9e9b01ec1de0e1361ec054e0861995b5a9f5230259e42765c61dd72175bdb4bdb8e698d447a2c40f90250cba244e036152d0872fc154b409c43d4bc5b9a5f93401e9f27a2fbb0a2818eb5f4fbc4126c6b22b79db47dcc3eade89f8d8844c4b2c78dd40161647e1455f1377aa69ee9e58fb1f4b0960b227c4baca9", 0x7e}, {&(0x7f0000002280)="b64119a95f5574d3e7d8e3bc1b1176c412ad084b20c0bec6fc595411fc024799d5f04d4601ea281d25c3de5956f101b6d4dc45cbff5af28849308032aa790e26bb511cb9cfae226dce2fa74ca344ed245752026746ab34ad328f9b7381221444849acf1dcfe80869502ac6d514928a4ba0ec3321f8a5118f83f674ca456ab32ec77d5f7ce50a55568226630978927a94d93e2b67825a187fa389", 0x9a}, {&(0x7f0000002340)="ffe8a9d09fa943f2773f9e5152e99e59e4df16844f6b6734c0171a60ec1e6bf6c312", 0x22}, {&(0x7f0000002380)="3c9434d63ea3bbe05485aef8c493e7426b0dd6da7e58deea151a667534b3f658e48957a701d0737183979afaffaebc", 0x2f}], 0x7}}, {{&(0x7f0000002440)={0xa, 0x4e22, 0x5, @mcast2, 0x5}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000002480)="3ef2145c5d0d3ccd5bb6ba490d1cb4a322e2e66b5deacd6e9993e74653f828ca8850895bfbed24c8dadbf7b1ec30fff6bcdb40302e9cdcbfc1d99071bfe853e2b727563b68eb4f3801404c63d72a97aa3bba4aaba49ca9c788ebb07c1e0066db4d1f", 0x62}, {&(0x7f0000002500)="cb1be2205846761ab3c285fba8e172c7ab247b4a63d18a40c18bc5c24f0a9f975197bbb6396c5647b5348b55d083d0f6f9152eebcb997a299dc6c79210f24f3f4c1d6ad54976cacab02fe2af7787d267f0eb59b079354010beecf4998f4677cb3682cef920df5b8a3995fb2c5c6fada02c1c2b98b88d6b3fd71b696fd6cd0f50f836ba7d454447d0d3610ab155daf99727730aa892dc0d898512f5d23a05e40d", 0xa0}], 0x2, &(0x7f0000002600)=[@dontfrag={{0x14, 0x29, 0x3e, 0xeb7}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x9, 0x0, [@empty]}}}], 0x40}}], 0x6, 0x8000) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000002880)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r7, &(0x7f0000005bc0)=[{{&(0x7f00000028c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000002940)=""/179, 0xb3}, {&(0x7f0000002a00)=""/124, 0x7c}, {&(0x7f0000002a80)=""/146, 0x92}, {&(0x7f0000002b40)=""/110, 0x6e}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x6}, 0x6}, {{&(0x7f0000004c40)=@ax25={{0x3, @default}, [@null, @default, @default, @remote, @remote, @default, @null, @null]}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004cc0)=""/94, 0x5e}, {&(0x7f0000004d40)=""/99, 0x63}, {&(0x7f0000004dc0)=""/41, 0x29}, {&(0x7f0000004e00)=""/31, 0x1f}, {&(0x7f0000004e40)=""/215, 0xd7}, {&(0x7f0000004f40)=""/31, 0x1f}, {&(0x7f0000004f80)}, {&(0x7f0000004fc0)=""/154, 0x9a}], 0x8, &(0x7f0000005100)=""/197, 0xc5}, 0x80000000}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005200)=""/252, 0xfc}, {&(0x7f0000005300)=""/219, 0xdb}, {&(0x7f0000005400)=""/168, 0xa8}, {&(0x7f00000054c0)=""/196, 0xc4}], 0x4, &(0x7f0000005600)=""/141, 0x8d}, 0x7}, {{&(0x7f00000056c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005740)=""/216, 0xd8}, {&(0x7f0000005840)=""/118, 0x76}], 0x2}, 0x2}, {{&(0x7f0000005900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005980)=""/147, 0x93}, {&(0x7f0000005a40)=""/250, 0xfa}], 0x2, &(0x7f0000005b80)=""/49, 0x31}, 0x5}], 0x5, 0x12261, &(0x7f0000005d00)) shutdown(r6, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000005dc0)={'ip6gre0\x00', &(0x7f0000005d40)={'syztnl2\x00', r1, 0x29, 0xd, 0x81, 0x2, 0x4, @private0, @mcast1, 0x10, 0x10, 0x2}}) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000005e40), r8) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000005f00)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x1c, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000005f80)={&(0x7f0000005f40)='scsi_eh_wakeup\x00', r6, 0x0, 0xffff}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$nfs(&(0x7f0000006000)='syztnl2\x00', &(0x7f0000006040)='./file0\x00', &(0x7f0000006080), 0x100000, &(0x7f00000060c0)={[{'gtp\x00'}, {'&[()'}, {'!'}, {}, {'\x00'}, {}, {'.[}?$*/E(#'}, {'ip6gre0\x00'}, {'gtp\x00'}], [{@context={'context', 0x3d, 'system_u'}}]}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000006100)={0x0, 0x3ff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000006140)=@base={0x1b, 0x0, 0x114, 0x0, 0x30000, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @value=r5}, 0x50) r12 = fcntl$getown(r11, 0x9) syz_clone3(&(0x7f0000006400)={0x1000, &(0x7f00000061c0), &(0x7f0000006200), &(0x7f0000006240), {0x15}, &(0x7f0000006280)=""/225, 0xe1, &(0x7f0000006380)=""/46, &(0x7f00000063c0)=[0x0, r12], 0x2, {r5}}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006580)={@cgroup=r5, 0x37, 0x1, 0x4, &(0x7f0000006480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000064c0)=[0x0], &(0x7f0000006500)=[0x0], &(0x7f0000006540)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006600), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000006640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000006700)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x28, r13, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x20004004) syz_open_dev$tty1(0xc, 0x4, 0x2) gettid() 1.112121374s ago: executing program 3 (id=46): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 1.070542743s ago: executing program 0 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.070023313s ago: executing program 0 (id=48): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$kcm(0xa, 0x5, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getgroups(0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 1.058141883s ago: executing program 3 (id=49): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x1}}, './file0\x00'}) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfd, 0x4) 1.023825743s ago: executing program 3 (id=50): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=""/84, &(0x7f00000000c0)=0x54) 1.023071573s ago: executing program 4 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x48) (fail_nth: 2) 965.355743ms ago: executing program 0 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) 945.695953ms ago: executing program 2 (id=53): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x204092, &(0x7f0000000000), 0x6, 0x51a, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r0, 0x345e03) dup3(r3, r3, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) migrate_pages(0x0, 0xf20, 0x0, &(0x7f00000000c0)=0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r5, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) 937.495313ms ago: executing program 3 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 936.994573ms ago: executing program 3 (id=55): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x204092, &(0x7f0000000000), 0x6, 0x51a, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r0, 0x345e03) dup3(r3, r3, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) migrate_pages(0x0, 0xf20, 0x0, &(0x7f00000000c0)=0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r5, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) 159.756721ms ago: executing program 4 (id=56): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), 0x0}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x9, 0x6, 0x2, 