last executing test programs: 5.513711543s ago: executing program 0 (id=19): r0 = memfd_secret(0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchownat(r0, 0x0, 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.334660456s ago: executing program 0 (id=28): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, 0x9, 0x1}) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000001c00)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', r1, @fallback=0x33}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)='D', 0x1}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000940)="a90749", 0x3}], 0x2}}], 0x1, 0x4400c800) recvmmsg(r5, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=""/15, 0xf}, 0x1}], 0x1, 0x40000040, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r8 = getpid() sendmmsg$inet6(r6, &(0x7f0000003540)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x8, @local, 0x8cb}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="a2bb1e6a68e41c7bb8", 0x9}], 0x3, &(0x7f0000001980)=[@rthdrdstopts={{0x1030, 0x29, 0x37, {0x21, 0x202, '\x00', [@generic={0x84, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @ra={0x5, 0x2, 0xfffb}, @enc_lim={0x4, 0x1, 0xf}, @ra={0x5, 0x2, 0x3ff}]}}}, @flowinfo={{0x14}}, @hopopts={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x3d2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xb033}}, @hopopts_2292={{0x1a8, 0x29, 0x36, {0x84, 0x31, '\x00', [@pad1, @generic={0x13, 0xc0, "555a749d10135b69bf0695b16f7a911c8a1efa6b069d05fd594a3021b90cb2c8c7dc5e11652f20ae92b6448cb3e905514f5a8513e4e32ea3ba8455902c5764a32ae927b144a3c59e00cf4ade633770bcc6262af49144127966866ecb6dd4fa4cb6918d549c221dae95db119355d1fbb692d70c1bdec3151eaa827ec1b238ce0fa2a9858e28aaaa4b3cd9e4954e90fe9e95b87043eefa0dbb0fac2ded2ab38c0f3c5f1fd69fbb66ddeadc7bfd9727f8e9c5278683e0a701b56ea47fbeb14b9484"}, @ra={0x5, 0x2, 0x7}, @generic={0x1, 0x9b, "8ad86fa4672b647d5a13e44f08c8884cf5ce3020572911d12ceb5768ca99f38a74e15ab42a800c6d49496be92c9c643dc54dbc56724abc103b7dcab370cd3fb86bfa3361e94b62ed557a2caca9aa81b6abcbee4d54814f969f26621a629541342373302ebf10d555bf0e28fbb8e9781ba03ad3d0a9ca36c8ce192235b50c2086131eecd5bcd8a423aab2b5a7e4d93e3c7fbf4fe2259945904ca2d7"}, @enc_lim={0x4, 0x1, 0x6f}, @enc_lim={0x4, 0x1, 0x31}, @calipso={0x7, 0x20, {0x1, 0x6, 0xa7, 0x9, [0x3, 0xa00000000, 0x7fffffffffffffff]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r1}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x4, 0xb, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x3, 0x54, [0x400, 0x5, 0xb61e, 0x1, 0x6, 0x5942, 0x56d2, 0x2, 0x613]}}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x1ff}]}}}], 0x12d0}}, {{&(0x7f0000000780)={0xa, 0x4e23, 0xead66a47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000007c0)="a75dc7b393acc94f616d441eac1a2d0fc5eae113933f7b0faa49394e043ca1fe8b6609ed67a211832a384668796172cdec008d6ab84a585353d0590add494d2b364b8ea5ec08a8284054630d2c8dbfeb579f19d095d981eaa0c9735f549a070e063eb5122d0681017b38a77e359efb3ef2a639660877e5b842055aaa82b181332c180b6023221f0e41714b9ca8da2ed5c1e345fd606b0e8bad210cee591aa4b81b35bad3ec8b6372f0a310b9513935e661b7c4", 0xb3}, {&(0x7f0000000880)="390080c5d3346c1ff03d4cf412dc4348c4ba0c5dfde529770ef6d39d2a98df8b311ae7f8d02feb13db6b009a04517e45efadced90ff576d3bdf8267127ab9593e4e868963857cf6cd8d79239941ed1c1ecc49c2d171404d3d18285d4491f1c5d45bddad54e9ed2d69b397c0e334cfdbfdbdf4c6f", 0x74}], 0x2, &(0x7f0000003640)=[@dstopts_2292={{0x1f0, 0x29, 0x4, {0x29, 0x3a, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x8}, @generic={0x0, 0xc4, "59034d3abf0406597f2c20f1a688caf3a0d45b235b23ec0188c95366c6d317c03461c9c94cb1052c2ca16a85748ee4295d37baad78cf8cde55c000d6927eaf5fc426c6850546122bb3cf43abf6ec00aad2e061e7952dc3521c34d7427b8d4f0326f899ed72de2c0416b2b3edec38dcb69ed5c133044d049377ccc57bd7314502846d2a6cd546c5f155f503b86a3a00c564c1b39a6d31accc709cadd9d3e6fb6d9ffabaf640787c2a9a76ff52fc398127704b4906f35b383928dfdff585319de900189c92"}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x40, 0xf5, "3afeb0a5555d4296a7fbaa50517a82355726ef6cc1abddf57a85ff99dfac5b8fb40b6f7950b2010569a09d465acdfe79199f0eee16b33a6f8cb597142f35ad015a6426ab1c82eef2ac2a7c13ab334dc363facf14addbf366e316990f661cef247e0420d6f21a23fa46eba49e1400641884cad7f1e1072b8428ec8738cf5d9f18cf8e72880d84dd9e7c5f1eb844af088f0ab03a1a56ec88b2ad0f33e1eef665d003c9d39b0f76545fd3d53f02ebe8a4406c70640bb993be03710fa0a4ecbd76a365f234104ecd861ae50495b8cb1263df97bfa01c62f3c556ed47bbd15d8c728bc3254565d444fbc0d5f74c328b41312666a5f144f4"}]}}}], 0x1f0}}, {{&(0x7f0000002cc0)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3e}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000002d00)="4116ad42cb4dc2f9064104462ffe653dd6d558d748e313a2878f569454f276a0619d59ef0dec5024f5c2c4a98ca74ac6c479bae3e79255c1a987c17a4a2e01ad40fec2daf39822d1adbd1b22e2833cb4ca73dd6ac4c1af377645ef87034b891781c6eff1b6cf7fce9e64205ac00e07f6cf4790c530e4b53ab8f2734abf6215d58d3c228412166757714279ddb8c56afb072a0411f3", 0x95}, {&(0x7f0000002dc0)="aee481c39c358aca719911b74e4683ac1d074be7041dbebf2e5fd0aef4611bbcb244f76f4c5beb08cf33d758539f1d45a34598dbf65e30348860e8f97cf94120693da2ebe8ef0ab80c2bb86dbadaa57cb024c037263c778c55f4c234dd52b22d22ede318f0c9e572fa8a88059d899ffe57a18274ae69fb637f222a4081465c6d42408f0882d1fcf0a4dfc2bf7a5a663edacdf7d0f6c7c062a0ef07113a6540a3f44ecca1f3dad38112521fa7eb90bb95160c94ed080a19594c59cf58b37483c39b201c", 0xc3}, {&(0x7f0000002ec0)="9242f27f860b7045c22b701ec32525ff8a7bbdbb2cf7699c88c1d4f90ea20b4142340fdaa8b3e750f3f7ac048f1c24ed37d6b9d23983ef20a114797e31d3f75d7d8630c1fef09d56b2ed66be9dd3fdd21bec8136498b2b87470471f13cb707f55a0bb3413c13f6b91c2819af2a20e65b52bfa6facbb7e384b9043e737483eed1c931cf8db2673e6ba70ff9783318bea5e8302934d64d009fc20e13e87b90a3ff1309c5e91394f6ca174e5a3a01e7ebc24c6a4744a9a463e3467ad4a640544b49a27872b36f27ff5d25a9ddd936347f092f0bb788b36397e9aba2d40d47c132a39c7ba41ba81e742f3f", 0xe9}, {&(0x7f0000002fc0)="9624d3bf7895578344dff6887a19f9de9fd0d9a7a05a70f99b9aa5766e8a059f664c6e222668184a57cfee84e74abac7b318189c9fec1816ab39e4bac17d8398a39b4a550806adcabd90463d119c7e6d7fda4a269a77d57cac2d1b12f24ed295a01356331147fa0d2cc2b24c8e28335545a11f86ea9db37028005baa56e669924bfdc60eec2a5243066df7acf3d41b8dfa", 0x91}, {&(0x7f0000003080)="30dffbc87fdecd4adc2a47b8502d4959ccd05bd49fa5a73c2f56f47b3bd04d496f5aca3aeb2494844be0155ed080ad61be4168959808f61286c99351a94e42d7cb1c9d1e9dfc438029e9bf6c8136b37b7e2bd95badec21417d8ee77fc41f248ac13c366ff56e3d3d665cc695446dfdaa2ff27066508671265c623786a986eeb831721fdf88e1689686d2ba7b534e39d50a207d9a3a1de002e4b1ca95a8e91d6a12cb48da0ad12a54c2c217b197a9dfd9ff40db2028e59f245eb5cc4f3a96761dd71a59cc72a92001d328a8135b87e4647fe7d1a4d460a19fd68e6eee055dfce87603c681189c077477fe47f67b6ba0a901a759df68929de36b2adf77", 0xfc}, {&(0x7f0000003180)="0843fb04fbf7eebdeba3a0d9aaa91ed7bad2eab1354b6ffe6f5f56a8788b488ac6e0fd9259c53cfc59299515914e38a26936f19113c616acdb89bdd15215d7", 0x3f}, {&(0x7f00000031c0)="7283a4a98fc1123aa079bd7290a99496711669d58081fd84675d34f070087cac4db98bc2ec58c95177071a9883c50cbbeb700dbcf60d004b79454225e76d10b3f4dc83fb46508875b69d396d95483a2278b7c984ecc4ae105a78fbd09e98dc4e7dd3ecc13a7a06acc18a01c928", 0x6d}, {&(0x7f0000003240)="ca53fc3da2bbd5f696d05e73c94c7c54a35c843e9d14df6e014762740d56eeb32e9e9dab68319b1acd0648e4352e85beefe06c3f7ad71029db2dd53a738023518f4e1e510621efbe32c5fa0f930840951abe05194c4c5e61efc382137fac470ef0c5c28b3d2ccf87210e5884f3447232a8665e626782", 0x76}, {&(0x7f00000032c0)}], 0x9}}, {{&(0x7f00000033c0)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000003400)="f24f1d4fdbe66233bfb68912a13bb5e7552d74a7f58cda7491399647a3cb5d27cb20ae6139cad54d072258316928871f45f342eae5cd356785265b32517b58e161d715c3d3492b521c8a748cf158d75208084787b06c1356c09754c5c86cee98cfc7fa328419160727d881d8e37bf89593414f21eeb2b489ad39496a7bdf2131bd2c14cc70747b6fc50aac0ab0c47142a587f0e863c68761d30d277e14ffb86dd5495a971e0b39a53c891b89207dbcc1f370d6be58de93ee996958ef7b5be3b2d6", 