last executing test programs: 2.258117643s ago: executing program 1 (id=209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000007500000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x594, &(0x7f0000000640)="$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") 2.177580753s ago: executing program 0 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) mmap(&(0x7f0000b1b000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xfffff000) ftruncate(0xffffffffffffffff, 0xc17a) io_setup(0x200, &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="00e74db448c16083edd7c0347e4407000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20000144}, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = io_uring_setup(0x2700, &(0x7f00000003c0)={0x0, 0xdfe3, 0x40, 0x3, 0x40}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1.607950515s ago: executing program 1 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r4 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f00000053c0)=[{{&(0x7f0000000300)={0xa, 0x4e1e, 0x3, @remote, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x80, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r6}}}], 0x28}}], 0x1, 0x810) statx(r3, &(0x7f0000000280)='.\x00', 0x4000, 0x20, &(0x7f0000000440)) 1.570139835s ago: executing program 1 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000500)=ANY=[@ANYBLOB="7167e200209b6cd8246e9bd618f987936a0e8c5eec43ddca1d75e909ad1f025498285bce3c632090f0b1addc24f67b0ce01711fbe50c00000000000000a769c806bc", @ANYRESHEX=0x0, @ANYBLOB='A\x00']) 1.257159316s ago: executing program 0 (id=235): syz_open_dev$sg(0x0, 0x4000000000fffc, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) rt_sigaction(0x2b, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x40187013, &(0x7f0000000140)={0x0, 0x2}) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffbcffff0180c200000086dd6082d2f300000000fe8801ff7b020000000000000000000000000001"], 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x5, 0xb7, 0xa}) sendfile(r9, r9, 0x0, 0x80000000) ioctl$GIO_SCRNMAP(r3, 0x5608, 0x0) 1.203772796s ago: executing program 3 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000be0bb2d0100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="59e987a9197e8b96272dae319b9e0d24ba841f3f256e23170671307024d5f456df018d9a219ce1e31a9f3db330d96f601fe725"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x57) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) futimesat(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYBLOB="7c8c1e192223a4b1eeaca3f207f6583311c1289a4dc997aee63f69d240c85da18db473ee7fae75e18e746f294a107a0d7b9e1a981147", @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$isdn_base(0x22, 0x3, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r6, {0xee01, 0x0}}, './file0\x00'}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000b40)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x188}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="000000003c00b460d0f4eecc0000000001000000010000000000b96795f427301cd0b0e36dfdc89800000000000000010000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r17, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r15, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x2000}, 0x40000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r19, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000001f80)='./bus\x00', 0x800840, &(0x7f0000000200)={[{@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_mixed}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}]}, 0x6, 0x362, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)="49df22d6ba797efd1ecc2b4db3ad3f7840a343a16e8e05392cb6ca5739572f418fc6d5c24d673989eb463b4a32bf99e80e8d55a1a30b902a1cd4f6e80691fb78763f4383bebcd436fd78ac823c83c2b59d56"}], 0x5, &(0x7f0000000040), 0xffffffffffffffcf, 0x20000000}, 0x20040051) 1.087857617s ago: executing program 4 (id=238): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r5, 0x409, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4000) ftruncate(r5, 0x5) write(0xffffffffffffffff, &(0x7f0000000180)=' \x00\x00', 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000030000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000160186d21c12aca29000c8bc17ca4a5eef5edb00000000000000000000e39bd1aa63f06d0ce1ec7257f02af10c3cd3238be5ff3de96396c0e6e82a1892618aec55f75b4f044bfe38f5fb49b1a8b0f05b2d8aed953621fe0fcc12fe899ed02b52192300e44fdd5d7e344d1edd50bca00aaa3ba69360639332a96cfaf2cdf6097aab66971a234a3c576434d568a2f059dff1f00fc07ba6533e806a97ae256d7060d787a9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 967.861967ms ago: executing program 3 (id=239): unshare(0x62040200) socket$netlink(0x10, 0x3, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x4001c3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000340)=""/215, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000400)="3292f60e34b68b1f15dcf60000", 0xd, 0x20000001, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000100)}, 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001, 0xffffffff}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000000000050000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00;~'], 0x1c}}, 0x0) 897.542797ms ago: executing program 0 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0x7}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0x0, 0x40, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x50}}, 0x44050) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, 0x6}, 0x1c) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r11 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 806.827617ms ago: executing program 2 (id=243): r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x3d, 0x1, 0x5, 0x0, 0x0, 0x5, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x100000, 0x3, 0xfffffffe, 0x6, 0x3, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 802.800617ms ago: executing program 3 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) tkill(r3, 0x1) tkill(r4, 0x14) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x27f, &(0x7f0000000780)="$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") syz_clone3(&(0x7f0000000640)={0x1410a00, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x7}, &(0x7f00000004c0)=""/155, 0x9b, &(0x7f0000000580)=""/159, &(0x7f0000000440)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="f605f9ebf4ff7741af3bc5713f8d1fc9aacb864fb9514eb8d8cb359b5cdf5b4f5733c6c5f681f327fae0938271f292335100661ad06f7d0c50386003f268711690a3cdca28535caeba1ae49b766e88eb76e44ec24dcf36aa841776fecb7ea6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r9, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) 725.710108ms ago: executing program 4 (id=245): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x41) 725.278268ms ago: executing program 0 (id=246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x7, 0x2, 0x2, 0x0, 0xd, 0x8200, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffff987, 0x1, @perf_config_ext={0xebbc, 0x2}, 0x8, 0x9, 0x6, 0x4, 0x7, 0x6, 0xfff0, 0x0, 0x6, 0x0, 0x80}, r1, 0x8, r1, 0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x8, 0x7, 0x18, 0x0, 0x6, 0x580, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x356, 0x9}, 0x10492b, 0xc, 0x4, 0x9, 0x10, 0x9, 0x3, 0x0, 0x9cd, 0x0, 0x8}, r2, 0xd, r3, 0x1) ptrace$peekuser(0x3, r2, 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004802c0001800e000100696d6d656469617465000000180002800c00028005000100c40000000800014000000009100001800c0001006e6f747261636b000900010073797a30000000000900020073797a320000000014000000080a010100000000000000000700000428000000080a010300000000000000000100000808000a400000000109000100"], 0x5a1c}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r4, 0x114, 0x2710, 0x0, 0x20000000) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) mkdir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 724.899387ms ago: executing program 2 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000010", @ANYRES16=r1, @ANYBLOB="20002cbd7000ffdbdf2507000000050013000000000008000b0003000000060001000b00000008001800e0000002"], 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x8080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) ioperm(0xac, 0x8, 0xfffffffffffffffd) r4 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0xfffffffe}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_uring_enter(r4, 0x1, 0x0, 0x1, 0x0, 0x1000000) 721.552797ms ago: executing program 1 (id=248): timer_create(0x0, &(0x7f0000001140)={0x0, 0x37, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000480)=""/225}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000380), &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kexec_load(0x0, 0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r0, 0x4b45, 0x4) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x1, 0x7}) 669.030778ms ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6}, @void, @eth={@empty, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010102, @local}, {{0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "20e856", 0x0, "fb1407"}}}}}}}, 0x3e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x21, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x4}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x0, 0x0, 0x101}}) socket$inet_mptcp(0x2, 0x1, 0x106) 650.984588ms ago: executing program 1 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 603.939878ms ago: executing program 4 (id=251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) listxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x5, 0x4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c0108"], 0x17c}}, 0x0) 603.502118ms ago: executing program 3 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='afs_get_tree\x00', r0, 0x0, 0x5}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)="f1dc6e4f6a81c6b20419691528b5141d2d9a37212b8ad580a4ec3258267d77e6c86001b179a6e8508b4d5ad22ddbd335851df0d976d48333f91b31da0312e7cc7300dd511f5b65bc0ff47e834606d846f5ff0bd33a271e6dc9154de56bb694ba94ee196376514623042bc14d7d869ced9e54486c1b6dad6dcb3f6940b88de58126a349dca3c52e918a8e142511ee936bb42534555f0f", 0x96) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x6, 0x8000000000000000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'rose0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x1, 0x4, 0xfffffff4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x1, r5, r6], 0x0, 0x10, 0x9a, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}, 0x0, 0x2}}, 0x50}}, 0x1000) syz_emit_ethernet(0x97, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500610600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200009078000016f03cabec75d61dedb51460e43bfd0105d5ab5394b128ee7e0a637e06aeeed233a4392d202ee5a3b93c374e5fb351b14f22feaa50f7057d8f2eaa3e5317f2bfe1bac981736bf9cc2c59a6dba98ae54b9b3e20d755e15cc5c00d4b358b1c0c79d27bf7a624b5dadd88a54b378b79e328e8f2246d23607a25ad0ea37143b74acb505f4c54579870ed817a00ce90f1f5d67e9fd99b0afbe127a2326912daa8d2"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000300)={0x0, 0x989680}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x30, 0x3d, 0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000017c0)=""/4096, 0x34, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) unshare(0x40000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000007f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='initcall_start\x00', r10, 0x0, 0xb}, 0x18) lgetxattr(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='u'], 0x0, 0x0) 600.019308ms ago: executing program 0 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='ext4_ext_convert_to_initialized_fastpath\x00', r2}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRESHEX=r0], 0x8, 0x2f4, &(0x7f0000000880)="$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") r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000000000050000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00;~'], 0x1c}}, 0x0) 433.508839ms ago: executing program 2 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r1, r0}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x6d) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macvtap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 315.829209ms ago: executing program 4 (id=256): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$eJzs3c1rE00cwPFf0rw07dMnPTw8iCgMFUSRLk3AmweLtCAGlLYRrCBs7VZDtknJhkJEbA+CV88eevAoggjevIh47cW/wLdbL71ZsDiy2U3cJkuaVvrq93PoTnd+v9mZnd02nbabtUtP54tzjvFDx8SX8Ld6yS8sy/kPK59PT77/x/tcqfHRqUxWqaiI3H74cuhdtf/mm3/fJmV18M7aevbb6qkpkZ9T9yWqCo4qaa21mimXqxE3ebbgFA2lbtiW6ViqUHKsSlWZ9XpzxrbUnF1eWKgpszQ70LdQsRxHmaWaKlo1VS2raqWmzHtmoaQMw1ADfQIRGWyWom11kU6J+RcbWsu6O0HJZdFah0QvNwpxf5v8s87iMGmZ/46xbRdHz172DPthQ8ea85/YZv5x/Hj3/5dn3dz/OH4mb01fG83lxiaU6hWZf7KYX8x7W6/+U78UxBZLViYuTG+Ke434JOJ+HL+aGxtRdYNydn7Jz19azHvfHEbn/PyMpN3XKYF8aeRnvHy1NT8ufcH8rKTlv/D8bCNfooH8hJw7E8g3JC0f70pZbJl1X9wG8h9llLpyPddy/FQ9DgAAAAAAAACAo8hQTb/X7yPNX/WmDCNZ/4uPZn3K3e3GeQHN9fURSctm+Pr8SOj6fkxOxg5w4AAAAAAA/EWc2oOiadtWZecF6SKm53mqwyHiIuIWRB4PuZ3p2OD/fo9bqtw2QrISItLeTk83ffYLqYve8V5N+B2T3Z6oPSxERSS4x/tnDXfw9utGTCrs/DjRHV0Aw4n2M2/adu++Djk4UtFahwZL7+4u7GToALspRDYbe06ExujI9u1o0457exo35nZHvxx+O3RZcGffm8HWEzX81WvX7vBF43tziQ8AAADAERL4wQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByQXT2JrfHc/q1V4r9FfPsj2VrfJ57n/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4hH4FAAD//5t/ryo=") tee(r0, r0, 0x7, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049dc) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_aout(r1, &(0x7f0000000c40)={{0x107, 0x8, 0x2, 0x19f, 0x121, 0x3, 0x124, 0x2}, "be21bac74f9ad7426aeeedc52aa8ba3cea8b43e691485fdf3be8cd100071d34bb7432f7081a16383c736b3177dc52b1e314ea98f34d8712206945eab467ca25eb23f2fc1ba168aba77198d0f2ed1e1a24ab8709c185ae037f16b3ec2181914a584247517902d4c2e58c9ae8bce2b577490d83039740e3dd58a4857c94bbb8cccd501d0f80ca74036e67d2bd72701fda6ac51b841f9e4681f3462dabcc82f7541bd10f32766e04932eb5feb0c690337dfb4746018239c8652bc45729d07d225d47b6cc36791ef55c606f879fc8df9ff17fcb5573a90c165e8380ec9437849", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7fe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000001c0)=0x4) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0xa0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000400)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) 315.278899ms ago: executing program 3 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2f5}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}, {0x0, 0x6}], &(0x7f0000001540)=[0x4]}, 0x20) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0x4}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x198, 0x65, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x168, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x15c, 0x6, [@m_vlan={0x40, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7e}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_xt={0x60, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x2d, 0x6, "a5253fa303177a58da34b3cbe73fc5a4963269cc278d679372af47f8a41503e725cc83e204a4adf520"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xb8, 0x15, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff9, 0x5, 0x8, 0x7, 0x4}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6002}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x6, 0x5, 0x3, 0x800}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8703d}]}, {0x41, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x198}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x19f, &(0x7f0000000340)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@jqfmt_vfsv0}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$eJzs3c9rJFkdAPBv9XRn50dmO6sedMF1dVdmFp3uycbdDR7WEURPC+J6H2PSE8J00iHd2Z2EgJm/QBBR0ZNevAj+AYIMePEowoCeFVYU0YweBHVKqrqSyWa6k56xtzs/Ph+oqVevqvr7Xg2vUq/qURXAmfViRNyIiIdpmr4SEdUiv1RMsd2dsu0e7GzNZ1MSafr235JIirzd30qK+aVit/MR8bWvRHwzeTxue2Pz9lyz2Vgrluud5dV6e2Pz2tLy3GJjsbEyMzP9+uwbs6/NXh9KPS9HxJtf+tP3vv3TL7/5y8+++8ebf7maVTsmi/X76/EEskNUPmyDbtUr+bHYle2w9hTBjqtyXsPChV5bpGmaPkyr+3LujqRkAAAclF3AfigiPhURr0Q1zh1+OQsAAACcQOkXJuM/SfcJTQ8TffIBAACAE6SUj4FNSrViLMBklEq1WncM70fiYqnZanc+c6u1vrJw/4eTETEVldKtpWbjejFWeCoqSbY8nacfLb96YHkmIp6LiO9WL+TLtflWc2HcNz8AAADgjLh0oP//z2q3/w8AAACcMlOPZ5XGUQ4AAADgg9Oj/w8AAACcMvr/AAAAcKp99a23sind/f71wjsb67db71xbaLRv15bX52vzrbXV2mKrtZi/s2/5qN9rtlqrn4uV9Tv1TqPdqbc3Nm8ut9ZXOjeX3vcJbAAAAGCEnvvEvd8nEbH9+Qv5lJkYd6GAkSjvpZJi3qP1/+HZ7vy9ERUKGIlzA2zz3jMjKAgwcuVxFwAYm8q4CwCMXXLE+r6Dd35TzD853PIAAADDd+Vj/Z//H/4NgG2fCIATTiOGs+vA8/+0Oq6CACOXP/8fdMCviwU4VSoDjQAETrP/+/n/kdL0iQoEAAAM3WQ+JaVacXtvMkqlWi3icv5ZgEpya6nZuB4Rz0bE76qVZ7Ll6XzP5Mg+AwAAAAAAAAAAAAAAAAAAAAAAAADQlaZJpIe5cehaAAAA4ASIKP05+VX3Xf5Xqi9PHrw/MJH8K/8k8EREvPujt79/Z67TWZvO8v++l9/5QZH/6jjuYAAAAAAH7fbTd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBMD3a25h/sbKX/3tmaH2Xcv34xIqb24udTd005zufz81GJiIv/SKK8b78kIs4NIf723Yj4aK/4SVasvZC94l/44OPHVHEUesW/NIT4cJbdy84/N3q1v1K8mM97t79yxPuWn1b/81/snf/O9Wn/lweM8fz9n9f7xr8b8Xy59/lnN37SJ/5LURoo/je+vrnZb13644gr0Tv+/lj1zvJqvb2xeW1peW6xsdhYmZmZfn32jdnXZq/Xby01G8W/PWN85+O/eHhY/S/2iT91RP1fHqj2Ef+9f2fnw91kpVf8qy/1iP/rnxRbPB6/VPzt+3SRztZf2U1vd9P7vfCz375wWP0XHtW/8iT//1cHrP9QGgoAMDTtjc3bc81mY+0kJCpPs1fWSz8OhZc4folvDfUH0zRNszbVY9W9iBjkd5I4DoclT4z7zAQAAAzbo4v+cZcEAAAAAAAAAAAAAAAAAAAAzq4hvjNsot9r9g7G3N5LJd4MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcG/8LAAD//3uY3uY=") r10 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xe21, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0xfffffffd, 0x4) 260.249349ms ago: executing program 0 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000500)=ANY=[@ANYBLOB="7167e200209b6cd8246e9bd618f987936a0e8c5eec43ddca1d75e909ad1f025498285bce3c632090f0b1addc24f67b0ce01711fbe50c00000000000000a769c806bc", @ANYRESHEX=0x0, @ANYBLOB='A\x00']) 191.359799ms ago: executing program 32 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000500)=ANY=[@ANYBLOB="7167e200209b6cd8246e9bd618f987936a0e8c5eec43ddca1d75e909ad1f025498285bce3c632090f0b1addc24f67b0ce01711fbe50c00000000000000a769c806bc", @ANYRESHEX=0x0, @ANYBLOB='A\x00']) 108.31308ms ago: executing program 2 (id=260): timer_create(0x0, &(0x7f0000001140)={0x0, 0x37, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000480)=""/225}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000380), &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kexec_load(0x0, 0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r0, 0x4b45, 0x4) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x1, 0x7}) 31.94505ms ago: executing program 4 (id=261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0xfbfe, 0x0, 0xff80}, {@in6=@remote, 0x0, 0x3c}, @in6=@private1, {}, {0x0, 0x0, 0x0, 0x8000000}, {0xfffffffe}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe, 0x0, 0x4010}, 0x10) 9.42039ms ago: executing program 2 (id=262): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x5, 0x2e3, &(0x7f0000000280)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0xb39a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000006000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00', r9}, 0x18) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9.00688ms ago: executing program 3 (id=263): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (fail_nth: 4) 0s ago: executing program 4 (id=264): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x101242) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800000000040400"/17, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009553a51a743847d6b1cc52c58f9378b766b883b926007e065c2b4e4b6a5d2ed52f5cde55ce36c545843006324f2c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009553a51a743847d6b1cc52c58f9378b766b883b926007e065c2b4e4b6a5d2ed52f5cde55ce36c545843006324f2c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) fcntl$dupfd(r0, 0x0, r0) (async) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) (async) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) readv(r4, &(0x7f0000003680)=[{&(0x7f0000001500)=""/215, 0xd7}], 0x3f) (async) readv(r4, &(0x7f0000003680)=[{&(0x7f0000001500)=""/215, 0xd7}], 0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000340)=ANY=[@ANYBLOB="223de5edde2a39b532c241e443795fe5cdf892b8008abdd9c3d1f7759ba7b71d8965560529e1a5715eeb9bdda070aace4f44280025855bf7228ffd03a901f31d8461b6857e624efa714225d4c77e6fc78a2bbf3b07744452e4ccdd05999aec94102b22acfc4310e052584768609ac3e86f0e49012004ed0260aea64cd3f517a9"], 0xfd, 0x20a, &(0x7f0000000c40)="$eJzs3b2OElEUAODDyi6DsaAzMTEZY6HVRn2CtVgTI4nJGgrtTLSSamlgm93H8BV8JSsLKyuzFY25Bmf4EZFFEhjF7yvgzJx7mXPvwDANlxSFzzffR5bVYu8ojmJYi1bsxdhFAAC7ZJhSfE2Fyc5PlZYEAGzYwu//iWz08K2CsgCADXrx8tWzx+328UmeZxGXF/1Ov1M8F/knT9vHD/IfWtNel/1+59ok/zCfv3cY5ffjepl/VPTPJ+mDiOgcxP27RT5vZRHP2/nP/RvxJsa3IAAAAAAAAAAAAAAAAAAAAAAAsFtuRz62cH2fw8P5fLPMF1sz6wPNrd9Tj1v1cnO6PFA638agAAAAAAAAAAAAAAAAAAAA4B/TG5y9e93tvj2dBo2ImN1TX9Dm90GtfOGVGlcf7H38UtT7h92b5TDXOGitnKLNDrC5+OSuEkT9bzk788F+rDZ1+RbqaS6d3pRGweynIE3eLfWrRnEQEcuPfu9k3eKHKaXuhzunvUGkpY2n14jGdi5FAAAAAAAAAAAAAAAAAADw3+sNauNfff8iq6IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhAb3BW/v//GsF5RNyIKxuPj7UfWbWDBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGd9DwAA///r7B5g") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000004070c000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) (async) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) write$cgroup_subtree(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="668e20"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_CREATE(r8, &(0x7f00000005c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x3}}, 0x120) (async) write$UHID_CREATE(r8, &(0x7f00000005c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x3}}, 0x120) kernel console output (not intermixed with test programs): [ 22.453880][ T29] audit: type=1400 audit(1733781473.397:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 26.643985][ T29] audit: type=1400 audit(1733781477.587:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.645241][ T3287] cgroup: Unknown subsys name 'net' [ 26.666774][ T29] audit: type=1400 audit(1733781477.587:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.694555][ T29] audit: type=1400 audit(1733781477.617:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.810186][ T3287] cgroup: Unknown subsys name 'cpuset' [ 26.816407][ T3287] cgroup: Unknown subsys name 'rlimit' [ 26.986978][ T29] audit: type=1400 audit(1733781477.927:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.010272][ T29] audit: type=1400 audit(1733781477.927:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.030850][ T29] audit: type=1400 audit(1733781477.927:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.051208][ T29] audit: type=1400 audit(1733781477.927:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.071509][ T29] audit: type=1400 audit(1733781477.947:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.080460][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.096286][ T29] audit: type=1400 audit(1733781477.947:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.128121][ T29] audit: type=1400 audit(1733781478.047:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.176783][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.615321][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.684993][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.695176][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 28.718039][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.758748][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.765932][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.773344][ T3297] bridge_slave_0: entered allmulticast mode [ 28.780094][ T3297] bridge_slave_0: entered promiscuous mode [ 28.800096][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.807168][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.814463][ T3297] bridge_slave_1: entered allmulticast mode [ 28.821088][ T3297] bridge_slave_1: entered promiscuous mode [ 28.866139][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.876358][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.892813][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.899917][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.907066][ T3300] bridge_slave_0: entered allmulticast mode [ 28.913466][ T3300] bridge_slave_0: entered promiscuous mode [ 28.921964][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.929037][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.936249][ T3300] bridge_slave_1: entered allmulticast mode [ 28.942568][ T3300] bridge_slave_1: entered promiscuous mode [ 28.948821][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.955912][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.963112][ T3296] bridge_slave_0: entered allmulticast mode [ 28.969532][ T3296] bridge_slave_0: entered promiscuous mode [ 28.989748][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.998710][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.005807][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.013035][ T3305] bridge_slave_0: entered allmulticast mode [ 29.019523][ T3305] bridge_slave_0: entered promiscuous mode [ 29.030929][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.038053][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.045441][ T3296] bridge_slave_1: entered allmulticast mode [ 29.051893][ T3296] bridge_slave_1: entered promiscuous mode [ 29.073433][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.080571][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.087791][ T3305] bridge_slave_1: entered allmulticast mode [ 29.094170][ T3305] bridge_slave_1: entered promiscuous mode [ 29.111276][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.125469][ T3297] team0: Port device team_slave_0 added [ 29.132249][ T3297] team0: Port device team_slave_1 added [ 29.148170][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.171113][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.186093][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.210189][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.220176][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.234540][ T3300] team0: Port device team_slave_0 added [ 29.240912][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.247867][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.273925][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.285123][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.292119][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.318167][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.343307][ T3300] team0: Port device team_slave_1 added [ 29.349544][ T3296] team0: Port device team_slave_0 added [ 29.357875][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.365052][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.372202][ T3301] bridge_slave_0: entered allmulticast mode [ 29.378559][ T3301] bridge_slave_0: entered promiscuous mode [ 29.402005][ T3296] team0: Port device team_slave_1 added [ 29.412725][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.419970][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.427103][ T3301] bridge_slave_1: entered allmulticast mode [ 29.434098][ T3301] bridge_slave_1: entered promiscuous mode [ 29.441103][ T3305] team0: Port device team_slave_0 added [ 29.447030][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.454102][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.480112][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.501861][ T3297] hsr_slave_0: entered promiscuous mode [ 29.507863][ T3297] hsr_slave_1: entered promiscuous mode [ 29.519482][ T3305] team0: Port device team_slave_1 added [ 29.525525][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.532511][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.558531][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.576891][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.583871][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.609835][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.634266][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.641276][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.667189][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.678540][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.685563][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.711498][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.722516][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.729564][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.755479][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.769627][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.780186][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.845357][ T3300] hsr_slave_0: entered promiscuous mode [ 29.851383][ T3300] hsr_slave_1: entered promiscuous mode [ 29.857204][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.864838][ T3300] Cannot create hsr debugfs directory [ 29.874793][ T3305] hsr_slave_0: entered promiscuous mode [ 29.880963][ T3305] hsr_slave_1: entered promiscuous mode [ 29.886786][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.894370][ T3305] Cannot create hsr debugfs directory [ 29.906106][ T3301] team0: Port device team_slave_0 added [ 29.912661][ T3301] team0: Port device team_slave_1 added [ 29.928892][ T3296] hsr_slave_0: entered promiscuous mode [ 29.934915][ T3296] hsr_slave_1: entered promiscuous mode [ 29.940826][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.948375][ T3296] Cannot create hsr debugfs directory [ 29.982362][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.989356][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.015315][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.040847][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.047931][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.073877][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.147282][ T3301] hsr_slave_0: entered promiscuous mode [ 30.153545][ T3301] hsr_slave_1: entered promiscuous mode [ 30.159576][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.167198][ T3301] Cannot create hsr debugfs directory [ 30.246198][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.261357][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.270021][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.284529][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.297427][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.306756][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.323367][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.334015][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.371157][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.385107][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.393975][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.406715][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.416749][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.427601][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.437075][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.446348][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.500276][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.510091][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.518420][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.527772][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.586234][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.605122][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.613971][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.626478][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.646120][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.653265][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.661936][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.668985][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.686532][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.698683][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.709774][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.716911][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.734695][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.741849][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.750784][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.757963][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.767141][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.774205][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.787323][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.800480][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.810989][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.821479][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.857445][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.873419][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.889001][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.896183][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.914454][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.928296][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.935573][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.977948][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.985064][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.996794][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.013714][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.030335][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.037423][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.074647][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.106206][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.159365][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.224551][ T3296] veth0_vlan: entered promiscuous mode [ 31.262779][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.271973][ T3296] veth1_vlan: entered promiscuous mode [ 31.279166][ T3297] veth0_vlan: entered promiscuous mode [ 31.287393][ T3297] veth1_vlan: entered promiscuous mode [ 31.311066][ T3300] veth0_vlan: entered promiscuous mode [ 31.318830][ T3300] veth1_vlan: entered promiscuous mode [ 31.344688][ T3296] veth0_macvtap: entered promiscuous mode [ 31.356587][ T3300] veth0_macvtap: entered promiscuous mode [ 31.368141][ T3296] veth1_macvtap: entered promiscuous mode [ 31.379852][ T3300] veth1_macvtap: entered promiscuous mode [ 31.390907][ T3297] veth0_macvtap: entered promiscuous mode [ 31.402537][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.412269][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.422824][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.433844][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.451532][ T3297] veth1_macvtap: entered promiscuous mode [ 31.462941][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.473601][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.484076][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.494866][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.503225][ T3296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512132][ T3296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.521131][ T3296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.529900][ T3296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.552653][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.561430][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570311][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.579075][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.590498][ T3301] veth0_vlan: entered promiscuous mode [ 31.602340][ T3305] veth0_vlan: entered promiscuous mode [ 31.608090][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.618571][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.628494][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.639030][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.650541][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.658909][ T3301] veth1_vlan: entered promiscuous mode [ 31.675640][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.677488][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.677505][ T29] audit: type=1400 audit(1733781482.617:110): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.VQnFOF/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.686227][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.686241][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.697051][ T29] audit: type=1400 audit(1733781482.637:111): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.716569][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.717847][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.726408][ T29] audit: type=1400 audit(1733781482.637:112): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.VQnFOF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.801445][ T29] audit: type=1400 audit(1733781482.637:113): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.823328][ T29] audit: type=1400 audit(1733781482.637:114): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.VQnFOF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.849964][ T29] audit: type=1400 audit(1733781482.637:115): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.VQnFOF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.877389][ T29] audit: type=1400 audit(1733781482.637:116): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.898250][ T3305] veth1_vlan: entered promiscuous mode [ 31.899521][ T29] audit: type=1400 audit(1733781482.677:117): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.924052][ T3305] veth0_macvtap: entered promiscuous mode [ 31.937641][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.946410][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.955265][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.964035][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.975672][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.993447][ T3301] veth0_macvtap: entered promiscuous mode [ 32.001298][ T3301] veth1_macvtap: entered promiscuous mode [ 32.021932][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.032419][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.042264][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.052716][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.062538][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.073010][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.083555][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.092913][ T3305] veth1_macvtap: entered promiscuous mode [ 32.105269][ T29] audit: type=1400 audit(1733781483.047:118): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.121724][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.129428][ T29] audit: type=1400 audit(1733781483.047:119): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.139943][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.173800][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.184320][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.194228][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.204728][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.214596][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.225093][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.239838][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.250788][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.261280][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.271127][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.281618][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.291528][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.302057][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.313065][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.320708][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.331233][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.341091][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.351582][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.361474][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.371954][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.381794][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.392319][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.402874][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.411760][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.420584][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.429334][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.438050][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.463656][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.472478][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.474365][ T3449] loop2: detected capacity change from 0 to 512 [ 32.481206][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.496181][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.531875][ T3449] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.615416][ T3449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.631506][ T3463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 32.664325][ T3466] xt_hashlimit: max too large, truncated to 1048576 [ 32.722390][ T3449] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.8: corrupted inode contents [ 32.736007][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.738526][ T3480] loop4: detected capacity change from 0 to 512 [ 32.745663][ T3475] syz.3.4[3475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.752257][ T3475] syz.3.4[3475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.760470][ T3480] ======================================================= [ 32.760470][ T3480] WARNING: The mand mount option has been deprecated and [ 32.760470][ T3480] and is ignored by this kernel. Remove the mand [ 32.760470][ T3480] option from the mount to silence this warning. [ 32.760470][ T3480] ======================================================= [ 32.768305][ T3475] syz.3.4[3475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.775665][ T3449] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.8: mark_inode_dirty error [ 32.837850][ T3484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.842380][ T3480] EXT4-fs: dax option not supported [ 32.900543][ T3449] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.8: corrupted inode contents [ 32.918255][ T3449] syz.2.8 (3449) used greatest stack depth: 10376 bytes left [ 32.934389][ T3488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 32.935972][ T3490] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 32.943330][ T3488] tipc: Started in network mode [ 32.943352][ T3488] tipc: Node identity , cluster identity 4711 [ 32.944634][ T3488] netlink: 'syz.4.15': attribute type 10 has an invalid length. [ 32.969089][ T3488] veth0_macvtap: left promiscuous mode [ 32.976204][ T3488] veth0_macvtap: entered promiscuous mode [ 32.983185][ T3488] team0: Device macvtap0 failed to register rx_handler [ 32.983268][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.999364][ T3488] veth0_macvtap: left promiscuous mode [ 33.105478][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 33.139603][ T3495] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.154479][ T3511] loop1: detected capacity change from 0 to 512 [ 33.173446][ T3511] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 33.194510][ T3495] syz.2.18 (3495) used greatest stack depth: 10312 bytes left [ 33.309779][ T3525] devpts: called with bogus options [ 33.503677][ T3518] Set syz1 is full, maxelem 65536 reached [ 33.631542][ T3547] loop4: detected capacity change from 0 to 512 [ 33.640794][ T3547] EXT4-fs: inline encryption not supported [ 33.682284][ T3547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.695480][ T3547] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.707345][ T3547] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.33: corrupted inode contents [ 33.727158][ T3547] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.33: mark_inode_dirty error [ 33.746222][ T3547] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.33: corrupted inode contents [ 33.762352][ T3555] FAULT_INJECTION: forcing a failure. [ 33.762352][ T3555] name failslab, interval 1, probability 0, space 0, times 0 [ 33.775125][ T3555] CPU: 1 UID: 0 PID: 3555 Comm: syz.4.33 Not tainted 6.13.0-rc2-syzkaller #0 [ 33.783918][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.793245][ T3557] loop0: detected capacity change from 0 to 512 [ 33.794131][ T3555] Call Trace: [ 33.794158][ T3555] [ 33.794167][ T3555] dump_stack_lvl+0xf2/0x150 [ 33.801148][ T3557] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 33.803983][ T3555] dump_stack+0x15/0x1a [ 33.804025][ T3555] should_fail_ex+0x223/0x230 [ 33.804055][ T3555] should_failslab+0x8f/0xb0 [ 33.833531][ T3555] kmem_cache_alloc_noprof+0x52/0x320 [ 33.838996][ T3555] ? getname_flags+0x81/0x3b0 [ 33.843738][ T3555] getname_flags+0x81/0x3b0 [ 33.848282][ T3555] getname+0x17/0x20 [ 33.852204][ T3555] do_sys_openat2+0x67/0x120 [ 33.856885][ T3555] __x64_sys_open+0xe6/0x110 [ 33.861696][ T3555] x64_sys_call+0x13e1/0x2dc0 [ 33.866449][ T3555] do_syscall_64+0xc9/0x1c0 [ 33.870980][ T3555] ? clear_bhb_loop+0x55/0xb0 [ 33.875672][ T3555] ? clear_bhb_loop+0x55/0xb0 [ 33.880374][ T3555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.886310][ T3555] RIP: 0033:0x7f4a2da0fed9 [ 33.890747][ T3555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.910463][ T3555] RSP: 002b:00007f4a2c066058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 33.918982][ T3555] RAX: ffffffffffffffda RBX: 00007f4a2dbd6080 RCX: 00007f4a2da0fed9 [ 33.927107][ T3555] RDX: 0000000000000000 RSI: 0000000000181042 RDI: 0000000020000040 [ 33.935105][ T3555] RBP: 00007f4a2c0660a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.943177][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.951152][ T3555] R13: 0000000000000001 R14: 00007f4a2dbd6080 R15: 00007fff101cb1f8 [ 33.959428][ T3555] [ 34.008432][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.064276][ T3572] loop3: detected capacity change from 0 to 512 [ 34.093210][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.106628][ T3572] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.147568][ T3583] loop1: detected capacity change from 0 to 2048 [ 34.203041][ T3572] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.43: corrupted inode contents [ 34.203508][ T3583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.228001][ T3572] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.43: mark_inode_dirty error [ 34.267846][ T3572] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.43: corrupted inode contents [ 34.291005][ T3572] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.43: mark_inode_dirty error [ 34.324605][ T3572] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.43: mark inode dirty (error -117) [ 34.346750][ T3572] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 34.405092][ T3598] loop2: detected capacity change from 0 to 512 [ 34.461562][ T3598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.502538][ T3598] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.509594][ T3580] Set syz1 is full, maxelem 65536 reached [ 34.524968][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.566659][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.572422][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 34.586060][ T3600] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.699815][ T3614] syz.4.54 (3614) used greatest stack depth: 9616 bytes left [ 34.730835][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 34.827953][ T3621] loop4: detected capacity change from 0 to 2048 [ 34.838606][ T3627] FAULT_INJECTION: forcing a failure. [ 34.838606][ T3627] name failslab, interval 1, probability 0, space 0, times 0 [ 34.851518][ T3627] CPU: 1 UID: 0 PID: 3627 Comm: syz.2.60 Not tainted 6.13.0-rc2-syzkaller #0 [ 34.860320][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.870472][ T3627] Call Trace: [ 34.873777][ T3627] [ 34.876743][ T3627] dump_stack_lvl+0xf2/0x150 [ 34.881393][ T3627] dump_stack+0x15/0x1a [ 34.885679][ T3627] should_fail_ex+0x223/0x230 [ 34.890381][ T3627] should_failslab+0x8f/0xb0 [ 34.895036][ T3627] kmem_cache_alloc_noprof+0x52/0x320 [ 34.900773][ T3627] ? radix_tree_node_alloc+0x8b/0x1e0 [ 34.906229][ T3627] radix_tree_node_alloc+0x8b/0x1e0 [ 34.911525][ T3627] idr_get_free+0x1f5/0x550 [ 34.916169][ T3627] idr_alloc_u32+0xcb/0x180 [ 34.920713][ T3627] tcf_idr_check_alloc+0x171/0x270 [ 34.925972][ T3627] tcf_ct_init+0x233/0xe60 [ 34.930421][ T3627] ? __nla_validate_parse+0x1796/0x1e30 [ 34.936249][ T3627] ? ___slab_alloc+0x2b7/0x980 [ 34.941449][ T3627] ? tcf_action_init_1+0x121/0x490 [ 34.946718][ T3627] tcf_action_init_1+0x339/0x490 [ 34.952096][ T3627] tcf_action_init+0x1cc/0x610 [ 34.957013][ T3627] tc_ctl_action+0x292/0x840 [ 34.961900][ T3627] ? __pfx_tc_ctl_action+0x10/0x10 [ 34.967046][ T3627] rtnetlink_rcv_msg+0x6aa/0x710 [ 34.972055][ T3627] ? ref_tracker_free+0x3a5/0x410 [ 34.977184][ T3627] ? __dev_queue_xmit+0x186/0x2090 [ 34.982672][ T3627] netlink_rcv_skb+0x12c/0x230 [ 34.987721][ T3627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 34.993219][ T3627] rtnetlink_rcv+0x1c/0x30 [ 34.997764][ T3627] netlink_unicast+0x599/0x670 [ 35.002761][ T3627] netlink_sendmsg+0x5cc/0x6e0 [ 35.007577][ T3627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.012960][ T3627] __sock_sendmsg+0x140/0x180 [ 35.017803][ T3627] ____sys_sendmsg+0x312/0x410 [ 35.023178][ T3627] __sys_sendmsg+0x19d/0x230 [ 35.027832][ T3627] __x64_sys_sendmsg+0x46/0x50 [ 35.032687][ T3627] x64_sys_call+0x2734/0x2dc0 [ 35.037466][ T3627] do_syscall_64+0xc9/0x1c0 [ 35.041980][ T3627] ? clear_bhb_loop+0x55/0xb0 [ 35.046669][ T3627] ? clear_bhb_loop+0x55/0xb0 [ 35.051372][ T3627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.057345][ T3627] RIP: 0033:0x7fc9582afed9 [ 35.061862][ T3627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.081574][ T3627] RSP: 002b:00007fc956927058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.090190][ T3627] RAX: ffffffffffffffda RBX: 00007fc958475fa0 RCX: 00007fc9582afed9 [ 35.098622][ T3627] RDX: 0000000010000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 35.106698][ T3627] RBP: 00007fc9569270a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.114681][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.122795][ T3627] R13: 0000000000000000 R14: 00007fc958475fa0 R15: 00007ffe8a2c18f8 [ 35.131131][ T3627] [ 35.180403][ T3621] loop4: p1 < > p4 [ 35.185337][ T3621] loop4: p4 size 8388608 extends beyond EOD, truncated [ 35.221988][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.249076][ T3633] loop0: detected capacity change from 0 to 512 [ 35.261076][ T3633] loop0: detected capacity change from 0 to 512 [ 35.278259][ T3630] loop2: detected capacity change from 0 to 512 [ 35.305281][ T3633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.329269][ T3633] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.340737][ T3646] loop3: detected capacity change from 0 to 512 [ 35.353313][ T3630] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.376200][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.392060][ T3646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.392986][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 35.413376][ T3654] Process accounting resumed [ 35.415195][ T3630] EXT4-fs (loop2): mount failed [ 35.424743][ T3646] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.448808][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.521437][ T3666] loop4: detected capacity change from 0 to 8192 [ 35.532928][ T3666] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 35.565123][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.714037][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.722991][ T3676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.882239][ T3695] netlink: 'syz.4.79': attribute type 4 has an invalid length. [ 35.889954][ T3695] netlink: 152 bytes leftover after parsing attributes in process `syz.4.79'. [ 35.942510][ T3699] loop0: detected capacity change from 0 to 512 [ 35.978527][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.992506][ T3699] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.057418][ T3706] loop2: detected capacity change from 0 to 4096 [ 36.064330][ T3706] ext4: Unknown parameter 'smackfshat' [ 36.123141][ T3709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.84'. [ 36.145122][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.180581][ T3714] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.212456][ T3714] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.234712][ T3714] bridge0: port 3(bond0) entered blocking state [ 36.241192][ T3714] bridge0: port 3(bond0) entered disabled state [ 36.249482][ T3714] bond0: entered allmulticast mode [ 36.254647][ T3714] bond_slave_0: entered allmulticast mode [ 36.260461][ T3714] bond_slave_1: entered allmulticast mode [ 36.293679][ T3714] bond0: entered promiscuous mode [ 36.298774][ T3714] bond_slave_0: entered promiscuous mode [ 36.304635][ T3714] bond_slave_1: entered promiscuous mode [ 36.317909][ T3714] bridge0: port 3(bond0) entered blocking state [ 36.324240][ T3714] bridge0: port 3(bond0) entered forwarding state [ 36.384105][ T3727] mmap: syz.4.90 (3727) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.448515][ T3727] IPVS: stopping master sync thread 3739 ... [ 36.608006][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 36.672614][ T3760] loop4: detected capacity change from 0 to 128 [ 36.692039][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 36.692057][ T29] audit: type=1326 audit(1733781487.637:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd131fed9 code=0x7ffc0000 [ 36.726086][ T3766] FAULT_INJECTION: forcing a failure. [ 36.726086][ T3766] name failslab, interval 1, probability 0, space 0, times 0 [ 36.738802][ T3766] CPU: 0 UID: 0 PID: 3766 Comm: syz.3.102 Not tainted 6.13.0-rc2-syzkaller #0 [ 36.747687][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.757755][ T3766] Call Trace: [ 36.761048][ T3766] [ 36.763992][ T3766] dump_stack_lvl+0xf2/0x150 [ 36.768619][ T3766] dump_stack+0x15/0x1a [ 36.772857][ T3766] should_fail_ex+0x223/0x230 [ 36.777604][ T3766] should_failslab+0x8f/0xb0 [ 36.782374][ T3766] kmem_cache_alloc_noprof+0x52/0x320 [ 36.787772][ T3766] ? audit_log_start+0x34c/0x6b0 [ 36.792737][ T3766] audit_log_start+0x34c/0x6b0 [ 36.797522][ T3766] audit_seccomp+0x4b/0x130 [ 36.802059][ T3766] __seccomp_filter+0x6fa/0x1180 [ 36.807060][ T3766] ? notify_change+0x8b0/0x8e0 [ 36.811902][ T3766] ? security_inode_need_killpriv+0x1c/0x70 [ 36.817900][ T3766] ? up_write+0x30/0xf0 [ 36.822113][ T3766] __secure_computing+0x9f/0x1c0 [ 36.827190][ T3766] syscall_trace_enter+0xd1/0x1f0 [ 36.832240][ T3766] ? fpregs_assert_state_consistent+0x83/0xa0 [ 36.838434][ T3766] do_syscall_64+0xaa/0x1c0 [ 36.842963][ T3766] ? clear_bhb_loop+0x55/0xb0 [ 36.847655][ T3766] ? clear_bhb_loop+0x55/0xb0 [ 36.852347][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.858348][ T3766] RIP: 0033:0x7f5cd131e8ec [ 36.862782][ T3766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 36.882406][ T3766] RSP: 002b:00007f5ccf997050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.890876][ T3766] RAX: ffffffffffffffda RBX: 00007f5cd14e5fa0 RCX: 00007f5cd131e8ec [ 36.898856][ T3766] RDX: 000000000000000f RSI: 00007f5ccf9970b0 RDI: 0000000000000007 [ 36.906873][ T3766] RBP: 00007f5ccf9970a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.914938][ T3766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.922945][ T3766] R13: 0000000000000000 R14: 00007f5cd14e5fa0 R15: 00007ffd1c6f5248 [ 36.930933][ T3766] [ 36.934140][ T3766] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 36.943046][ T3766] audit: out of memory in audit_log_start [ 36.949040][ T29] audit: type=1326 audit(1733781487.667:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cd131fed9 code=0x7ffc0000 [ 36.972454][ T29] audit: type=1326 audit(1733781487.667:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd131fed9 code=0x7ffc0000 [ 36.995801][ T29] audit: type=1326 audit(1733781487.667:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd131fed9 code=0x7ffc0000 [ 37.019537][ T29] audit: type=1326 audit(1733781487.667:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cd131e840 code=0x7ffc0000 [ 37.043341][ T29] audit: type=1326 audit(1733781487.667:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cd131e98f code=0x7ffc0000 [ 37.066539][ T29] audit: type=1326 audit(1733781487.667:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f5cd131fed9 code=0x7ffc0000 [ 37.091130][ T29] audit: type=1326 audit(1733781487.897:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cd131e98f code=0x7ffc0000 [ 37.155593][ T3760] syz.4.99: attempt to access beyond end of device [ 37.155593][ T3760] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 37.174839][ T3760] syz.4.99: attempt to access beyond end of device [ 37.174839][ T3760] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 37.188438][ T3759] syz.4.99: attempt to access beyond end of device [ 37.188438][ T3759] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 37.201503][ T3759] Buffer I/O error on dev loop4, logical block 177, async page read [ 37.210666][ T3759] syz.4.99: attempt to access beyond end of device [ 37.210666][ T3759] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 37.223902][ T3759] Buffer I/O error on dev loop4, logical block 178, async page read [ 37.232445][ T3759] syz.4.99: attempt to access beyond end of device [ 37.232445][ T3759] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 37.245463][ T3759] Buffer I/O error on dev loop4, logical block 179, async page read [ 37.254999][ T3759] syz.4.99: attempt to access beyond end of device [ 37.254999][ T3759] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 37.268388][ T3759] Buffer I/O error on dev loop4, logical block 180, async page read [ 37.281169][ T3759] syz.4.99: attempt to access beyond end of device [ 37.281169][ T3759] loop4: rw=0, sector=181, nr_sectors = 1 limit=128 [ 37.294417][ T3759] Buffer I/O error on dev loop4, logical block 181, async page read [ 37.304848][ T3759] syz.4.99: attempt to access beyond end of device [ 37.304848][ T3759] loop4: rw=0, sector=182, nr_sectors = 1 limit=128 [ 37.317868][ T3759] Buffer I/O error on dev loop4, logical block 182, async page read [ 37.327456][ T3759] syz.4.99: attempt to access beyond end of device [ 37.327456][ T3759] loop4: rw=0, sector=183, nr_sectors = 1 limit=128 [ 37.340645][ T3759] Buffer I/O error on dev loop4, logical block 183, async page read [ 37.348761][ T3759] syz.4.99: attempt to access beyond end of device [ 37.348761][ T3759] loop4: rw=0, sector=184, nr_sectors = 1 limit=128 [ 37.362045][ T3759] Buffer I/O error on dev loop4, logical block 184, async page read [ 37.371700][ T3759] Buffer I/O error on dev loop4, logical block 177, async page read [ 37.379906][ T3759] Buffer I/O error on dev loop4, logical block 178, async page read [ 37.498051][ T3780] team0 (unregistering): Port device team_slave_0 removed [ 37.507310][ T3780] team0 (unregistering): Port device team_slave_1 removed [ 37.890163][ T3786] Set syz1 is full, maxelem 65536 reached [ 37.925369][ T3794] loop4: detected capacity change from 0 to 512 [ 37.928799][ T3796] __nla_validate_parse: 1 callbacks suppressed [ 37.928817][ T3796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 37.950219][ T3797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.951222][ T3794] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.973022][ T3794] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 37.983356][ T3794] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.114: Corrupt directory, running e2fsck is recommended [ 37.999078][ T3794] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 38.007389][ T3794] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.114: corrupted in-inode xattr: invalid ea_ino [ 38.021227][ T3794] EXT4-fs (loop4): Remounting filesystem read-only [ 38.028476][ T3794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.041108][ T3794] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 38.048084][ T3794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.067584][ T3797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.100424][ T3805] loop0: detected capacity change from 0 to 128 [ 38.112700][ T3797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.130453][ T3810] loop0: detected capacity change from 0 to 128 [ 38.139683][ T3811] tmpfs: Unsupported parameter 'huge' [ 38.159274][ T3811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.172927][ T3797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.238276][ T3797] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.250143][ T3797] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.267302][ T3797] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.288950][ T3797] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.426129][ T3833] syz.2.127[3833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.426271][ T3833] syz.2.127[3833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.437947][ T3833] syz.2.127[3833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.476584][ T3833] loop2: detected capacity change from 0 to 4096 [ 38.499409][ T3833] EXT4-fs: Ignoring removed nobh option [ 38.505058][ T3833] EXT4-fs: Ignoring removed i_version option [ 38.534700][ T3833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.549377][ T3833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.747774][ T3829] Set syz1 is full, maxelem 65536 reached [ 38.796927][ T3842] loop1: detected capacity change from 0 to 1024 [ 38.801072][ T3842] EXT4-fs: Ignoring removed nobh option [ 38.809101][ T3842] EXT4-fs: Ignoring removed orlov option [ 38.821384][ T3842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.836583][ T3842] FAULT_INJECTION: forcing a failure. [ 38.836583][ T3842] name failslab, interval 1, probability 0, space 0, times 0 [ 38.836613][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.1.129 Not tainted 6.13.0-rc2-syzkaller #0 [ 38.836697][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.836713][ T3842] Call Trace: [ 38.836721][ T3842] [ 38.836744][ T3842] dump_stack_lvl+0xf2/0x150 [ 38.836788][ T3842] dump_stack+0x15/0x1a [ 38.836825][ T3842] should_fail_ex+0x223/0x230 [ 38.836857][ T3842] ? __iomap_dio_rw+0x144/0x1110 [ 38.836950][ T3842] should_failslab+0x8f/0xb0 [ 38.836982][ T3842] __kmalloc_cache_noprof+0x4e/0x320 [ 38.837014][ T3842] __iomap_dio_rw+0x144/0x1110 [ 38.837110][ T3842] ? should_fail_ex+0x31/0x230 [ 38.837139][ T3842] ? __rcu_read_unlock+0x4e/0x70 [ 38.837178][ T3842] ? ext4_xattr_security_get+0x32/0x40 [ 38.837223][ T3842] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 