0x7, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_address={0x5, 0x17, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e23, 0x20, @mcast1, 0x6}}]}, 0x38}}, 0x10) sendmsg$key(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), 0x0}, 0x20) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) (async) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x9, 0x6, 0x2, 0x7, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_address={0x5, 0x17, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e23, 0x20, @mcast1, 0x6}}]}, 0x38}}, 0x10) (async) sendmsg$key(r2, 0x0, 0x0) (async) 159.05664ms ago: executing program 0 (id=57): ustat(0x8, &(0x7f0000000100)) r0 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x40, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x20, @multicast1}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 69.17864ms ago: executing program 0 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r0}, 0x38) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 68.64927ms ago: executing program 4 (id=59): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 53.29048ms ago: executing program 4 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 39.32466ms ago: executing program 3 (id=61): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='xprtrdma_post_recvs_err\x00', r8}, 0x18) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10.08468ms ago: executing program 0 (id=62): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000002a5b0020"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 0s ago: executing program 4 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x4014, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x800}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000500)={0x2c, 0x4, r4}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@empty, @empty, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x1, 0x0, {{0x22, 0x4, 0x3, 0x4, 0x88, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xa4, 0x0, 0x9, [0x800, 0x10001, 0x1, 0x1, 0xfffffc00, 0x2, 0x81]}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0x8, "9365236ca25c"}, {0x2, 0x3, "ba"}, {0x2, 0x11, "0ea9e9362b24049aaee74c32bf786b"}, {0x6, 0x8, "946ca331a58c"}]}, @ssrr={0x89, 0x27, 0x80, [@empty, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @loopback, @multicast1, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x4, 0x4, 0x0, @private2, @local, 0x0, 0x700, 0x0, 0x2}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r12, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r13, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r10, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x1, 0x3, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8, 0x80, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x7, 0x5, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x17, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x26}]}, @rr={0x7, 0x27, 0x3f, [@broadcast, @rand_addr=0x64010101, @empty, @broadcast, @broadcast, @broadcast, @broadcast, @private=0xa010102, @remote]}, @end, @generic={0x89, 0x12, "52a930f1f7443d0f45f06c00e1df4cca"}, @lsrr={0x83, 0x17, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x5, [0x200, 0xb, 0x2]}, @generic={0x44, 0xe, "7ef681d15d83e85cb6da4019"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf2504000000040001800c00018008000100", @ANYRES32=0x0, @ANYBLOB="8400018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f6873720000000008000100", @ANYRES32=r5, @ANYBLOB="140002006261746164765f736c6176655f310000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002006c6f000000000000000000000000000008000300020000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="880001801400020076657468305f746f5f626174616476000800030002000000140002006970365f76746930000000000000000008000100", @ANYRES32=r7, @ANYBLOB="14000200000000000000000000000000000000001400020069703667726530000000000000000000080003000100000014000200626f6e645f736c6176655f300000000008000300030000004c000180080003000100000008000300010000001400020070696d3672656731000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0800010018ecd84b32705c3322f04b098afdf8abd04dfa953ebaf72a2b3b8ef093b240977e27ccad6ca17891bbb7e0784e41766305905b0b3936499dc8b0fb97d5a6e9a4d720aca2e1661563274b58cd695ff12298e39b8d13371ad876ec6e3d04d72279eb17d922f988afc8a1158737f7d9bb", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f30000000006400018008000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="14000200766972745f7769666930000000000000140002006970366772657461703000000000000008000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="0800030000000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) kernel console output (not intermixed with test programs): [ 23.038551][ T29] audit: type=1400 audit(1738790437.512:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. [ 27.962293][ T29] audit: type=1400 audit(1738790442.432:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.963324][ T3286] cgroup: Unknown subsys name 'net' [ 27.985021][ T29] audit: type=1400 audit(1738790442.432:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.012462][ T29] audit: type=1400 audit(1738790442.462:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.147435][ T3286] cgroup: Unknown subsys name 'cpuset' [ 28.153640][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.265470][ T29] audit: type=1400 audit(1738790442.732:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.288754][ T29] audit: type=1400 audit(1738790442.742:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.309397][ T29] audit: type=1400 audit(1738790442.742:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.329850][ T29] audit: type=1400 audit(1738790442.742:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.350238][ T29] audit: type=1400 audit(1738790442.762:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.375180][ T29] audit: type=1400 audit(1738790442.762:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.382501][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.407245][ T29] audit: type=1400 audit(1738790442.882:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.439380][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.335433][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.349414][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 30.382510][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 30.405745][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 30.457806][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.464891][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.472177][ T3304] bridge_slave_0: entered allmulticast mode [ 30.478597][ T3304] bridge_slave_0: entered promiscuous mode [ 30.495007][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.502143][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.509516][ T3296] bridge_slave_0: entered allmulticast mode [ 30.515943][ T3296] bridge_slave_0: entered promiscuous mode [ 