0xc1}], 0x1}}], 0x4, 0x4000000) syz_pidfd_open(r8, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8000000110020002abd7000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="000200000000030008002300f0ffffff140012800c0001006d616376746170000400028008001300", @ANYRES32=r8, @ANYBLOB="580016802000018010000200c40000001d090000000000000c00070484be00007f000000340001800c00030021000000000000000c0003001d000000ffffff7f0c00040003000000030000000c0004007f9300000400000008001d000900000024000e00060000000000000001010000000000000600000000000000ff07029900000000"], 0xc8}, 0x1, 0x0, 0x0, 0x28000110}, 0x20000040) 4.089604781s ago: executing program 3 (id=31): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x400, 0x2, 0x400251}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000a00), &(0x7f00000001c0)=r4}, 0xfffffffffffffee5) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000016eb8df503fae68feb1ce15d02374000500000a3c000000090a010400000000000000000a000004090001008c797a3100010000080005400000002b0900020073797a310000000008000a40fffffffc1400000011"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000080)=0x2e9aa845) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xf, 0x9}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.986845913s ago: executing program 1 (id=33): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) close(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x10, 0x20000008, {{0x5, 0x4, 0x0, 0x20, 0x50, 0x66, 0x0, 0x80, 0x4, 0x0, @local, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r9, 0x0, 0x700, 0x4000002, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x81, 0x4, 0x0, @remote, @multicast2}}}}) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4) 3.338229225s ago: executing program 1 (id=35): r0 = memfd_secret(0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchownat(r0, 0x0, 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.173452768s ago: executing program 0 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)='\x00s', 0x2}], 0x1, 0x0, 0x0, 0x4040805}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x8, 0x3, 0xeff, 0x0, 0x6, 0x7, 0x5}, 0x9c) 2.937381073s ago: executing program 2 (id=38): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1b, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 2.641738729s ago: executing program 0 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 2.449990653s ago: executing program 3 (id=41): syz_open_procfs(0x0, &(0x7f0000000300)='net/raw6\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4009) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, 0x0, 0x0, 0xfecc) 2.403780964s ago: executing program 4 (id=42): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000301010400000000001a000002000000240001801400018008000100"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESHEX=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) flock(r4, 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r1, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020067656e65766531000000000000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x24040840}, 0x44004) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.118350259s ago: executing program 2 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r7, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 2.115006659s ago: executing program 1 (id=44): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000161a0000001812000043c8c82ad7bb514ab598707504faae849cdb502ce06d2b58d7e8fba2960dd188fd07a0f553dcc266befdbe16a7d6036d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000540)=[{0xe, 0x5}, {0x400, 0x1}, {0x2, 0x45}, {0x0, 0x100}]}) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x200080d1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054f579802c0001800e000100696d6d656469617465000000180002800c00028005000100fd000000080001400000001424000180090001006d6173710000000014000280080002400000001408000340000000160900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) r7 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r7, 0x0, 0xe38e, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x3, 0x6, 0x603, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000884}, 0x20000004) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x2]}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 1.884977074s ago: executing program 2 (id=45): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="024ce30004864b642e884a5a5b242e63d3734634000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500002000000000000000000000004beaabac69b0b417c2b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000010}, 0x94) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fffffffffffffff, 0xa0040) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x5}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) dup(r5) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x1000}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) listen(r7, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1.712494587s ago: executing program 2 (id=46): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x55b2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x2007ffb) (fail_nth: 5) 1.711880787s ago: executing program 4 (id=47): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x183001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x4010, r3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000890a000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="600000000206010300004a57da050000000000060e0003006269746d61703a6970000000050004773cab73c5c13ee1f90b24364161fd250e9d8b6cf43ac200000000000900020073797a31000000001800078005000300ff0000000c00018008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x48000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x18) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) (async) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.599579419s ago: executing program 0 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000006000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09001500000000550901000000000095000000000000004d5a0000ffffffffbf91000000000000b702000001000000850000008500000062b5ed47aedd6f919c16d0817cb70000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x41000, 0x2, '\x00', r6, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x800, 0xb, 0x99, 0x58c}, 0x10, 0xd59e, r3, 0x0, &(0x7f0000000480)=[r2], 0x0, 0x10, 0x10001}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000003940)='ext4_es_find_extent_range_exit\x00', r8, 0x0, 0x4}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000c90) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.279774656s ago: executing program 2 (id=49): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000440900020073797a310000000005000100070000000004400200000005000700ff0000000c000180080001400a0101010c00028008000140e00000020000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth1_vlan\x00', @ifru_mtu=0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdba7080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09d39dbb47e555483fffe64c1c819d4a5ac011a583df6b1e2e34fdc90bb8d38bfc56c2e9fbf0137a4cd1a13fade37b769a506a17a04630125f69d7fe0ef81470df252a8049e608216986"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_destroy(r6) connect(r5, &(0x7f00000002c0)=@caif=@dbg={0x25, 0x79, 0x6}, 0x80) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000002, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4e000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.279487146s ago: executing program 3 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) 1.279143356s ago: executing program 4 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x2000008, 0x200000006c832, 0xffffffffffffffff, 