38.929436][ T3842] ? __vfs_getxattr+0x29f/0x2b0 [ 38.929536][ T3842] iomap_dio_rw+0x40/0x90 [ 38.938761][ T3842] ext4_file_write_iter+0xb71/0xf20 [ 38.944063][ T3842] do_iter_readv_writev+0x394/0x450 [ 38.944160][ T3842] vfs_writev+0x2d4/0x880 [ 38.944187][ T3842] ? proc_fail_nth_write+0x12a/0x150 [ 38.944284][ T3842] __se_sys_pwritev2+0x100/0x1c0 [ 38.944324][ T3842] __x64_sys_pwritev2+0x78/0x90 [ 38.944357][ T3842] x64_sys_call+0x2afe/0x2dc0 [ 38.944384][ T3842] do_syscall_64+0xc9/0x1c0 [ 38.944481][ T3842] ? clear_bhb_loop+0x55/0xb0 [ 38.944517][ T3842] ? clear_bhb_loop+0x55/0xb0 [ 38.944541][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.944583][ T3842] RIP: 0033:0x7f24de8efed9 [ 38.944602][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.944628][ T3842] RSP: 002b:00007f24dcf67058 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 38.944652][ T3842] RAX: ffffffffffffffda RBX: 00007f24deab5fa0 RCX: 00007f24de8efed9 [ 38.944668][ T3842] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000007 [ 38.944684][ T3842] RBP: 00007f24dcf670a0 R08: 0000000000000000 R09: 0000000000000003 [ 38.944699][ T3842] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 38.944713][ T3842] R13: 0000000000000000 R14: 00007f24deab5fa0 R15: 00007fff53140428 [ 38.944732][ T3842] [ 38.980615][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.018526][ T3850] loop1: detected capacity change from 0 to 128 [ 39.031322][ T3852] loop3: detected capacity change from 0 to 512 [ 39.050287][ T3852] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.133: corrupted in-inode xattr: invalid ea_ino [ 39.050538][ T3852] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.133: couldn't read orphan inode 15 (err -117) [ 39.051020][ T3852] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.051529][ T3852] FAULT_INJECTION: forcing a failure. [ 39.051529][ T3852] name failslab, interval 1, probability 0, space 0, times 0 [ 39.051557][ T3852] CPU: 0 UID: 0 PID: 3852 Comm: syz.3.133 Not tainted 6.13.0-rc2-syzkaller #0 [ 39.051587][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.051603][ T3852] Call Trace: [ 39.051611][ T3852] [ 39.051620][ T3852] dump_stack_lvl+0xf2/0x150 [ 39.051713][ T3852] dump_stack+0x15/0x1a [ 39.051752][ T3852] should_fail_ex+0x223/0x230 [ 39.051784][ T3852] should_failslab+0x8f/0xb0 [ 39.051848][ T3852] kmem_cache_alloc_noprof+0x52/0x320 [ 39.051871][ T3852] ? security_file_alloc+0x32/0x100 [ 39.051905][ T3852] security_file_alloc+0x32/0x100 [ 39.051951][ T3852] init_file+0x5b/0x1b0 [ 39.051979][ T3852] alloc_empty_file+0xea/0x200 [ 39.052005][ T3852] path_openat+0x6a/0x1fa0 [ 39.052030][ T3852] ? _parse_integer_limit+0x167/0x180 [ 39.052058][ T3852] ? _parse_integer+0x27/0x30 [ 39.052082][ T3852] ? kstrtoull+0x110/0x140 [ 39.052106][ T3852] ? kstrtouint+0x77/0xc0 [ 39.052130][ T3852] ? kstrtouint_from_user+0xb0/0xe0 [ 39.052158][ T3852] do_filp_open+0x107/0x230 [ 39.089632][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 39.091473][ T3852] do_sys_openat2+0xab/0x120 [ 39.327888][ T3852] __x64_sys_openat+0xf3/0x120 [ 39.327933][ T3852] x64_sys_call+0x2b30/0x2dc0 [ 39.327962][ T3852] do_syscall_64+0xc9/0x1c0 [ 39.327982][ T3852] ? clear_bhb_loop+0x55/0xb0 [ 39.328003][ T3852] ? clear_bhb_loop+0x55/0xb0 [ 39.328099][ T3852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.328135][ T3852] RIP: 0033:0x7f5cd131fed9 [ 39.328200][ T3852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.328219][ T3852] RSP: 002b:00007f5ccf997058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.328240][ T3852] RAX: ffffffffffffffda RBX: 00007f5cd14e5fa0 RCX: 00007f5cd131fed9 [ 39.328253][ T3852] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 39.328267][ T3852] RBP: 00007f5ccf9970a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.328344][ T3852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.328357][ T3852] R13: 0000000000000000 R14: 00007f5cd14e5fa0 R15: 00007ffd1c6f5248 [ 39.328377][ T3852] [ 39.373609][ T3301] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 39.536211][ T3870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.140'. [ 39.630204][ T3882] FAULT_INJECTION: forcing a failure. [ 39.630204][ T3882] name failslab, interval 1, probability 0, space 0, times 0 [ 39.643099][ T3882] CPU: 1 UID: 0 PID: 3882 Comm: syz.3.142 Not tainted 6.13.0-rc2-syzkaller #0 [ 39.652047][ T3882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.662124][ T3882] Call Trace: [ 39.665495][ T3882] [ 39.668510][ T3882] dump_stack_lvl+0xf2/0x150 [ 39.673207][ T3882] dump_stack+0x15/0x1a [ 39.677407][ T3882] should_fail_ex+0x223/0x230 [ 39.682117][ T3882] should_failslab+0x8f/0xb0 [ 39.686745][ T3882] kmem_cache_alloc_noprof+0x52/0x320 [ 39.692185][ T3882] ? security_inode_alloc+0x37/0x100 [ 39.697510][ T3882] security_inode_alloc+0x37/0x100 [ 39.702719][ T3882] inode_init_always_gfp+0x4a2/0x4f0 [ 39.708052][ T3882] ? __pfx_proc_alloc_inode+0x10/0x10 [ 39.713472][ T3882] alloc_inode+0x82/0x160 [ 39.717902][ T3882] new_inode+0x1e/0x100 [ 39.719463][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 39.722134][ T3882] proc_pid_make_inode+0x1d/0xd0 [ 39.722210][ T3882] proc_map_files_instantiate+0x74/0x120 [ 39.731531][ T3880] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.735965][ T3882] proc_fill_cache+0x1b9/0x230 [ 39.735996][ T3882] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 39.736044][ T3882] proc_map_files_readdir+0x522/0x690 [ 39.736100][ T3882] iterate_dir+0x11d/0x310 [ 39.736147][ T3882] __se_sys_getdents64+0x87/0x1a0 [ 39.777159][ T3882] ? __pfx_filldir64+0x10/0x10 [ 39.781969][ T3882] __x64_sys_getdents64+0x43/0x50 [ 39.787015][ T3882] x64_sys_call+0x2d24/0x2dc0 [ 39.791720][ T3882] do_syscall_64+0xc9/0x1c0 [ 39.796234][ T3882] ? clear_bhb_loop+0x55/0xb0 [ 39.800958][ T3882] ? clear_bhb_loop+0x55/0xb0 [ 39.805667][ T3882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.811722][ T3882] RIP: 0033:0x7f5cd131fed9 [ 39.816193][ T3882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.835809][ T3882] RSP: 002b:00007f5ccf997058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 39.844222][ T3882] RAX: ffffffffffffffda RBX: 00007f5cd14e5fa0 RCX: 00007f5cd131fed9 [ 39.852217][ T3882] RDX: 0000000000000ff6 RSI: 0000000020001fc0 RDI: 0000000000000007 [ 39.860194][ T3882] RBP: 00007f5ccf9970a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.868191][ T3882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.876184][ T3882] R13: 0000000000000000 R14: 00007f5cd14e5fa0 R15: 00007ffd1c6f5248 [ 39.884162][ T3882] [ 39.917275][ T3890] loop2: detected capacity change from 0 to 128 [ 40.005254][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 40.033533][ T3889] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 40.087693][ T3901] loop2: detected capacity change from 0 to 2048 [ 40.141798][ T3901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.299558][ T3901] Falling back ldisc for ttyS3. [ 40.339229][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.355588][ T3947] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 40.365206][ T3944] FAULT_INJECTION: forcing a failure. [ 40.365206][ T3944] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.378573][ T3944] CPU: 0 UID: 0 PID: 3944 Comm: syz.0.154 Not tainted 6.13.0-rc2-syzkaller #0 [ 40.387562][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.397654][ T3944] Call Trace: [ 40.400949][ T3944] [ 40.403993][ T3944] dump_stack_lvl+0xf2/0x150 [ 40.408666][ T3944] dump_stack+0x15/0x1a [ 40.412938][ T3944] should_fail_ex+0x223/0x230 [ 40.417653][ T3944] should_fail_alloc_page+0xfd/0x110 [ 40.423030][ T3944] __alloc_pages_noprof+0x109/0x340 [ 40.428276][ T3944] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 40.433728][ T3944] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 40.439117][ T3944] do_wp_page+0x64b/0x2340 [ 40.443603][ T3944] ? __rcu_read_lock+0x36/0x50 [ 40.448384][ T3944] handle_mm_fault+0xc63/0x2ac0 [ 40.453321][ T3944] exc_page_fault+0x3b9/0x650 [ 40.458181][ T3944] asm_exc_page_fault+0x26/0x30 [ 40.463052][ T3944] RIP: 0033:0x7f0c8aff1b63 [ 40.467514][ T3944] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 40.487129][ T3944] RSP: 002b:00007f0c897a64c0 EFLAGS: 00010206 [ 40.493223][ T3944] RAX: 0000000000003c00 RBX: 00007f0c897a6560 RCX: 00007f0c81387000 [ 40.501202][ T3944] RDX: 00007f0c897a6700 RSI: 0000000000000007 RDI: 00007f0c897a6600 [ 40.509252][ T3944] RBP: 000000000000004a R08: 0000000000000009 R09: 00000000000001b1 [ 40.517286][ T3944] R10: 00000000000001ba R11: 00007f0c897a6560 R12: 0000000000000001 [ 40.525269][ T3944] R13: 00007f0c8b1b8720 R14: 00000000000000c0 R15: 00007f0c897a6600 [ 40.533253][ T3944] [ 40.536451][ T3944] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 40.546977][ T3949] loop3: detected capacity change from 0 to 128 [ 40.588119][ T3953] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 40.600720][ T3944] loop0: detected capacity change from 0 to 1024 [ 40.607621][ T3953] syz.2.155 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.629095][ T3944] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.154: Failed to acquire dquot type 0 [ 40.655443][ T3944] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.674895][ T3944] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.154: corrupted inode contents [ 40.687713][ T3944] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.154: mark_inode_dirty error [ 40.700956][ T3944] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.154: corrupted inode contents [ 40.713269][ T3944] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.154: mark_inode_dirty error [ 40.726111][ T3944] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.154: corrupted inode contents [ 40.738329][ T3944] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 40.748760][ T3944] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.154: corrupted inode contents [ 40.764633][ T3944] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.154: mark_inode_dirty error [ 40.777271][ T3944] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 40.801956][ T3944] EXT4-fs (loop0): 1 truncate cleaned up [ 40.808465][ T3944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.856520][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.918418][ T3965] syzkaller0: entered promiscuous mode [ 40.924043][ T3965] syzkaller0: entered allmulticast mode [ 40.970540][ T3971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.166'. [ 41.008850][ T3982] syzkaller1: entered promiscuous mode [ 41.014471][ T3982] syzkaller1: entered allmulticast mode [ 41.061098][ T3988] loop2: detected capacity change from 0 to 128 [ 41.062709][ T3986] pim6reg: entered allmulticast mode [ 41.076213][ T3986] [3986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.076975][ T3986] [3986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.091133][ T3986] [3986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.097517][ T3990] netlink: 'syz.0.171': attribute type 9 has an invalid length. [ 41.113760][ T3986] pim6reg: left allmulticast mode [ 41.281666][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 41.291394][ T4005] FAULT_INJECTION: forcing a failure. [ 41.291394][ T4005] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.297491][ T3998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.304504][ T4005] CPU: 0 UID: 0 PID: 4005 Comm: GPL Not tainted 6.13.0-rc2-syzkaller #0 [ 41.322353][ T4005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.322372][ T4005] Call Trace: [ 41.322380][ T4005] [ 41.322389][ T4005] dump_stack_lvl+0xf2/0x150 [ 41.343338][ T4005] dump_stack+0x15/0x1a [ 41.347562][ T4005] should_fail_ex+0x223/0x230 [ 41.352361][ T4005] should_fail+0xb/0x10 [ 41.356617][ T4005] should_fail_usercopy+0x1a/0x20 [ 41.361680][ T4005] _copy_to_user+0x20/0xa0 [ 41.366123][ T4005] simple_read_from_buffer+0xa0/0x110 [ 41.371593][ T4005] proc_fail_nth_read+0xf9/0x140 [ 41.376676][ T4005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.382382][ T4005] vfs_read+0x1a2/0x700 [ 41.382414][ T4005] ? __rcu_read_unlock+0x4e/0x70 [ 41.391630][ T4005] ? __fget_files+0x17c/0x1c0 [ 41.396372][ T4005] ksys_read+0xe8/0x1b0 [ 41.400589][ T4005] __x64_sys_read+0x42/0x50 [ 41.405144][ T4005] x64_sys_call+0x2874/0x2dc0 [ 41.409916][ T4005] do_syscall_64+0xc9/0x1c0 [ 41.414434][ T4005] ? clear_bhb_loop+0x55/0xb0 [ 41.419182][ T4005] ? clear_bhb_loop+0x55/0xb0 [ 41.423885][ T4005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.429924][ T4005] RIP: 0033:0x7f24de8ee8ec [ 41.434372][ T4005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.434399][ T4005] RSP: 002b:00007f24dcf67050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.454032][ T4005] RAX: ffffffffffffffda RBX: 00007f24deab5fa0 RCX: 00007f24de8ee8ec [ 41.454051][ T4005] RDX: 000000000000000f RSI: 00007f24dcf670b0 RDI: 0000000000000005 [ 41.478443][ T4005] RBP: 00007f24dcf670a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.478464][ T4005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.494501][ T4005] R13: 0000000000000000 R14: 00007f24deab5fa0 R15: 00007fff53140428 [ 41.494531][ T4005] [ 41.577354][ T4013] loop3: detected capacity change from 0 to 512 [ 41.757383][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 41.757400][ T29] audit: type=1400 audit(1733781492.697:686): avc: denied { create } for pid=4037 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.841002][ T29] audit: type=1326 audit(1733781492.777:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.842661][ T4044] xt_NFQUEUE: number of total queues is 0 [ 41.864276][ T29] audit: type=1326 audit(1733781492.777:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.864313][ T29] audit: type=1326 audit(1733781492.777:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.918468][ T29] audit: type=1326 audit(1733781492.777:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.918564][ T29] audit: type=1326 audit(1733781492.777:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.918595][ T29] audit: type=1326 audit(1733781492.777:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.918701][ T29] audit: type=1326 audit(1733781492.777:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.918728][ T29] audit: type=1326 audit(1733781492.777:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 41.918754][ T29] audit: type=1326 audit(1733781492.777:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2da0fed9 code=0x7ffc0000 [ 42.013712][ T4047] loop1: detected capacity change from 0 to 2048 [ 42.021646][ T4058] loop4: detected capacity change from 0 to 512 [ 42.166150][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.195617][ T4058] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.216671][ T4073] loop1: detected capacity change from 0 to 512 [ 42.225783][ T4073] ext4: Unknown parameter 'euid' [ 42.311754][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.413948][ T4098] loop0: detected capacity change from 0 to 512 [ 42.420859][ T4098] EXT4-fs: Ignoring removed orlov option [ 42.437180][ T4098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 42.451443][ T4098] EXT4-fs (loop0): too many log groups per flexible block group [ 42.459215][ T4098] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 42.473001][ T4098] EXT4-fs (loop0): mount failed [ 42.512855][ T4108] loop2: detected capacity change from 0 to 128 [ 42.545898][ T4108] bio_check_eod: 1346 callbacks suppressed [ 42.545916][ T4108] syz.2.203: attempt to access beyond end of device [ 42.545916][ T4108] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 42.572911][ T4108] syz.2.203: attempt to access beyond end of device [ 42.572911][ T4108] loop2: rw=0, sector=177, nr_sectors = 1 limit=128 [ 42.587408][ T4107] syz.2.203: attempt to access beyond end of device [ 42.587408][ T4107] loop2: rw=0, sector=177, nr_sectors = 1 limit=128 [ 42.600583][ T4107] buffer_io_error: 1334 callbacks suppressed [ 42.600598][ T4107] Buffer I/O error on dev loop2, logical block 177, async page read [ 42.618952][ T4107] syz.2.203: attempt to access beyond end of device [ 42.618952][ T4107] loop2: rw=0, sector=178, nr_sectors = 1 limit=128 [ 42.632112][ T4107] Buffer I/O error on dev loop2, logical block 178, async page read [ 42.663176][ T4107] syz.2.203: attempt to access beyond end of device [ 42.663176][ T4107] loop2: rw=0, sector=179, nr_sectors = 1 limit=128 [ 42.676386][ T4107] Buffer I/O error on dev loop2, logical block 179, async page read [ 42.718025][ T4107] syz.2.203: attempt to access beyond end of device [ 42.718025][ T4107] loop2: rw=0, sector=180, nr_sectors = 1 limit=128 [ 42.731229][ T4107] Buffer I/O error on dev loop2, logical block 180, async page read [ 42.771464][ T4128] loop1: detected capacity change from 0 to 1024 [ 42.786821][ T4107] syz.2.203: attempt to access beyond end of device [ 42.786821][ T4107] loop2: rw=0, sector=181, nr_sectors = 1 limit=128 [ 42.799964][ T4107] Buffer I/O error on dev loop2, logical block 181, async page read [ 42.816905][ T4107] syz.2.203: attempt to access beyond end of device [ 42.816905][ T4107] loop2: rw=0, sector=182, nr_sectors = 1 limit=128 [ 42.830074][ T4107] Buffer I/O error on dev loop2, logical block 182, async page read [ 42.843049][ T4107] syz.2.203: attempt to access beyond end of device [ 42.843049][ T4107] loop2: rw=0, sector=183, nr_sectors = 1 limit=128 [ 42.856415][ T4107] Buffer I/O error on dev loop2, logical block 183, async page read [ 42.856724][ T4142] FAULT_INJECTION: forcing a failure. [ 42.856724][ T4142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.864617][ T4107] syz.2.203: attempt to access beyond end of device [ 42.864617][ T4107] loop2: rw=0, sector=184, nr_sectors = 1 limit=128 [ 42.877609][ T4142] CPU: 0 UID: 0 PID: 4142 Comm: syz.4.215 Not tainted 6.13.0-rc2-syzkaller #0 [ 42.890640][ T4107] Buffer I/O error on dev loop2, logical block 184, async page read [ 42.890678][ T4107] Buffer I/O error on dev loop2, logical block 177, async page read [ 42.899492][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.899509][ T4142] Call Trace: [ 42.899516][ T4142] [ 42.899526][ T4142] dump_stack_lvl+0xf2/0x150 [ 42.907581][ T4107] Buffer I/O error on dev loop2, logical block 178, async page read [ 42.915436][ T4142] dump_stack+0x15/0x1a [ 42.915477][ T4142] should_fail_ex+0x223/0x230 [ 42.915504][ T4142] should_fail+0xb/0x10 [ 42.939320][ T4128] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.209: Failed to acquire dquot type 0 [ 42.944348][ T4142] should_fail_usercopy+0x1a/0x20 [ 42.956799][ T4128] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, [ 42.957429][ T4142] _copy_from_user+0x1e/0xb0 [ 42.968569][ T4128] inode 13: [ 42.973532][ T4142] copy_from_sockptr_offset+0x6b/0xb0 [ 42.973572][ T4142] do_ipt_set_ctl+0x69b/0x8b0 [ 42.981136][ T4128] block 144: [ 42.985726][ T4142] nf_setsockopt+0x195/0x1b0 [ 42.988920][ T4128] freeing already freed block (bit 9); block bitmap corrupt. [ 42.994277][ T4142] ip_setsockopt+0xea/0x100 [ 43.000013][ T4128] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.209: corrupted inode contents [ 43.002160][ T4142] udp_setsockopt+0x95/0xb0 [ 43.007335][ T4128] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.209: mark_inode_dirty error [ 43.014179][ T4142] sock_common_setsockopt+0x64/0x80 [ 43.014223][ T4142] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 43.021136][ T4128] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.209: corrupted inode contents [ 43.030447][ T4142] __sys_setsockopt+0x187/0x200 [ 43.030479][ T4142] __x64_sys_setsockopt+0x66/0x80 [ 43.030508][ T4142] x64_sys_call+0x282e/0x2dc0 [ 43.035228][ T4128] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.209: mark_inode_dirty error [ 43.046193][ T4142] do_syscall_64+0xc9/0x1c0 [ 43.046242][ T4142] ? clear_bhb_loop+0x55/0xb0 [ 43.054509][ T4128] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.209: corrupted inode contents [ 43.057309][ T4142] ? clear_bhb_loop+0x55/0xb0 [ 43.057374][ T4142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.057410][ T4142] RIP: 0033:0x7f4a2da0fed9 [ 43.070669][ T4128] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 43.073943][ T4142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.079097][ T4128] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.209: corrupted inode contents [ 43.083675][ T4142] RSP: 002b:00007f4a2c087058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.083703][ T4142] RAX: ffffffffffffffda RBX: 00007f4a2dbd5fa0 RCX: 00007f4a2da0fed9 [ 43.104515][ T4128] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.209: mark_inode_dirty error [ 43.115757][ T4142] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000006 [ 43.115778][ T4142] RBP: 00007f4a2c0870a0 R08: 0000000000000388 R09: 0000000000000000 [ 43.121977][ T4128] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 43.126465][ T4142] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.126486][ T4142] R13: 0000000000000000 R14: 00007f4a2dbd5fa0 R15: 00007fff101cb1f8 [ 43.126508][ T4142] [ 43.246083][ T4128] EXT4-fs (loop1): 1 truncate cleaned up [ 43.253433][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.318402][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.416722][ T4169] netlink: 804 bytes leftover after parsing attributes in process `+}[@'. [ 43.455658][ T4174] devpts: called with bogus options [ 43.494529][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 43.504898][ T4171] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.523709][ T4173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 43.536297][ T4173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.536764][ T4180] loop3: detected capacity change from 0 to 128 [ 43.622291][ T4184] loop4: detected capacity change from 0 to 2048 [ 43.651747][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.653086][ T4190] loop3: detected capacity change from 0 to 164 [ 43.685584][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.762401][ T4197] loop3: detected capacity change from 0 to 256 [ 43.768907][ T4195] loop0: detected capacity change from 0 to 4096 [ 43.787501][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.794872][ T4204] netlink: 'syz.4.237': attribute type 13 has an invalid length. [ 43.820504][ T4204] gretap0: refused to change device tx_queue_len [ 43.826874][ T4204] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.835756][ T4197] FAT-fs (loop3): IO charset maccyrillic not found [ 43.852394][ T4204] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 44.053947][ T4215] loop2: detected capacity change from 0 to 128 [ 44.066581][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.092652][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 44.109375][ T4210] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.213491][ T4222] loop3: detected capacity change from 0 to 128 [ 44.256985][ T4228] loop0: detected capacity change from 0 to 1024 [ 44.299762][ T4228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.330433][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 44.339355][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 44.348472][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 44.367470][ T3300] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 44.383120][ T3300] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 44.422047][ T4241] loop4: detected capacity change from 0 to 128 [ 44.445481][ T4249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.252'. [ 44.456270][ T4249] unsupported nlmsg_type 40 [ 44.463506][ T4241] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.484468][ T4241] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.541089][ T4241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.251'. [ 44.550068][ T4241] netlink: 312 bytes leftover after parsing attributes in process `syz.4.251'. [ 44.567870][ T4243] syz.3.252[4243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.567939][ T4243] syz.3.252[4243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.580565][ T4243] syz.3.252[4243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.609831][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.650848][ T4253] veth0_macvtap: left promiscuous mode [ 44.651766][ T4260] loop4: detected capacity change from 0 to 128 [ 44.658036][ T4261] Zero length message leads to an empty skb [ 44.667866][ T4260] FAT-fs (loop4): bogus number of reserved sectors [ 44.671793][ T4238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.675130][ T4260] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 44.693453][ T4260] FAT-fs (loop4): Can't find a valid FAT filesystem [ 44.712629][ T4247] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.725402][ T4258] loop3: detected capacity change from 0 to 512 [ 44.733708][ T4258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.750219][ T4260] loop4: detected capacity change from 0 to 512 [ 44.752044][ T4258] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 44.765547][ T4260] EXT4-fs: Ignoring removed nobh option [ 44.767297][ T4258] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.778689][ T4258] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 44.795922][ T4258] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 44.803052][ T4258] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.257: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 44.830629][ T4260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.841074][ T4258] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.257: couldn't read orphan inode 13 (err -117) [ 44.850515][ T4260] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.879749][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.900959][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.934919][ T3407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.953590][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.976736][ T4276] loop2: detected capacity change from 0 to 128 [ 44.993200][ T4279] ================================================================== [ 45.001315][ T4279] BUG: KCSAN: data-race in sg_new_write / sg_new_write [ 45.008185][ T4279] [ 45.010518][ T4279] write to 0xffff8881182d3319 of 1 bytes by task 4280 on cpu 1: [ 45.018160][ T4279] sg_new_write+0x88/0x8e0 [ 45.022592][ T4279] sg_write+0x28e/0x710 [ 45.026764][ T4279] vfs_write+0x281/0x920 [ 45.031026][ T4279] ksys_write+0xe8/0x1b0 [ 45.035289][ T4279] __x64_sys_write+0x42/0x50 [ 45.039900][ T4279] x64_sys_call+0x287e/0x2dc0 [ 45.044588][ T4279] do_syscall_64+0xc9/0x1c0 [ 45.049102][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.055021][ T4279] [ 45.057345][ T4279] write to 0xffff8881182d3319 of 1 bytes by task 4279 on cpu 0: [ 45.064981][ T4279] sg_new_write+0x88/0x8e0 [ 45.069411][ T4279] sg_write+0x28e/0x710 [ 45.073573][ T4279] vfs_write+0x281/0x920 [ 45.077835][ T4279] ksys_write+0xe8/0x1b0 [ 45.082093][ T4279] __x64_sys_write+0x42/0x50 [ 45.086701][ T4279] x64_sys_call+0x287e/0x2dc0 [ 45.091388][ T4279] do_syscall_64+0xc9/0x1c0 [ 45.095901][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.101817][ T4279] [ 45.104161][ T4279] value changed: 0x00 -> 0x01 [ 45.108834][ T4279] [ 45.111159][ T4279] Reported by Kernel Concurrency Sanitizer on: [ 45.117326][ T4279] CPU: 0 UID: 0 PID: 4279 Comm: syz.4.264 Not tainted 6.13.0-rc2-syzkaller #0 [ 45.126184][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.136247][ T4279] ================================================================== [ 45.146941][ T4283] loop3: detected capacity change from 0 to 512 [ 45.171339][ T4283] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.263: corrupted in-inode xattr: invalid ea_ino [ 45.185866][ T3407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.203891][ T4283] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.263: couldn't read orphan inode 15 (err -117) [ 45.218349][ T3407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.225315][ T4283] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.250953][ T4283] FAULT_INJECTION: forcing a failure. [ 45.250953][ T4283] name failslab, interval 1, probability 0, space 0, times 0 [ 45.263867][ T4283] CPU: 0 UID: 0 PID: 4283 Comm: syz.3.263 Not tainted 6.13.0-rc2-syzkaller #0 [ 45.272765][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.282943][ T4283] Call Trace: [ 45.286240][ T4283] [ 45.289186][ T4283] dump_stack_lvl+0xf2/0x150 [ 45.293910][ T4283] dump_stack+0x15/0x1a [ 45.298178][ T4283] should_fail_ex+0x223/0x230 [ 45.302956][ T4283] should_failslab+0x8f/0xb0 [ 45.307651][ T4283] kmem_cache_alloc_noprof+0x52/0x320 [ 45.308068][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 45.313062][ T4283] ? security_file_alloc+0x32/0x100 [ 45.313097][ T4283] security_file_alloc+0x32/0x100 [ 45.330106][ T4283] init_file+0x5b/0x1b0 [ 45.334290][ T4283] alloc_empty_file+0xea/0x200 [ 45.339064][ T4283] path_openat+0x6a/0x1fa0 [ 45.343527][ T4283] ? _parse_integer_limit+0x167/0x180 [ 45.348929][ T4283] ? _parse_integer+0x27/0x30 [ 45.353646][ T4283] ? kstrtoull+0x110/0x140 [ 45.358061][ T4283] ? kstrtouint+0x77/0xc0 [ 45.362391][ T4283] ? kstrtouint_from_user+0xb0/0xe0 [ 45.367630][ T4283] ? xfd_validate_state+0x46/0xf0 [ 45.372720][ T4283] do_filp_open+0x107/0x230 [ 45.377240][ T4283] do_sys_openat2+0xab/0x120 [ 45.381916][ T4283] __x64_sys_openat+0xf3/0x120 [ 45.386738][ T4283] x64_sys_call+0x2b30/0x2dc0 [ 45.391419][ T4283] do_syscall_64+0xc9/0x1c0 [ 45.395930][ T4283] ? clear_bhb_loop+0x55/0xb0 [ 45.400713][ T4283] ? clear_bhb_loop+0x55/0xb0 [ 45.405393][ T4283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.411445][ T4283] RIP: 0033:0x7f5cd131fed9 [ 45.415858][ T4283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.435609][ T4283] RSP: 002b:00007f5ccf997058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 45.444048][ T4283] RAX: ffffffffffffffda RBX: 00007f5cd14e5fa0 RCX: 00007f5cd131fed9 [ 45.452021][ T4283] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 45.460002][ T4283] RBP: 00007f5ccf9970a0 R08: 0000000000000000 R09: 0000000000000000 [ 45.468122][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.476175][ T4283] R13: 0000000000000000 R14: 00007f5cd14e5fa0 R15: 00007ffd1c6f5248 [ 45.484199][ T4283] [ 45.514579][ T3301] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 45.526797][ T3407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.557113][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.564236][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.571636][ T4266] bridge_slave_0: entered allmulticast mode [ 45.578203][ T4266] bridge_slave_0: entered promiscuous mode [ 45.584977][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.592112][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.599522][ T4266] bridge_slave_1: entered allmulticast mode [ 45.605959][ T4266] bridge_slave_1: entered promiscuous mode [ 45.623353][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.633917][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.665998][ T4266] team0: Port device team_slave_0 added [ 45.675226][ T4266] team0: Port device team_slave_1 added [ 45.686094][ T3407] bond0: left allmulticast mode [ 45.691038][ T3407] bond_slave_0: left allmulticast mode [ 45.696510][ T3407] bond_slave_1: left allmulticast mode [ 45.702025][ T3407] bond0: left promiscuous mode [ 45.706846][ T3407] bond_slave_0: left promiscuous mode [ 45.712325][ T3407] bond_slave_1: left promiscuous mode [ 45.717974][ T3407] bridge0: port 3(bond0) entered disabled state [ 45.725021][ T3407] bridge_slave_1: left allmulticast mode [ 45.732153][ T3407] bridge_slave_1: left promiscuous mode [ 45.737941][ T3407] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.745708][ T3407] bridge_slave_0: left allmulticast mode [ 45.751475][ T3407] bridge_slave_0: left promiscuous mode [ 45.757093][ T3407] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.824042][ T3407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.833819][ T3407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.843645][ T3407] bond0 (unregistering): Released all slaves [ 45.858463][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.865602][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.892255][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.903674][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.910694][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.936626][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.952126][ T3407] hsr_slave_0: left promiscuous mode [ 45.957904][ T3407] hsr_slave_1: left promiscuous mode [ 45.963681][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.971202][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.978834][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.986343][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.995518][ T3407] veth1_macvtap: left promiscuous mode [ 46.001120][ T3407] veth0_macvtap: left promiscuous mode [ 46.006727][ T3407] veth1_vlan: left promiscuous mode [ 46.012132][ T3407] veth0_vlan: left promiscuous mode [ 46.073103][ T3407] team0 (unregistering): Port device team_slave_1 removed [ 46.083327][ T3407] team0 (unregistering): Port device team_slave_0 removed [ 46.126169][ T4266] hsr_slave_0: entered promiscuous mode [ 46.133110][ T4266] hsr_slave_1: entered promiscuous mode [ 46.138969][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.146738][ T4266] Cannot create hsr debugfs directory [ 46.222422][ T4266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.232782][ T4266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.242156][ T4266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.251593][ T4266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.265963][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.273088][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.280470][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.287527][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.319856][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.332878][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.341069][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.353948][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.365049][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.372246][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.386197][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.393377][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.470386][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.605071][ T4266] veth0_vlan: entered promiscuous mode [ 46.616153][ T4266] veth1_vlan: entered promiscuous mode [ 46.634113][ T4266] veth0_macvtap: entered promiscuous mode [ 46.641513][ T4266] veth1_macvtap: entered promiscuous mode [ 46.654638][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.665141][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.675070][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.685580][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.695493][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.706105][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.715980][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.726592][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.737283][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.748533][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.759090][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.768963][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.779478][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.789466][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.799919][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.809978][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.820416][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.831236][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.841175][ T4266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.850090][ T4266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.858796][ T4266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.867608][ T4266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.892322][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 46.892344][ T29] audit: type=1400 audit(1733781497.837:1141): avc: denied { mounton } for pid=4266 comm="syz-executor" path="/root/syzkaller.PeicM6/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.923913][ T29] audit: type=1400 audit(1733781497.857:1142): avc: denied { mount } for pid=4266 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.946176][ T29] audit: type=1400 audit(1733781497.857:1143): avc: denied { mounton } for pid=4266 comm="syz-executor" path="/root/syzkaller.PeicM6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.973000][ T29] audit: type=1400 audit(1733781497.857:1144): avc: denied { mounton } for pid=4266 comm="syz-executor" path="/root/syzkaller.PeicM6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 47.001202][ T29] audit: type=1400 audit(1733781497.867:1145): avc: denied { mounton } for pid=4266 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.305095][ T29] audit: type=1400 audit(1733781499.247:1146): avc: denied { sys_chroot } for pid=4433 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 48.326604][ T29] audit: type=1400 audit(1733781499.247:1147): avc: denied { setgid } for pid=4433 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 48.347503][ T29] audit: type=1400 audit(1733781499.247:1148): avc: denied { setuid } for pid=4433 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 48.368359][ T29] audit: type=1400 audit(1733781499.247:1149): avc: denied { setrlimit } for pid=4433 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1