30.525580][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.532835][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.540153][ T3296] bridge_slave_1: entered allmulticast mode [ 30.546832][ T3296] bridge_slave_1: entered promiscuous mode [ 30.555598][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.562827][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.569962][ T3304] bridge_slave_1: entered allmulticast mode [ 30.576371][ T3304] bridge_slave_1: entered promiscuous mode [ 30.584762][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 30.626548][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.635672][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.642949][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.650207][ T3300] bridge_slave_0: entered allmulticast mode [ 30.656920][ T3300] bridge_slave_0: entered promiscuous mode [ 30.669364][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.679544][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.689508][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.703619][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710718][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.717960][ T3300] bridge_slave_1: entered allmulticast mode [ 30.724402][ T3300] bridge_slave_1: entered promiscuous mode [ 30.760482][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.767587][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.774734][ T3297] bridge_slave_0: entered allmulticast mode [ 30.781332][ T3297] bridge_slave_0: entered promiscuous mode [ 30.788254][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.795317][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.802663][ T3297] bridge_slave_1: entered allmulticast mode [ 30.809386][ T3297] bridge_slave_1: entered promiscuous mode [ 30.820502][ T3296] team0: Port device team_slave_0 added [ 30.826751][ T3304] team0: Port device team_slave_0 added [ 30.846449][ T3304] team0: Port device team_slave_1 added [ 30.857628][ T3296] team0: Port device team_slave_1 added [ 30.864355][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.874518][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.912757][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.919875][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.927309][ T3298] bridge_slave_0: entered allmulticast mode [ 30.933916][ T3298] bridge_slave_0: entered promiscuous mode [ 30.941471][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.950792][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.957978][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.983961][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.004433][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.011614][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.018896][ T3298] bridge_slave_1: entered allmulticast mode [ 31.025267][ T3298] bridge_slave_1: entered promiscuous mode [ 31.032170][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.046032][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.053101][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.079452][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.090574][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.097568][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.123550][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.134876][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.141919][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.167920][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.179323][ T3300] team0: Port device team_slave_0 added [ 31.195933][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.211442][ T3300] team0: Port device team_slave_1 added [ 31.222544][ T3297] team0: Port device team_slave_0 added [ 31.229621][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.250110][ T3297] team0: Port device team_slave_1 added [ 31.279567][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.286515][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.312594][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.328691][ T3298] team0: Port device team_slave_0 added [ 31.346080][ T3296] hsr_slave_0: entered promiscuous mode [ 31.352105][ T3296] hsr_slave_1: entered promiscuous mode [ 31.359124][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.366332][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.392400][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.405152][ T3304] hsr_slave_0: entered promiscuous mode [ 31.411285][ T3304] hsr_slave_1: entered promiscuous mode [ 31.417209][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.424783][ T3304] Cannot create hsr debugfs directory [ 31.431117][ T3298] team0: Port device team_slave_1 added [ 31.441858][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.448908][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.474985][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.501369][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.508390][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.534639][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.552722][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.559863][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.585885][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.597115][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.604111][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.630196][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.670576][ T3300] hsr_slave_0: entered promiscuous mode [ 31.676680][ T3300] hsr_slave_1: entered promiscuous mode [ 31.682525][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.690140][ T3300] Cannot create hsr debugfs directory [ 31.736478][ T3298] hsr_slave_0: entered promiscuous mode [ 31.742566][ T3298] hsr_slave_1: entered promiscuous mode [ 31.748417][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.755986][ T3298] Cannot create hsr debugfs directory [ 31.766213][ T3297] hsr_slave_0: entered promiscuous mode [ 31.772387][ T3297] hsr_slave_1: entered promiscuous mode [ 31.778271][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.785835][ T3297] Cannot create hsr debugfs directory [ 