0xc02e8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="21001000000000000000000000000000005449dcabd590d0a49e8ebdf6ab6f119bbdcf314d67d0e87f0c22adec580c597c765f72f426cc9fe874d6a61476b5b25a4250a00a22a63a9cd71653881ad67b986953c3413d65482860c297fbbdd8a1bbdd90f25fbc41f22fd687c3608d03d47be9b766123289748506c383c15782fd852633f043f0d0c06e231ec456d673b411f7f51cc13c6ee8b10ccc691c7aec7e72e7248f729c584fc424f8cf307d4bdad1dee0ca1a3d9d9bc7106e676a58b21257964e3cb5372bc9b75bbfff99ef6781e72cd674f88f6ca76580bc566c1db84e36627b784b8da74ff774a4e046ed8af32eee9ce87821958c88d1664d6edd95bc5c102bdb44cbb6cda1b8cc3ca0e26e44b2251870bd6c41acb6cb4b9191c49ee4257e7ce1cf8dfa17bd15ee486bacfab57339e2f5a9b633f05623f96f30269dfd86bf236dc878b70df4e3f8a5aa17b15a0496cff391fcded7f31c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000a00)=@updsa={0x17c, 0x1a, 0x1, 0x0, 0xfffffffd, {{@in6=@ipv4, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d3, 0x3c}, @in6=@remote, {0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x80, 0x26}, [@sec_ctx={0x8c, 0x8, {0x88, 0x8, 0x0, 0xfc, 0x80, "e05775da96fa88250be20e5e1ac24db358f4da0c7458ea6f1713843153bd0354b31ba311bfad2c15c719b7bb8a4cdd2bde3fab40b2b1a8b2b35ce90b33d47e63dd5093ff1d6eefa011cb7090c9df48de913eccb3ae8c5f5903421003da86ce4d464d5f3d04f437bc2f2200a598ef7b81bae5b12516a37fecebaeaf1d6faa19fa"}}]}, 0x17c}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x2040400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8000}}, {@bsdgroups}, {@dax_never}, {@noauto_da_alloc}, {@noload}, {@data_err_abort}, {@resuid}]}, 0x22, 0x470, &(0x7f0000000dc0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f00000004c0), &(0x7f0000000200)=r5}, 0xffffffffffffffc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) unshare(0x60400) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0xa4842, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) 1.218082257s ago: executing program 3 (id=52): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000106000000000000"], 0x7c}}, 0x4004944) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000001000000000000000000000418110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000004ff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000900"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000c0000000c000000b3000000020000000000000800006140"], 0x0, 0x28, 0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(r1, 0x0) r7 = gettid() getpriority(0x2, r7) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x202, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x3}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, 0x0) 1.188988097s ago: executing program 1 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r5, 0x29, 0xfc, 0x2, 0x2, 0x40, @private1, @empty, 0x8, 0x8, 0x4, 0xffff}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000003940)='ext4_es_find_extent_range_exit\x00', r7, 0x0, 0x4}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000c90) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.134961108s ago: executing program 4 (id=54): r0 = memfd_secret(0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchownat(r0, 0x0, 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 143.543768ms ago: executing program 1 (id=55): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 125.871958ms ago: executing program 4 (id=56): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024"], 0x64}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000053bb00000000000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = socket(0x9, 0x5, 0x9) sendto$inet6(r5, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r4, 0x4, 0xc, 0x0, 0xffff, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x7}, 0x8021, 0x1, 0x6, 0x3}}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000cc0)={{}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) recvfrom(r3, 0x0, 0x0, 0x100, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r11}) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 93.250858ms ago: executing program 0 (id=57): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r9, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) keyctl$unlink(0x9, 0x0, 0x0) request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='&\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19.02302ms ago: executing program 3 (id=58): bpf$MAP_CREATE(0x600000000001800, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 18.41624ms ago: executing program 1 (id=59): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfc, 0x2, 0x2, 0x40, @private1, @empty, 0x8, 0x8, 0x4, 0xffff}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000006000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09001500000000550901000000000095000000000000004d5a0000ffffffffbf91000000000000b702000001000000850000008500000062b5ed47aedd6f919c16d0817cb700"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x41000, 0x2, '\x00', r4, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x800, 0xb, 0x99, 0x58c}, 0x10, 0xd59e, r1, 0x0, &(0x7f0000000480)=[r0], 0x0, 0x10, 0x10001}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000003940)='ext4_es_find_extent_range_exit\x00', r6, 0x0, 0x4}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000c90) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 17.39162ms ago: executing program 2 (id=60): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfc, 0x2, 0x2, 0x40, @private1, @empty, 0x8, 0x8, 0x4, 0xffff}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000006000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09001500000000550901000000000095000000000000004d5a0000ffffffffbf91000000000000b702000001000000850000008500000062b5ed47aedd6f919c16d0817cb700"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x41000, 0x2, '\x00', r4, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x800, 0xb, 0x99, 0x58c}, 0x10, 0xd59e, r1, 0x0, &(0x7f0000000480)=[r0], 0x0, 0x10, 0x10001}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000003940)='ext4_es_find_extent_range_exit\x00', r6, 0x0, 0x4}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000c90) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 750.53µs ago: executing program 3 (id=61): syz_open_procfs(0x0, &(0x7f0000000300)='net/raw6\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4009) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140), 0x0, 0xfecc) 0s ago: executing program 4 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts. [ 34.560922][ T29] audit: type=1400 audit(1759170836.389:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.562240][ T3290] cgroup: Unknown subsys name 'net' [ 34.583773][ T29] audit: type=1400 audit(1759170836.389:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.611130][ T29] audit: type=1400 audit(1759170836.419:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.712080][ T3290] cgroup: Unknown subsys name 'cpuset' [ 34.718510][ T3290] cgroup: Unknown subsys name 'rlimit' [ 34.849901][ T29] audit: type=1400 audit(1759170836.679:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.878285][ T29] audit: type=1400 audit(1759170836.679:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.899052][ T29] audit: type=1400 audit(1759170836.679:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.908378][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.919480][ T29] audit: type=1400 audit(1759170836.679:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.948409][ T29] audit: type=1400 audit(1759170836.679:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.973235][ T29] audit: type=1400 audit(1759170836.679:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.996507][ T29] audit: type=1400 audit(1759170836.769:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.027964][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.207967][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 36.284899][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.292102][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.299512][ T3300] bridge_slave_0: entered allmulticast mode [ 36.306219][ T3300] bridge_slave_0: entered promiscuous mode [ 36.314158][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.321267][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.328540][ T3300] bridge_slave_1: entered allmulticast mode [ 36.334943][ T3300] bridge_slave_1: entered promiscuous mode [ 36.346790][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.382051][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.399564][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.417394][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 36.444996][ T3300] team0: Port device team_slave_0 added [ 36.467697][ T3300] team0: Port device team_slave_1 added [ 36.498437][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 36.529388][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.545813][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.552828][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.578834][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.590080][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.597151][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.623183][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.647087][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.654305][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.661532][ T3307] bridge_slave_0: entered allmulticast mode [ 36.667915][ T3307] bridge_slave_0: entered promiscuous mode [ 36.677139][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.684440][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.691670][ T3307] bridge_slave_1: entered allmulticast mode [ 36.698181][ T3307] bridge_slave_1: entered promiscuous mode [ 36.718307][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.725427][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.732672][ T3301] bridge_slave_0: entered allmulticast mode [ 36.739344][ T3301] bridge_slave_0: entered promiscuous mode [ 36.746435][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.753576][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.760680][ T3301] bridge_slave_1: entered allmulticast mode [ 36.767042][ T3301] bridge_slave_1: entered promiscuous mode [ 36.807948][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.818609][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.841248][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.852744][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.864114][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.871217][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.878497][ T3305] bridge_slave_0: entered allmulticast mode [ 36.885140][ T3305] bridge_slave_0: entered promiscuous mode [ 36.909178][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.916333][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.923629][ T3305] bridge_slave_1: entered allmulticast mode [ 36.929983][ T3305] bridge_slave_1: entered promiscuous mode [ 36.945804][ T3300] hsr_slave_0: entered promiscuous mode [ 36.951861][ T3300] hsr_slave_1: entered promiscuous mode [ 36.979951][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.989988][ T3301] team0: Port device team_slave_0 added [ 36.996429][ T3307] team0: Port device team_slave_0 added [ 37.003244][ T3307] team0: Port device team_slave_1 added [ 37.020666][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.030756][ T3301] team0: Port device team_slave_1 added [ 37.051820][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.058898][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.066591][ T3312] bridge_slave_0: entered allmulticast mode [ 37.073086][ T3312] bridge_slave_0: entered promiscuous mode [ 37.100030][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.107076][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.133059][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.144308][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.151258][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.177190][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.188390][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.195394][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.221482][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.235130][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.242294][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.249480][ T3312] bridge_slave_1: entered allmulticast mode [ 37.255931][ T3312] bridge_slave_1: entered promiscuous mode [ 37.270012][ T3305] team0: Port device team_slave_0 added [ 37.275981][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.282991][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.308936][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.348273][ T3305] team0: Port device team_slave_1 added [ 37.367390][ T3307] hsr_slave_0: entered promiscuous mode [ 37.373508][ T3307] hsr_slave_1: entered promiscuous mode [ 37.379404][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 37.385181][ T3307] Cannot create hsr debugfs directory [ 37.400600][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.415311][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.422384][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.448372][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.470688][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.485504][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.492504][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.518668][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.547164][ T3301] hsr_slave_0: entered promiscuous mode [ 37.554268][ T3301] hsr_slave_1: entered promiscuous mode [ 37.560035][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.565826][ T3301] Cannot create hsr debugfs directory [ 37.597158][ T3312] team0: Port device team_slave_0 added [ 37.605847][ T3312] team0: Port device team_slave_1 added [ 37.649861][ T3305] hsr_slave_0: entered promiscuous mode [ 37.655924][ T3305] hsr_slave_1: entered promiscuous mode [ 37.661844][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 37.667575][ T3305] Cannot create hsr debugfs directory [ 37.678650][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.685711][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.711762][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.743354][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.750485][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.776539][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.841035][ T3312] hsr_slave_0: entered promiscuous mode [ 37.847260][ T3312] hsr_slave_1: entered promiscuous mode [ 37.853177][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.858909][ T3312] Cannot create hsr debugfs directory [ 