31.914962][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.926194][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.946880][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.973447][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.989807][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.998890][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.008083][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.026303][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.046000][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.055028][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.065980][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.089517][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.098445][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.118481][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.128490][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.147897][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.166247][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.181635][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.191352][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.208407][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.257243][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.289510][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.304811][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.321614][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.328780][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.351194][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.358289][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.370123][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.382928][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.394136][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.405062][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.421706][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.434639][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.441748][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.453709][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.464040][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.471177][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.482245][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.489408][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.500761][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.507849][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.519089][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.529832][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.536975][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.546422][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.553592][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.573434][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.580630][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.602919][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.613356][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.630192][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.637283][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.721493][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.743005][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.776144][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.795600][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.831770][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.875856][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.950234][ T3296] veth0_vlan: entered promiscuous mode [ 32.962723][ T3300] veth0_vlan: entered promiscuous mode [ 32.979076][ T3300] veth1_vlan: entered promiscuous mode [ 32.994646][ T3296] veth1_vlan: entered promiscuous mode [ 33.019660][ T3298] veth0_vlan: entered promiscuous mode [ 33.038053][ T3296] veth0_macvtap: entered promiscuous mode [ 33.046129][ T3298] veth1_vlan: entered promiscuous mode [ 33.056833][ T3300] veth0_macvtap: entered promiscuous mode [ 33.064256][ T3296] veth1_macvtap: entered promiscuous mode [ 33.080866][ T3300] veth1_macvtap: entered promiscuous mode [ 33.095894][ T3297] veth0_vlan: entered promiscuous mode [ 33.111352][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.120707][ T3298] veth0_macvtap: entered promiscuous mode [ 33.128274][ T3304] veth0_vlan: entered promiscuous mode [ 33.134613][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.145133][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.156052][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.166003][ T3298] veth1_macvtap: entered promiscuous mode [ 33.175400][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.183188][ T3297] veth1_vlan: entered promiscuous mode [ 33.190551][ T3304] veth1_vlan: entered promiscuous mode [ 33.202930][ T3300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.211837][ T3300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.220656][ T3300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.229437][ T3300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.240487][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.251037][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.261892][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.272063][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.280866][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.289720][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.298516][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.309849][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.320356][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.330196][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.340651][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.351297][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.381106][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.381122][ T29] audit: type=1400 audit(1738790447.852:110): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.nwE6d7/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.414365][ T29] audit: type=1400 audit(1738790447.852:111): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.429367][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.436658][ T29] audit: type=1400 audit(1738790447.852:112): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.nwE6d7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.446940][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.447025][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.472162][ T29] audit: type=1400 audit(1738790447.852:113): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.481985][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.492423][ T29] audit: type=1400 audit(1738790447.852:114): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.nwE6d7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.517689][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.524109][ T29] audit: type=1400 audit(1738790447.852:115): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.nwE6d7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.552725][ T3304] veth0_macvtap: entered promiscuous mode [ 33.558026][ T29] audit: type=1400 audit(1738790447.852:116): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.592023][ T3297] veth0_macvtap: entered promiscuous mode [ 33.610708][ T29] audit: type=1400 audit(1738790447.882:117): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.632561][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.639238][ T29] audit: type=1400 audit(1738790447.882:118): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.670601][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.679341][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.688154][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699272][ T3304] veth1_macvtap: entered