37.896956][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.914159][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.928077][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.946444][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.983035][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.993980][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.009132][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.018108][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.053407][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.065260][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.076822][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.086108][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.126729][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.139292][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.155647][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.164570][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.200592][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.224070][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.240111][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.252025][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.271540][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.284495][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.296519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.303694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.312767][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.319857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.330908][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.340682][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.350567][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.357731][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.370019][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.382191][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.389394][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.418488][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.437585][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.444707][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.459361][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.466448][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.488416][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.498887][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.531539][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.570356][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.594769][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.614191][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.621284][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.635066][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.654042][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.661159][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.669991][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.677193][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.686273][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.693437][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.707913][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.734633][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.769182][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.779676][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.817766][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.932508][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.945249][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.962531][ T3300] veth0_vlan: entered promiscuous mode [ 38.982323][ T3301] veth0_vlan: entered promiscuous mode [ 38.990890][ T3300] veth1_vlan: entered promiscuous mode [ 39.004970][ T3301] veth1_vlan: entered promiscuous mode [ 39.047231][ T3307] veth0_vlan: entered promiscuous mode [ 39.054946][ T3300] veth0_macvtap: entered promiscuous mode [ 39.063064][ T3300] veth1_macvtap: entered promiscuous mode [ 39.077497][ T3307] veth1_vlan: entered promiscuous mode [ 39.090098][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.105523][ T3301] veth0_macvtap: entered promiscuous mode [ 39.125692][ T3301] veth1_macvtap: entered promiscuous mode [ 39.135349][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.147567][ T3307] veth0_macvtap: entered promiscuous mode [ 39.157978][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.168915][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.182250][ T3307] veth1_macvtap: entered promiscuous mode [ 39.194692][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.214955][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223988][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.254474][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.264272][ T3305] veth0_vlan: entered promiscuous mode [ 39.276404][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289486][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.295708][ T3312] veth0_vlan: entered promiscuous mode [ 39.311199][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.324492][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.346436][ T3312] veth1_vlan: entered promiscuous mode [ 39.356359][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.372029][ T3305] veth1_vlan: entered promiscuous mode [ 39.381683][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.428346][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.457007][ T3305] veth0_macvtap: entered promiscuous mode [ 39.477675][ T3478] loop3: detected capacity change from 0 to 1024 [ 39.487095][ T3478] EXT4-fs: Ignoring removed orlov option [ 39.495798][ T3305] veth1_macvtap: entered promiscuous mode [ 39.503781][ T3478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.516508][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.526644][ T3312] veth0_macvtap: entered promiscuous mode [ 39.532575][ T3482] loop0: detected capacity change from 0 to 128 [ 39.543473][ T3312] veth1_macvtap: entered promiscuous mode [ 39.551125][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.568185][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.581473][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 39.581540][ T29] audit: type=1400 audit(1759170841.399:108): avc: denied { add_name } for pid=3477 comm="syz.3.6" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.607865][ T29] audit: type=1400 audit(1759170841.399:109): avc: denied { create } for pid=3477 comm="syz.3.6" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.627660][ T29] audit: type=1400 audit(1759170841.419:110): avc: denied { read open } for pid=3477 comm="syz.3.6" path="/1/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.650058][ T29] audit: type=1400 audit(1759170841.419:111): avc: denied { write } for pid=3477 comm="syz.3.6" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.674262][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.684913][ T29] audit: type=1326 audit(1759170841.509:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dce0eec9 code=0x7ffc0000 [ 39.708044][ T29] audit: type=1326 audit(1759170841.509:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dce0eec9 code=0x7ffc0000 [ 39.713455][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.731225][ T29] audit: type=1326 audit(1759170841.509:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dce0eec9 code=0x7ffc0000 [ 39.731272][ T29] audit: type=1326 audit(1759170841.509:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f04dce0eec9 code=0x7ffc0000 [ 39.731299][ T29] audit: type=1326 audit(1759170841.509:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dce0eec9 code=0x7ffc0000 [ 39.789799][ T3486] FAULT_INJECTION: forcing a failure. [ 39.789799][ T3486] name failslab, interval 1, probability 0, space 0, times 1 [ 39.808401][ T29] audit: type=1326 audit(1759170841.519:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f04dce0eec9 code=0x7ffc0000 [ 39.820919][ T3486] CPU: 0 UID: 0 PID: 3486 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.820950][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 39.820967][ T3486] Call Trace: [ 39.820974][ T3486] [ 39.820984][ T3486] __dump_stack+0x1d/0x30 [ 39.821020][ T3486] dump_stack_lvl+0xe8/0x140 [ 39.821049][ T3486] dump_stack+0x15/0x1b [ 39.821143][ T3486] should_fail_ex+0x265/0x280 [ 39.821178][ T3486] should_failslab+0x8c/0xb0 [ 39.821215][ T3486] kmem_cache_alloc_noprof+0x50/0x310 [ 39.821312][ T3486] ? security_file_alloc+0x32/0x100 [ 39.821362][ T3486] security_file_alloc+0x32/0x100 [ 39.821409][ T3486] init_file+0x5c/0x1d0 [ 39.821503][ T3486] alloc_empty_file+0x8b/0x200 [ 39.821547][ T3486] path_openat+0x68/0x2170 [ 39.821599][ T3486] ? _parse_integer_limit+0x170/0x190 [ 39.821637][ T3486] ? kstrtoull+0x111/0x140 [ 39.821682][ T3486] ? kstrtouint+0x76/0xc0 [ 39.821717][ T3486] do_filp_open+0x109/0x230 [ 39.821754][ T3486] do_sys_openat2+0xa6/0x110 [ 39.821870][ T3486] __x64_sys_openat+0xf2/0x120 [ 39.821918][ T3486] x64_sys_call+0x2e9c/0x2ff0 [ 39.821950][ T3486] do_syscall_64+0xd2/0x200 [ 39.822066][ T3486] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.822102][ T3486] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.822143][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.822242][ T3486] RIP: 0033:0x7f99c914eec9 [ 39.822265][ T3486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.822291][ T3486] RSP: 002b:00007f99c7b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.822323][ T3486] RAX: ffffffffffffffda RBX: 00007f99c93a6180 RCX: 00007f99c914eec9 [ 39.822343][ T3486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 39.822361][ T3486] RBP: 00007f99c7b75090 R08: 0000000000000000 R09: 0000000000000000 [ 39.822379][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.822396][ T3486] R13: 00007f99c93a6218 R14: 00007f99c93a6180 R15: 00007ffc41e6f6d8 [ 39.822426][ T3486] [ 39.840253][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.164041][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.181610][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.238587][ T3488] loop2: detected capacity change from 0 to 1024 [ 40.306805][ T3488] ======================================================= [ 40.306805][ T3488] WARNING: The mand mount option has been deprecated and [ 40.306805][ T3488] and is ignored by this kernel. Remove the mand [ 40.306805][ T3488] option from the mount to silence this warning. [ 40.306805][ T3488] ======================================================= [ 40.361430][ T291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.382503][ T291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.421055][ T3488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.426943][ T291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.443512][ T291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.452630][ T291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.452659][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.462762][ T291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.479310][ T291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.494721][ T3488] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.505540][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.546486][ T3500] loop1: detected capacity change from 0 to 512 [ 40.556347][ T3488] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.556410][ T3501] FAULT_INJECTION: forcing a failure. [ 40.556410][ T3501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.582474][ T3501] CPU: 0 UID: 0 PID: 3501 Comm: syz.4.10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.582505][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 40.582521][ T3501] Call Trace: [ 40.582530][ T3501] [ 40.582538][ T3501] __dump_stack+0x1d/0x30 [ 40.582593][ T3501] dump_stack_lvl+0xe8/0x140 [ 40.582653][ T3501] dump_stack+0x15/0x1b [ 40.582673][ T3501] should_fail_ex+0x265/0x280 [ 40.582763][ T3501] should_fail+0xb/0x20 [ 40.582788][ T3501] should_fail_usercopy+0x1a/0x20 [ 40.582865][ T3501] _copy_to_user+0x20/0xa0 [ 40.582990][ T3501] simple_read_from_buffer+0xb5/0x130 [ 40.583020][ T3501] proc_fail_nth_read+0x10e/0x150 [ 40.583049][ T3501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.583129][ T3501] vfs_read+0x1a5/0x770 [ 40.583198][ T3501] ? __rcu_read_unlock+0x4f/0x70 [ 40.583222][ T3501] ? __fget_files+0x184/0x1c0 [ 40.583250][ T3501] ksys_read+0xda/0x1a0 [ 40.583272][ T3501] __x64_sys_read+0x40/0x50 [ 40.583414][ T3501] x64_sys_call+0x27bc/0x2ff0 [ 40.583442][ T3501] do_syscall_64+0xd2/0x200 [ 40.583477][ T3501] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.583503][ T3501] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.583584][ T3501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.583600][ T3488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 40.583612][ T3501] RIP: 0033:0x7f834e3fd8dc [ 40.583632][ T3501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.583655][ T3501] RSP: 002b:00007f834ce67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.583747][ T3501] RAX: ffffffffffffffda RBX: 00007f834e655fa0 RCX: 00007f834e3fd8dc [ 40.583766][ T3501] RDX: 000000000000000f RSI: 00007f834ce670a0 RDI: 0000000000000006 [ 40.583784][ T3501] RBP: 00007f834ce67090 R08: 0000000000000000 R09: 0000000000000000 [ 40.583802][ T3501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.583818][ T3501] R13: 00007f834e656038 R14: 00007f834e655fa0 R15: 00007ffdc1539488 [ 40.583836][ T3501] [ 40.796029][ T3488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.796029][ T3488] [ 40.806973][ T3488] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.831556][ T3509] loop4: detected capacity change from 0 to 1024 [ 40.838559][ T3488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 40.851010][ T3488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.851010][ T3488] [ 40.882876][ T3509] EXT4-fs: Ignoring removed orlov option [ 40.895358][ T3500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.947583][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.947840][ T3500] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.993851][ T3517] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13'. [ 41.006700][ T3517] bridge0: port 3(gretap0) entered blocking state [ 41.013221][ T3517] bridge0: port 3(gretap0) entered disabled state [ 41.039334][ T3517] gretap0: entered allmulticast mode [ 41.039769][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.045522][ T3517] gretap0: entered promiscuous mode [ 41.059967][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.093245][ T3517] bridge0: port 3(gretap0) entered blocking state [ 41.099851][ T3517] bridge0: port 3(gretap0) entered forwarding state [ 41.141666][ T3525] loop0: detected capacity change from 0 to 512 [ 41.179405][ T3525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.260001][ T3525] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.330032][ T3500] tipc: Started in network mode [ 41.335022][ T3500] tipc: Node identity ac14140f, cluster identity 4711 [ 41.348208][ T3500] tipc: New replicast peer: 255.255.255.255 [ 41.354370][ T3500] tipc: Enabled bearer , priority 10 [ 41.383628][ T3550] loop3: detected capacity change from 0 to 512 [ 41.399507][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.411959][ T3550] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.438696][ T3550] EXT4-fs (loop3): 1 truncate cleaned up [ 41.449753][ T3550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.452769][ T3528] syzkaller0: entered promiscuous mode [ 41.466167][ T3551] FAULT_INJECTION: forcing a failure. [ 41.466167][ T3551] name failslab, interval 1, probability 0, space 0, times 0 [ 41.467355][ T3528] syzkaller0: entered allmulticast mode [ 41.479956][ T3551] CPU: 0 UID: 0 PID: 3551 Comm: syz.4.15 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.479987][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 41.480006][ T3551] Call Trace: [ 41.480015][ T3551] [ 41.480027][ T3551] __dump_stack+0x1d/0x30 [ 41.480091][ T3551] dump_stack_lvl+0xe8/0x140 [ 41.480119][ T3551] dump_stack+0x15/0x1b [ 41.480143][ T3551] should_fail_ex+0x265/0x280 [ 41.480180][ T3551] should_failslab+0x8c/0xb0 [ 41.480262][ T3551] kmem_cache_alloc_node_noprof+0x57/0x320 [ 41.480305][ T3551] ? __alloc_skb+0x101/0x320 [ 41.480334][ T3551] __alloc_skb+0x101/0x320 [ 41.480409][ T3551] netlink_alloc_large_skb+0xba/0xf0 [ 41.480438][ T3551] netlink_sendmsg+0x3cf/0x6b0 [ 41.480492][ T3551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.480527][ T3551] __sock_sendmsg+0x145/0x180 [ 41.480594][ T3551] ____sys_sendmsg+0x31e/0x4e0 [ 41.480644][ T3551] ___sys_sendmsg+0x17b/0x1d0 [ 41.480695][ T3551] __x64_sys_sendmsg+0xd4/0x160 [ 41.480779][ T3551] x64_sys_call+0x191e/0x2ff0 [ 41.480810][ T3551] do_syscall_64+0xd2/0x200 [ 41.480906][ T3551] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.480930][ T3551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.480997][ T3551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.481028][ T3551] RIP: 0033:0x7f834e3feec9 [ 41.481127][ T3551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.481154][ T3551] RSP: 002b:00007f834ce46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.481205][ T3551] RAX: ffffffffffffffda RBX: 00007f834e656090 RCX: 00007f834e3feec9 [ 41.481239][ T3551] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 41.481261][ T3551] RBP: 00007f834ce46090 R08: 0000000000000000 R09: 0000000000000000 [ 41.481278][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.481339][ T3551] R13: 00007f834e656128 R14: 00007f834e656090 R15: 00007ffdc1539488 [ 41.481366][ T3551] [ 41.709130][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.747039][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.839408][ T3567] loop4: detected capacity change from 0 to 1024 [ 41.865830][ T3567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.883288][ T3569] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20'. [ 41.887087][ T3573] loop3: detected capacity change from 0 to 1024 [ 41.901148][ T3567] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.090814][ T3567] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.22: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.111977][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.145588][ T3573] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.158236][ T3567] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 42.170595][ T3567] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.170595][ T3567] [ 42.205275][ T3585] netlink: 96 bytes leftover after parsing attributes in process `syz.2.23'. [ 42.226619][ T3573] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.21: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.241020][ T3573] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 42.253494][ T3573] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.253494][ T3573] [ 42.296124][ T3567] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.22: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.302851][ T3573] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.21: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.331242][ T3567] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 42.343621][ T3567] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.343621][ T3567] [ 42.357696][ T3573] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 42.370130][ T3573] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.370130][ T3573] [ 42.382617][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.410819][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.456859][ T3592] loop3: detected capacity change from 0 to 1024 [ 42.474328][ T3592] EXT4-fs: Ignoring removed orlov option [ 42.491580][ T23] tipc: Node number set to 2886997007 [ 42.514419][ T3592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.527272][ T3595] loop4: detected capacity change from 0 to 512 [ 42.544705][ T3595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.571808][ T3595] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.587051][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.614914][ T3600] Zero length message leads to an empty skb [ 42.677774][ T3605] loop3: detected capacity change from 0 to 512 [ 42.698377][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.725662][ T3605] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.773199][ T3595] tipc: Started in network mode [ 42.778210][ T3595] tipc: Node identity ac14140f, cluster identity 4711 [ 42.785573][ T3595] tipc: New replicast peer: 255.255.255.255 [ 42.791677][ T3595] tipc: Enabled bearer , priority 10 [ 42.813707][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.938670][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.996674][ T3629] can0: slcan on ttyS3. [ 43.005045][ T3631] loop4: detected capacity change from 0 to 512 [ 43.047621][ T3631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.061531][ T3629] can0 (unregistered): slcan off ttyS3. [ 43.084366][ T3636] loop2: detected capacity change from 0 to 512 [ 43.091640][ T3636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.104806][ T3636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.114870][ T3631] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.128442][ T3636] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.129657][ T3635] can0: slcan on ttyS3. [ 43.143471][ T3636] EXT4-fs (loop2): 1 truncate cleaned up [ 43.152001][ T3636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.432272][ T3631] tipc: Enabling of bearer rejected, already enabled [ 43.564191][ T3628] can0 (unregistered): slcan off ttyS3. [ 43.747466][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.004803][ T2952] tipc: Node number set to 2886997007 [ 44.097688][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.200947][ T3667] syz.0.37 (3667) used greatest stack depth: 10960 bytes left [ 44.534075][ T3696] loop3: detected capacity change from 0 to 512 [ 44.621635][ T3700] FAULT_INJECTION: forcing a failure. [ 44.621635][ T3700] name failslab, interval 1, probability 0, space 0, times 0 [ 44.634313][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.634345][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.634358][ T3700] Call Trace: [ 44.634365][ T3700] [ 44.634372][ T3700] __dump_stack+0x1d/0x30 [ 44.634425][ T3700] dump_stack_lvl+0xe8/0x140 [ 44.634470][ T3700] dump_stack+0x15/0x1b [ 44.634486][ T3700] should_fail_ex+0x265/0x280 [ 44.634515][ T3700] should_failslab+0x8c/0xb0 [ 44.634540][ T3700] kmem_cache_alloc_noprof+0x50/0x310 [ 44.634570][ T3700] ? copy_sighand+0x52/0x1b0 [ 44.634644][ T3700] copy_sighand+0x52/0x1b0 [ 44.634729][ T3700] copy_process+0xcaf/0x2000 [ 44.634763][ T3700] kernel_clone+0x16c/0x5c0 [ 44.634834][ T3700] ? vfs_write+0x7e8/0x960 [ 44.634866][ T3700] __x64_sys_clone+0xe6/0x120 [ 44.634979][ T3700] x64_sys_call+0x119c/0x2ff0 [ 44.635000][ T3700] do_syscall_64+0xd2/0x200 [ 44.635035][ T3700] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.635064][ T3700] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.635177][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.635199][ T3700] RIP: 0033:0x7f99c914eec9 [ 44.635214][ T3700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.635270][ T3700] RSP: 002b:00007f99c7b74fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.635295][ T3700] RAX: ffffffffffffffda RBX: 00007f99c93a6180 RCX: 00007f99c914eec9 [ 44.635311][ T3700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000400 [ 44.635323][ T3700] RBP: 00007f99c7b75090 R08: 0000000000000000 R09: 0000000000000000 [ 44.635335][ T3700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 44.635346][ T3700] R13: 00007f99c93a6218 R14: 00007f99c93a6180 R15: 00007ffc41e6f6d8 [ 44.635367][ T3700] [ 44.916567][ T3705] netlink: 96 bytes leftover after parsing attributes in process `syz.1.44'. [ 44.984288][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.021490][ T3696] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.076336][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 45.076352][ T29] audit: type=1400 audit(1759170846.909:246): avc: denied { read } for pid=3719 comm="syz.2.45" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.105907][ T29] audit: type=1400 audit(1759170846.909:247): avc: denied { open } for pid=3719 comm="syz.2.45" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.129721][ T29] audit: type=1400 audit(1759170846.919:248): avc: denied { ioctl } for pid=3719 comm="syz.2.45" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.154774][ T29] audit: type=1400 audit(1759170846.919:249): avc: denied { name_bind } for pid=3719 comm="syz.2.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.176349][ T29] audit: type=1400 audit(1759170846.919:250): avc: denied { setopt } for pid=3719 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.243508][ T29] audit: type=1326 audit(1759170847.079:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4e35eec9 code=0x7ffc0000 [ 45.250107][ T3722] random: crng reseeded on system resumption [ 45.274988][ T29] audit: type=1400 audit(1759170847.079:252): avc: denied { write } for pid=3721 comm="syz.4.47" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.298001][ T29] audit: type=1400 audit(1759170847.079:253): avc: denied { open } for pid=3721 comm="syz.4.47" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.321173][ T29] audit: type=1326 audit(1759170847.109:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4e35eec9 code=0x7ffc0000 [ 45.344628][ T29] audit: type=1326 audit(1759170847.109:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4e35eec9 code=0x7ffc0000 [ 45.375386][ T3724] FAULT_INJECTION: forcing a failure. [ 45.375386][ T3724] name failslab, interval 1, probability 0, space 0, times 0 [ 45.388094][ T3724] CPU: 1 UID: 0 PID: 3724 Comm: syz.2.46 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.388175][ T3724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.388192][ T3724] Call Trace: [ 45.388199][ T3724] [ 45.388209][ T3724] __dump_stack+0x1d/0x30 [ 45.388236][ T3724] dump_stack_lvl+0xe8/0x140 [ 45.388393][ T3724] dump_stack+0x15/0x1b [ 45.388409][ T3724] should_fail_ex+0x265/0x280 [ 45.388436][ T3724] ? audit_log_d_path+0x8d/0x150 [ 45.388477][ T3724] should_failslab+0x8c/0xb0 [ 45.388513][ T3724] __kmalloc_cache_noprof+0x4c/0x320 [ 45.388610][ T3724] audit_log_d_path+0x8d/0x150 [ 45.388649][ T3724] audit_log_d_path_exe+0x42/0x70 [ 45.388683][ T3724] audit_log_task+0x1e9/0x250 [ 45.388782][ T3724] audit_seccomp+0x61/0x100 [ 45.388807][ T3724] ? __seccomp_filter+0x68c/0x10d0 [ 45.388829][ T3724] __seccomp_filter+0x69d/0x10d0 [ 45.388876][ T3724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.388904][ T3724] ? vfs_write+0x7e8/0x960 [ 45.388933][ T3724] ? __rcu_read_unlock+0x4f/0x70 [ 45.388962][ T3724] ? __fget_files+0x184/0x1c0 [ 45.389025][ T3724] __secure_computing+0x82/0x150 [ 45.389114][ T3724] syscall_trace_enter+0xcf/0x1e0 [ 45.389144][ T3724] do_syscall_64+0xac/0x200 [ 45.389174][ T3724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.389225][ T3724] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.389262][ T3724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.389297][ T3724] RIP: 0033:0x7fbb4e35eec9 [ 45.389379][ T3724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.389400][ T3724] RSP: 002b:00007fbb4cdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 45.389421][ T3724] RAX: ffffffffffffffda RBX: 00007fbb4e5b5fa0 RCX: 00007fbb4e35eec9 [ 45.389437][ T3724] RDX: 0000000000000000 RSI: 0000000002007ffb RDI: 0000000000000003 [ 45.389454][ T3724] RBP: 00007fbb4cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.389471][ T3724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.389487][ T3724] R13: 00007fbb4e5b6038 R14: 00007fbb4e5b5fa0 R15: 00007ffd55643888 [ 45.389511][ T3724] [ 45.622086][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.636245][ T3727] loop0: detected capacity change from 0 to 512 [ 45.687911][ T3731] loop4: detected capacity change from 0 to 512 [ 45.698300][ T3731] EXT4-fs: dax option not supported [ 45.706522][ T3733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.49'. [ 45.733252][ T3727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.758939][ T3727] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.773693][ C1] hrtimer: interrupt took 33375 ns [ 45.802330][ T3741] loop1: detected capacity change from 0 to 512 [ 45.816093][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.829162][ T3741] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.932485][ T3727] tipc: Started in network mode [ 45.937475][ T3727] tipc: Node identity ac14140f, cluster identity 4711 [ 45.970886][ T3727] tipc: New replicast peer: 255.255.255.255 [ 45.977050][ T3727] tipc: Enabled bearer , priority 10 [ 46.113173][ T3741] tipc: Enabling of bearer rejected, already enabled [ 46.766721][ T3757] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 46.831199][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.860335][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.876016][ T3761] vlan2: entered allmulticast mode [ 46.908721][ T3766] process 'syz.0.57' launched '/dev/fd/12' with NULL argv: empty string added [ 46.951689][ T3775] loop3: detected capacity change from 0 to 512 [ 46.958573][ T3771] loop1: detected capacity change from 0 to 512 [ 46.968160][ T3766] ================================================================== [ 46.976287][ T3766] BUG: KCSAN: data-race in lookup_user_key / prepare_creds [ 46.983521][ T3766] [ 46.985869][ T3766] write to 0xffff88810212b0a8 of 4 bytes by task 3778 on cpu 1: [ 46.993510][ T3766] lookup_user_key+0xb6/0xd10 [ 46.998220][ T3766] keyctl_keyring_unlink+0x23/0x120 [ 47.003468][ T3766] __se_sys_keyctl+0x5a3/0xb80 [ 47.008263][ T3766] __x64_sys_keyctl+0x67/0x80 [ 47.012968][ T3766] x64_sys_call+0x2f6d/0x2ff0 [ 47.017671][ T3766] do_syscall_64+0xd2/0x200 [ 47.022231][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.028144][ T3766] [ 47.030473][ T3766] read to 0xffff88810212b000 of 184 bytes by task 3766 on cpu 0: [ 47.038196][ T3766] prepare_creds+0x6c/0x4c0 [ 47.042713][ T3766] prepare_exec_creds+0x14/0xe0 [ 47.047574][ T3766] bprm_execve+0x70/0x970 [ 47.051915][ T3766] do_execveat_common+0x6e6/0x750 [ 47.056950][ T3766] __x64_sys_execveat+0x73/0x90 [ 47.061815][ T3766] x64_sys_call+0x1fec/0x2ff0 [ 47.066502][ T3766] do_syscall_64+0xd2/0x200 [ 47.071042][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.076945][ T3766] [ 47.079283][ T3766] Reported by Kernel Concurrency Sanitizer on: [ 47.085435][ T3766] CPU: 0 UID: 0 PID: 3766 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.095005][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.105064][ T3766] ================================================================== [ 47.118165][ T3773] loop2: detected capacity change from 0 to 512 [ 47.118936][ T2952] tipc: Node number set to 2886997007 [ 47.129977][ T3775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.131637][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.146697][ T3773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.155215][ T3771] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.168142][ T3775] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.190498][ T3773] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.254434][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.290405][ T3771] tipc: Enabling of bearer rejected, already enabled [ 47.322425][ T3787] syz.1.59 (3787) used greatest stack depth: 10584 bytes left [ 47.336815][ T3773] tipc: Started in network mode [ 47.341895][ T3773] tipc: Node identity ac14140f, cluster identity 4711 [ 47.348899][ T3773] tipc: New replicast peer: 255.255.255.255 [ 47.355051][ T3773] tipc: Enabled bearer , priority 10 [ 47.356784][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.407815][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.482168][ T1035] tipc: Node number set to 2886997007