promiscuous mode [ 33.710246][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.720641][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.735334][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.745275][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.755785][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.765666][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.776221][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.787642][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.800204][ T29] audit: type=1400 audit(1738790448.272:119): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.826338][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.836885][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.846731][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.857379][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.867267][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.877727][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.890724][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.898497][ T3297] veth1_macvtap: entered promiscuous mode [ 33.912244][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.921064][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.929908][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.938781][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.968812][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.979445][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.989352][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.999982][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.009848][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.020534][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.030414][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.041112][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.051977][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.067857][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.078419][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.088402][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.098856][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.108790][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.119284][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.129137][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.139606][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.150458][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.164081][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.173000][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.181860][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.190664][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.204992][ T3458] FAULT_INJECTION: forcing a failure. [ 34.204992][ T3458] name failslab, interval 1, probability 0, space 0, times 1 [ 34.217709][ T3458] CPU: 0 UID: 0 PID: 3458 Comm: syz.3.9 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 34.217811][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.217830][ T3458] Call Trace: [ 34.217838][ T3458] [ 34.217846][ T3458] dump_stack_lvl+0xf2/0x150 [ 34.217881][ T3458] dump_stack+0x15/0x1a [ 34.217907][ T3458] should_fail_ex+0x24a/0x260 [ 34.217962][ T3458] should_failslab+0x8f/0xb0 [ 34.217993][ T3458] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 34.218034][ T3458] ? shmem_alloc_inode+0x34/0x50 [ 34.218089][ T3458] shmem_alloc_inode+0x34/0x50 [ 34.218124][ T3458] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 34.218307][ T3458] alloc_inode+0x3c/0x160 [ 34.218340][ T3458] new_inode+0x1e/0x100 [ 34.218371][ T3458] shmem_get_inode+0x24e/0x730 [ 34.218405][ T3458] __shmem_file_setup+0x127/0x1f0 [ 34.218437][ T3458] shmem_file_setup+0x3b/0x50 [ 34.218515][ T3458] __se_sys_memfd_create+0x2e1/0x5a0 [ 34.218613][ T3458] __x64_sys_memfd_create+0x31/0x40 [ 34.218633][ T3458] x64_sys_call+0x2d4c/0x2dc0 [ 34.218660][ T3458] do_syscall_64+0xc9/0x1c0 [ 34.218728][ T3458] ? clear_bhb_loop+0x55/0xb0 [ 34.218763][ T3458] ? clear_bhb_loop+0x55/0xb0 [ 34.218797][ T3458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.218837][ T3458] RIP: 0033:0x7f324693cde9 [ 34.218855][ T3458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.218943][ T3458] RSP: 002b:00007f3244fa0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 34.218966][ T3458] RAX: ffffffffffffffda RBX: 00000000000007c4 RCX: 00007f324693cde9 [ 34.218980][ T3458] RDX: 00007f3244fa0ef0 RSI: 0000000000000000 RDI: 00007f32469bec51 [ 34.218994][ T3458] RBP: 0000200000000780 R08: 00007f3244fa0bb7 R09: 00007f3244fa0e40 [ 34.219007][ T3458] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 34.219036][ T3458] R13: 00007f3244fa0ef0 R14: 00007f3244fa0eb0 R15: 0000200000000040 [ 34.219057][ T3458] [ 34.451477][ T3460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 34.503849][ C1] hrtimer: interrupt took 48965 ns [ 34.532760][ T3460] loop1: detected capacity change from 0 to 2048 [ 34.568034][ T3460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.597809][ T3470] loop2: detected capacity change from 0 to 164 [ 34.611155][ T3470] ======================================================= [ 34.611155][ T3470] WARNING: The mand mount option has been deprecated and [ 34.611155][ T3470] and is ignored by this kernel. Remove the mand [ 34.611155][ T3470] option from the mount to silence this warning. [ 34.611155][ T3470] ======================================================= [ 34.692768][ T3470] Unable to read rock-ridge attributes [ 34.710178][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.717700][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.738505][ T3460] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.754340][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.762152][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.776309][ T3460] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.788699][ T3460] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.788699][ T3460] [ 34.798413][ T3460] EXT4-fs (loop1): Total free blocks count 0 [ 34.804421][ T3460] EXT4-fs (loop1): Free/Dirty block details [ 34.810538][ T3460] EXT4-fs (loop1): free_blocks=2415919104 [ 34.816286][ T3460] EXT4-fs (loop1): dirty_blocks=16 [ 34.821588][ T3460] EXT4-fs (loop1): Block reservation details [ 34.827970][ T3460] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 34.841113][ T3460] syz.1.10 (3460) used greatest stack depth: 8824 bytes left [ 34.872601][ T3478] lo speed is unknown, defaulting to 1000 [ 34.879336][ T3478] lo speed is unknown, defaulting to 1000 [ 34.885406][ T3478] lo speed is unknown, defaulting to 1000 [ 34.901487][ T3486] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 34.901487][ T3486] program syz.3.14 not setting count and/or reply_len properly [ 34.922855][ T3478] infiniband sz1: set active [ 34.922872][ T3478] infiniband sz1: added lo [ 34.923682][ T24] lo speed is unknown, defaulting to 1000 [ 34.926275][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.952680][ T3478] RDS/IB: sz1: added [ 34.956853][ T3478] smc: adding ib device sz1 with port count 1 [ 34.963182][ T3478] smc: ib device sz1 port 1 has pnetid [ 34.969920][ T3478] lo speed is unknown, defaulting to 1000 [ 34.980489][ T24] lo speed is unknown, defaulting to 1000 [ 35.031475][ T3478] lo speed is unknown, defaulting to 1000 [ 35.062609][ T3478] lo speed is unknown, defaulting to 1000 [ 35.097455][ T3478] lo speed is unknown, defaulting to 1000 [ 35.140536][ T3478] lo speed is unknown, defaulting to 1000 [ 35.350635][ T3509] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 35.371187][ T3509] lo speed is unknown, defaulting to 1000 [ 35.479527][ T3513] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 35.694073][ T3519] loop3: detected capacity change from 0 to 512 [ 35.703022][ T3519] EXT4-fs: Ignoring removed orlov option [ 35.728669][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.742594][ T3519] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.774692][ T3519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.25'. [ 35.800793][ T3519] program syz.3.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.829516][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.856118][ T3521] sz1: rxe_newlink: already configured on lo [ 35.862847][ T3528] loop3: detected capacity change from 0 to 512 [ 35.871389][ T3528] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.903435][ T3528] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.27: iget: bad i_size value: -6917529027641081756 [ 35.921966][ T3528] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.27: couldn't read orphan inode 17 (err -117) [ 35.935247][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.952282][ T3528] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.27: bg 0: block 65: padding at end of block bitmap is not set [ 35.968301][ T3528] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.27: Failed to acquire dquot type 0 [ 36.016993][ T3537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 36.169024][ T3551] FAULT_INJECTION: forcing a failure. [ 36.169024][ T3551] name failslab, interval 1, probability 0, space 0, times 0 [ 36.181735][ T3551] CPU: 1 UID: 0 PID: 3551 Comm: syz.4.35 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 36.181763][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.181817][ T3551] Call Trace: [ 36.181823][ T3551] [ 36.181830][ T3551] dump_stack_lvl+0xf2/0x150 [ 36.181864][ T3551] dump_stack+0x15/0x1a [ 36.181887][ T3551] should_fail_ex+0x24a/0x260 [ 36.181928][ T3551] should_failslab+0x8f/0xb0 [ 36.181958][ T3551] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 36.182072][ T3551] ? __d_alloc+0x3d/0x340 [ 36.182110][ T3551] ? __wake_up+0x88/0xb0 [ 36.182134][ T3551] __d_alloc+0x3d/0x340 [ 36.182171][ T3551] ? __d_add+0x3c6/0x4a0 [ 36.182216][ T3551] d_alloc_parallel+0x54/0xc80 [ 36.182238][ T3551] ? __rcu_read_unlock+0x4e/0x70 [ 36.182262][ T3551] ? avc_has_perm_noaudit+0x1cc/0x210 [ 36.182306][ T3551] ? __rcu_read_unlock+0x4e/0x70 [ 36.182327][ T3551] ? __d_lookup+0x342/0x370 [ 36.182348][ T3551] ? selinux_inode_permission+0x341/0x410 [ 36.182390][ T3551] ? down_read+0x171/0x4b0 [ 36.182465][ T3551] __lookup_slow+0x8d/0x250 [ 36.182500][ T3551] lookup_slow+0x3c/0x60 [ 36.182538][ T3551] link_path_walk+0x668/0x830 [ 36.182577][ T3551] path_openat+0x1af/0x1fc0 [ 36.182660][ T3551] ? _parse_integer_limit+0x167/0x180 [ 36.182699][ T3551] ? kstrtouint_from_user+0xb0/0xe0 [ 36.182739][ T3551] do_filp_open+0x107/0x230 [ 36.182766][ T3551] ? __pfx_kfree_link+0x10/0x10 [ 36.182855][ T3551] do_sys_openat2+0xab/0x120 [ 36.182886][ T3551] __x64_sys_openat+0xf3/0x120 [ 36.182951][ T3551] x64_sys_call+0x2b30/0x2dc0 [ 36.182982][ T3551] do_syscall_64+0xc9/0x1c0 [ 36.183009][ T3551] ? clear_bhb_loop+0x55/0xb0 [ 36.183036][ T3551] ? clear_bhb_loop+0x55/0xb0 [ 36.183089][ T3551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.183158][ T3551] RIP: 0033:0x7fdfdd18b750 [ 36.183174][ T3551] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 36.183192][ T3551] RSP: 002b:00007fdfdb7f6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 36.183214][ T3551] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdfdd18b750 [ 36.183228][ T3551] RDX: 0000000000000002 RSI: 00007fdfdb7f6fa0 RDI: 00000000ffffff9c [ 36.183258][ T3551] RBP: 00007fdfdb7f6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.183272][ T3551] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 36.183286][ T3551] R13: 0000000000000000 R14: 00007fdfdd3a5fa0 R15: 00007ffdc62df3a8 [ 36.183374][ T3551] [ 36.490511][ T3557] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 36.502144][ T3547] sz1: rxe_newlink: already configured on lo [ 36.575778][ T3561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 36.617563][ T3564] loop0: detected capacity change from 0 to 128 [ 36.660759][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.660759][ T28] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 36.701294][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.846952][ T3589] FAULT_INJECTION: forcing a failure. [ 36.846952][ T3589] name failslab, interval 1, probability 0, space 0, times 0 [ 36.859966][ T3589] CPU: 1 UID: 0 PID: 3589 Comm: syz.4.51 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 36.859995][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.860010][ T3589] Call Trace: [ 36.860017][ T3589] [ 36.860061][ T3589] dump_stack_lvl+0xf2/0x150 [ 36.860094][ T3589] dump_stack+0x15/0x1a [ 36.860120][ T3589] should_fail_ex+0x24a/0x260 [ 36.860200][ T3589] should_failslab+0x8f/0xb0 [ 36.860228][ T3589] __kmalloc_cache_node_noprof+0x56/0x320 [ 36.860270][ T3589] ? __get_vm_area_node+0xfb/0x1c0 [ 36.860348][ T3589] __get_vm_area_node+0xfb/0x1c0 [ 36.860370][ T3589] __vmalloc_node_range_noprof+0x280/0xe70 [ 36.860395][ T3589] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 36.860424][ T3589] ? mntput_no_expire+0x70/0x3d0 [ 36.860450][ T3589] ? avc_has_perm_noaudit+0x1cc/0x210 [ 36.860553][ T3589] ? selinux_capable+0x1f2/0x260 [ 36.860582][ T3589] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 36.860633][ T3589] __vmalloc_noprof+0x5e/0x70 [ 36.860661][ T3589] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 36.860686][ T3589] bpf_prog_alloc_no_stats+0x49/0x380 [ 36.860711][ T3589] ? bpf_prog_alloc+0x28/0x150 [ 36.860740][ T3589] bpf_prog_alloc+0x3a/0x150 [ 36.860803][ T3589] bpf_prog_load+0x4d0/0x1070 [ 36.860829][ T3589] ? __rcu_read_unlock+0x4e/0x70 [ 36.860859][ T3589] __sys_bpf+0x463/0x7a0 [ 36.860967][ T3589] __x64_sys_bpf+0x43/0x50 [ 36.861041][ T3589] x64_sys_call+0x2914/0x2dc0 [ 36.861149][ T3589] do_syscall_64+0xc9/0x1c0 [ 36.861173][ T3589] ? clear_bhb_loop+0x55/0xb0 [ 36.861205][ T3589] ? clear_bhb_loop+0x55/0xb0 [ 36.861238][ T3589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.861296][ T3589] RIP: 0033:0x7fdfdd18cde9 [ 36.861311][ T3589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.861328][ T3589] RSP: 002b:00007fdfdb7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.861349][ T3589] RAX: ffffffffffffffda RBX: 00007fdfdd3a5fa0 RCX: 00007fdfdd18cde9 [ 36.861360][ T3589] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 36.861372][ T3589] RBP: 00007fdfdb7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.861386][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.861433][ T3589] R13: 0000000000000000 R14: 00007fdfdd3a5fa0 R15: 00007ffdc62df3a8 [ 36.861454][ T3589] [ 36.861463][ T3589] syz.4.51: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 36.947308][ T3595] loop3: detected capacity change from 0 to 512 [ 36.951736][ T3589] ,cpuset=/,mems_allowed=0 [ 36.951767][ T3589] CPU: 1 UID: 0 PID: 3589 Comm: syz.4.51 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 36.951828][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.951843][ T3589] Call Trace: [ 36.951852][ T3589] [ 36.951862][ T3589] dump_stack_lvl+0xf2/0x150 [ 36.951920][ T3589] dump_stack+0x15/0x1a [ 36.951946][ T3589] warn_alloc+0x145/0x1b0 [ 36.952055][ T3589] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 36.952156][ T3589] ? mntput_no_expire+0x70/0x3d0 [ 36.952182][ T3589] ? avc_has_perm_noaudit+0x1cc/0x210 [ 36.952217][ T3589] ? selinux_capable+0x1f2/0x260 [ 36.952280][ T3589] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 36.952311][ T3589] __vmalloc_noprof+0x5e/0x70 [ 36.952339][ T3589] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 36.952451][ T3589] bpf_prog_alloc_no_stats+0x49/0x380 [ 36.952482][ T3589] ? bpf_prog_alloc+0x28/0x150 [ 36.952566][ T3589] bpf_prog_alloc+0x3a/0x150 [ 36.952597][ T3589] bpf_prog_load+0x4d0/0x1070 [ 36.952639][ T3589] ? __rcu_read_unlock+0x4e/0x70 [ 36.952676][ T3589] __sys_bpf+0x463/0x7a0 [ 36.952757][ T3589] __x64_sys_bpf+0x43/0x50 [ 36.952785][ T3589] x64_sys_call+0x2914/0x2dc0 [ 36.952817][ T3589] do_syscall_64+0xc9/0x1c0 [ 36.952846][ T3589] ? clear_bhb_loop+0x55/0xb0 [ 36.952881][ T3589] ? clear_bhb_loop+0x55/0xb0 [ 36.952937][ T3589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.952970][ T3589] RIP: 0033:0x7fdfdd18cde9 [ 36.952988][ T3589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.953010][ T3589] RSP: 002b:00007fdfdb7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.953031][ T3589] RAX: ffffffffffffffda RBX: 00007fdfdd3a5fa0 RCX: 00007fdfdd18cde9 [ 36.953046][ T3589] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 36.953090][ T3589] RBP: 00007fdfdb7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.953103][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.953117][ T3589] R13: 0000000000000000 R14: 00007fdfdd3a5fa0 R15: 00007ffdc62df3a8 [ 36.953139][ T3589] [ 36.953146][ T3589] Mem-Info: [ 36.963363][ T3595] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.967565][ T3589] active_anon:4399 inactive_anon:0 isolated_anon:0 [ 36.967565][ T3589] active_file:4587 inactive_file:2041 isolated_file:0 [ 36.967565][ T3589] unevictable:0 dirty:1501 writeback:0 [ 36.967565][ T3589] slab_reclaimable:2728 slab_unreclaimable:14234 [ 36.967565][ T3589] mapped:28409 shmem:314 pagetables:1055 [ 36.967565][ T3589] sec_pagetables:0 bounce:0 [ 36.967565][ T3589] kernel_misc_reclaimable:0 [ 36.967565][ T3589] free:1913377 free_pcp:2042 free_cma:0 [ 37.011625][ T3595] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.55: iget: bad i_size value: -6917529027641081756 [ 37.014650][ T3589] Node 0 active_anon:17596kB inactive_anon:0kB active_file:18348kB inactive_file:8164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113636kB dirty:6004kB writeback:0kB shmem:1256kB writeback_tmp:0kB kernel_stack:2880kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no [ 37.020086][ T3595] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.55: couldn't read orphan inode 17 (err -117) [ 37.025254][ T3589] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 37.032053][ T3595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.049432][ T3589] lowmem_reserve[]: 0 2885 7863 0 [ 37.049471][ T3589] Node 0 DMA32 free:2950964kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954496kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 37.081070][ T3595] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.55: bg 0: block 65: padding at end of block bitmap is not set [ 37.082107][ T3589] lowmem_reserve[]: [ 37.090799][ T3595] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.55: Failed to acquire dquot type 0 [ 37.098100][ T3589] 0 0 4978 0 [ 37.098132][ T3589] Node 0 Normal free:4687184kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:17596kB inactive_anon:0kB active_file:18348kB inactive_file:8164kB unevictable:0kB writepending:6004kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:4464kB local_pcp:128kB free_cma:0kB [ 37.579943][ T3589] lowmem_reserve[]: 0 0 0 0 [ 37.584912][ T3589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 37.597764][ T3589] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950964kB [ 37.614029][ T3589] Node 0 Normal: 86*4kB (UME) 37*8kB (UME) 29*16kB (UME) 30*32kB (UME) 20*64kB (UME) 12*128kB (UME) 12*256kB (UME) 5*512kB (M) 5*1024kB (M) 7*2048kB (M) 1137*4096kB (UM) = 4687120kB [ 37.632228][ T3589] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 37.641555][ T3589] 6978 total pagecache pages [ 37.646187][ T3589] 3 pages in swap cache [ 37.650369][ T3589] Free swap = 124740kB [ 37.654529][ T3589] Total swap = 124996kB [ 37.658723][ T3589] 2097051 pages RAM [ 37.662564][ T3589] 0 pages HighMem/MovableOnly [ 37.667273][ T3589] 80035 pages reserved [ 37.688897][ T3602] loop2: detected capacity change from 0 to 512 [ 37.708510][ T3602] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.727931][ T3602] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.53: iget: bad i_size value: -6917529027641081756 [ 37.746705][ T3602] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.53: couldn't read orphan inode 17 (err -117) [ 37.762010][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.778723][ T3602] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.53: bg 0: block 65: padding at end of block bitmap is not set [ 37.784524][ T3614] tmpfs: Bad value for 'mpol' [ 37.800781][ T3602] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.53: Failed to acquire dquot type 0 [ 37.837937][ T3620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.62'. [ 37.841132][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.902264][ C1] ================================================================== [ 37.910405][ C1] BUG: KCSAN: data-race in can_send / can_send [ 37.916606][ C1] [ 37.918938][ C1] read-write to 0xffff888104900570 of 8 bytes by interrupt on cpu 0: [ 37.927027][ C1] can_send+0x5b6/0x6d0 [ 37.931214][ C1] bcm_can_tx+0x314/0x420 [ 37.935585][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 37.940891][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 37.946120][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 37.951173][ C1] handle_softirqs+0xbf/0x280 [ 37.955878][ C1] __irq_exit_rcu+0x3a/0xc0 [ 37.960928][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 37.966610][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 37.972616][ C1] finish_task_switch+0xc4/0x2b0 [ 37.977591][ C1] __schedule+0x75b/0x990 [ 37.981953][ C1] schedule+0x55/0xc0 [ 37.985961][ C1] irqentry_exit_to_user_mode+0x87/0x120 [ 37.991617][ C1] irqentry_exit+0x12/0x50 [ 37.996039][ C1] sysvec_apic_timer_interrupt+0x44/0x80 [ 38.001690][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 38.007687][ C1] [ 38.010013][ C1] read-write to 0xffff888104900570 of 8 bytes by interrupt on cpu 1: [ 38.018089][ C1] can_send+0x5b6/0x6d0 [ 38.022267][ C1] bcm_can_tx+0x314/0x420 [ 38.026620][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 38.031920][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 38.037130][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 38.042172][ C1] handle_softirqs+0xbf/0x280 [ 38.046860][ C1] do_softirq+0x5e/0x90 [ 38.051122][ C1] __local_bh_enable_ip+0x6e/0x70 [ 38.056333][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 38.061326][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 38.066977][ C1] process_scheduled_works+0x483/0x9a0 [ 38.072451][ C1] worker_thread+0x51d/0x6f0 [ 38.077059][ C1] kthread+0x4ae/0x520 [ 38.081149][ C1] ret_from_fork+0x4b/0x60 [ 38.085582][ C1] ret_from_fork_asm+0x1a/0x30 [ 38.090359][ C1] [ 38.092683][ C1] value changed: 0x000000000000038b -> 0x000000000000038c [ 38.099960][ C1] [ 38.102456][ C1] Reported by Kernel Concurrency Sanitizer on: [ 38.108643][ C1] CPU: 1 UID: 0 PID: 3385 Comm: kworker/u8:7 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 38.119669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.129740][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 38.136614][ C1] ================================================================== [ 38.146767][ C1] ================================================================== [ 38.154962][ C1] BUG: KCSAN: data-race in can_send / can_send [ 38.161174][ C1] [ 38.163510][ C1] read-write to 0xffff888104900510 of 8 bytes by interrupt on cpu 0: [ 38.171605][ C1] can_send+0x5a2/0x6d0 [ 38.175791][ C1] bcm_can_tx+0x314/0x420 [ 38.180152][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 38.185977][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 38.191197][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 38.196245][ C1] handle_softirqs+0xbf/0x280 [ 38.200955][ C1] do_softirq+0x5e/0x90 [ 38.205140][ C1] __local_bh_enable_ip+0x6e/0x70 [ 38.210243][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 38.215315][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 38.220980][ C1] process_scheduled_works+0x483/0x9a0 [ 38.226460][ C1] worker_thread+0x51d/0x6f0 [ 38.231074][ C1] kthread+0x4ae/0x520 [ 38.235181][ C1] ret_from_fork+0x4b/0x60 [ 38.239609][ C1] ret_from_fork_asm+0x1a/0x30 [ 38.244391][ C1] [ 38.246720][ C1] read-write to 0xffff888104900510 of 8 bytes by interrupt on cpu 1: [ 38.254793][ C1] can_send+0x5a2/0x6d0 [ 38.258964][ C1] bcm_can_tx+0x314/0x420 [ 38.263324][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 38.268619][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 38.273833][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 38.278861][ C1] handle_softirqs+0xbf/0x280 [ 38.283541][ C1] __irq_exit_rcu+0x3a/0xc0 [ 38.288053][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 38.293705][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 38.299695][ C1] finish_task_switch+0xbf/0x2b0 [ 38.304651][ C1] __schedule+0x75b/0x990 [ 38.308991][ C1] __cond_resched+0x28/0x50 [ 38.313508][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 38.318454][ C1] kthread+0x4ae/0x520 [ 38.322551][ C1] ret_from_fork+0x4b/0x60 [ 38.326988][ C1] ret_from_fork_asm+0x1a/0x30 [ 38.331774][ C1] [ 38.334095][ C1] value changed: 0x00000000000011b4 -> 0x00000000000011b5 [ 38.341199][ C1] [ 38.343518][ C1] Reported by Kernel Concurrency Sanitizer on: [ 38.349670][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 38.360357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.370500][ C1] ================================================================== [ 38.380546][ T3623] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 38.390259][ T3623] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 38.424045][ C0] ================================================================== [ 38.432182][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 38.438899][ C0] [ 38.441233][ C0] read-write to 0xffff888104900568 of 8 bytes by interrupt on cpu 1: [ 38.449322][ C0] can_receive+0x62/0x1f0 [ 38.453682][ C0] canfd_rcv+0xe7/0x180 [ 38.457863][ C0] __netif_receive_skb+0x123/0x280 [ 38.463008][ C0] process_backlog+0x22e/0x440 [ 38.467820][ C0] __napi_poll+0x63/0x3c0 [ 38.472195][ C0] net_rx_action+0x3a1/0x7f0 [ 38.476827][ C0] handle_softirqs+0xbf/0x280 [ 38.481539][ C0] do_softirq+0x5e/0x90 [ 38.486253][ C0] __local_bh_enable_ip+0x6e/0x70 [ 38.491296][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 38.496271][ C0] batadv_nc_purge_paths+0x220/0x270 [ 38.501591][ C0] batadv_nc_worker+0x3db/0xad0 [ 38.506465][ C0] process_scheduled_works+0x483/0x9a0 [ 38.511943][ C0] worker_thread+0x51d/0x6f0 [ 38.516554][ C0] kthread+0x4ae/0x520 [ 38.520740][ C0] ret_from_fork+0x4b/0x60 [ 38.525201][ C0] ret_from_fork_asm+0x1a/0x30 [ 38.530037][ C0] [ 38.532382][ C0] read-write to 0xffff888104900568 of 8 bytes by interrupt on cpu 0: [ 38.540722][ C0] can_receive+0x62/0x1f0 [ 38.545084][ C0] canfd_rcv+0xe7/0x180 [ 38.549256][ C0] __netif_receive_skb+0x123/0x280 [ 38.554389][ C0] process_backlog+0x22e/0x440 [ 38.559173][ C0] __napi_poll+0x63/0x3c0 [ 38.563518][ C0] net_rx_action+0x3a1/0x7f0 [ 38.568126][ C0] handle_softirqs+0xbf/0x280 [ 38.572814][ C0] __irq_exit_rcu+0x3a/0xc0 [ 38.577340][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 38.582991][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 38.589008][ C0] radix_tree_next_chunk+0x9c/0x550 [ 38.594229][ C0] idr_get_next+0xfd/0x230 [ 38.598654][ C0] ctrl_getfamily+0x112/0x3b0 [ 38.603332][ C0] genl_rcv_msg+0x61b/0x6c0 [ 38.607844][ C0] netlink_rcv_skb+0x12c/0x230 [ 38.612641][ C0] genl_rcv+0x28/0x40 [ 38.616649][ C0] netlink_unicast+0x599/0x670 [ 38.621431][ C0] netlink_sendmsg+0x5cc/0x6e0 [ 38.626218][ C0] __sock_sendmsg+0x140/0x180 [ 38.630898][ C0] __sys_sendto+0x1a8/0x230 [ 38.635499][ C0] __x64_sys_sendto+0x78/0x90 [ 38.640182][ C0] x64_sys_call+0x29fa/0x2dc0 [ 38.644877][ C0] do_syscall_64+0xc9/0x1c0 [ 38.649390][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.655291][ C0] [ 38.657615][ C0] value changed: 0x0000000000002cf6 -> 0x0000000000002cf7 [ 38.664746][ C0] [ 38.667065][ C0] Reported by Kernel Concurrency Sanitizer on: [ 38.673297][ C0] CPU: 0 UID: 0 PID: 3627 Comm: syz.3.61 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 38.683800][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.693857][ C0] ================================================================== [ 38.737990][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.