last executing test programs: 4.549068022s ago: executing program 0 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) r4 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0x1292, 0x400, 0x2, 0x313}) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r5, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000452c9367c89797f4c4f3600b2956567d7f91b5822740743b0f95d680ce4bf056eb73fa10d09400b4335b702171f3931eee9686159d79d8d7e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet(0x2, 0xa, 0x4) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000000030000000", @ANYBLOB="60b3e43334c647d9b49f4f8ef982a7e79b372273e14f4027470b6fd90e6d06e4737fc4ceb428b379ef4e2f2d5fbd2df969395cfc24af78cfd8298e17547d08e981af6470430bff2b61cc1b4181ffd3e29ae882acf5051186da9bb8586914d9f20c24863314508f82cda787e02350bb906a9a7d9d26b01d3e7b9d275eddf67978ab603c4f482bd5771c4419b3f2cd44d97193a4f834ccd5da5f599a8fe485"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) truncate(&(0x7f0000002080)='./file0\x00', 0x5ba76382) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x80000000}, 0x18) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) close_range(r2, r1, 0x2) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 4.276441596s ago: executing program 4 (id=380): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x110}, {r1, 0x20}, {r3, 0x30}, {r1, 0x20}], 0x5, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r6}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000300)={@private1, 0x1d, r6}) getpgrp(r2) fcntl$setpipe(r1, 0x4, 0xfffffffffffff000) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2be678624e973418, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @value=r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62cbd90928710e1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r8, r8, r8, r8, r8], &(0x7f00000006c0)=[{0x4, 0x3, 0x4, 0xc}, {0x4, 0x1, 0x9, 0x3}], 0x10, 0x80000000, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000007c0)='kmem_cache_free\x00', r9, 0x0, 0x201ffffffffffffd}, 0xffffffffffffff84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 4.240723537s ago: executing program 0 (id=381): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r1, r2, 0x0, 0x1000000000004) 4.097790869s ago: executing program 0 (id=382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.076063329s ago: executing program 0 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000080)={'netpci0\x00', @ifru_hwaddr=@remote}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000280000000000069078ac14142a0a01010100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ff29970000000000"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000b00000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = memfd_secret(0x0) cachestat(r3, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xa, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}, 0x0, 0x2, 0xfffff7f0, 0x0, 0x80012, 0x4, 0x1, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ptrace$getregs(0xc, 0xffffffffffffffff, 0x4, 0x0) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="0c000000e5672c0f9e91d8885a1c920899bbfebd6cc053a9aba2b9a6806704fbac4577b10ae3b0e0d1521a78e746c79f230d6a5e6da7e478413fadfca5c6940002393f9793dbce42168b9ff694ae06294d0a419158def1ff15e559f79399b05227b51c98d62e01dcaf1eb3d049fa69a15a929c06ee9820535c77cabcab98a09086322cd6c720283f54b9cea0d33a58f414285f6791d76adcab3d9804d813a74f2d9be8b9753d163659c11739bf0e", 0xfffffe2b}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x298, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYRES32=r6], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/94, 0x5e, 0x2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000500), 0x210048, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00000032caf69f", @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x105400, 0x0) 3.946717351s ago: executing program 0 (id=386): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x2, 0xff, 0x1, 0x0, 0x6, 0x1a000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x6, @perf_bp, 0x10004, 0x6, 0x3, 0x3, 0x6, 0x9, 0x6, 0x0, 0x0, 0x0, 0x6d}, r1, 0xd, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 2.590058852s ago: executing program 1 (id=401): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) kcmp(r1, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f28db65635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x1}, 0x18) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 2.395560124s ago: executing program 1 (id=402): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x3, 0x2, 0xffffffff}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0xffffffffffffffad) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) mknod$loop(0x0, 0x80, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r5}, 0x38) 2.308112765s ago: executing program 0 (id=403): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x2, 0xff, 0x1, 0x0, 0x6, 0x1a000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x6, @perf_bp, 0x10004, 0x6, 0x3, 0x3, 0x6, 0x9, 0x6, 0x0, 0x0, 0x0, 0x6d}, r1, 0xd, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001340)={0x424, r5, 0x300, 0x4, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x92, 0x3, "bcf262abadd05868f59183524278b32d47487a90317820927b4bd93b554efafb42b70083684c419b20ed769de5f79bd93a83316f238e1ba9bfc0fc01c8dc025d09f817aef32eca37c8b8c6bbd68c2e1d96695cbda7f8e731a91f2b727e5f78f58495c532d0a8899d086eb79be29b140a086b712585473173b23914a646ab5f9af2baad8ef82c556f301db09c0410"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "8491b6587bdb295214f3b91cf424231713b665275cb64c582d7a09ac61bd4f80ca2d0637471628abd3562c570c7c8f502fe436d35a8be7197d06deb7fc299b0032b96ef261b7bc73cf9e03ae64f98964e913c093ec198eb211beeaa3f48f2515357708e5df7efbc857772c498f3e03f1752b991aab1f57c2800c462125e1a7e4be7f57e6cee30ca8843247f182aadb8b096f35317e6209b58e3b99698dc8a793b158a5c8b7875f9e160f06e99bd8f99cfcc3da9afbc4122fa97d73f41c04535c6867459b2d55b3d6"}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "1d02a3da1bf2a0db4bd8eceb315cb25681c05546d08a57a696d9ed18a2409e065e1851761d41ebe799f8363b951c7d942ea1eea90f87962c71fa4e3f0e6472ca43cda0781e02f4f8"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x80b5685}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45fa}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff48e}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 2.113637939s ago: executing program 2 (id=404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x82, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) syz_open_dev$mouse(0x0, 0x47, 0x204003) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4, 0x0, 0x7ffffffffffffffe, 0x38db0863, 0x0, 0x0, 0xd, 0x9d}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x3, &(0x7f00000003c0)=[{0x0, 0x7, 0xf9, 0x7}, {0x0, 0x7f, 0x7, 0x1000}, {0x2, 0x3, 0x88, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_usbip_server_init(0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") 1.39168796s ago: executing program 1 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = syz_clone(0x48051400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000380)={@any, 0x6}) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_io_uring_setup(0x1bc7, &(0x7f0000000400)={0x0, 0x79af, 0x13381, 0x8000, 0x400251}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='finish_task_reaping\x00', r1}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r10 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xcd70, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x50, r3, 0x10000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a000000021e52100100000000000000000001c148000fe00000a000039389a0f00f0ffffff000000000000b4f07a91781a9012000b00000000000000000000000100000000000009000000000000000f08001f000f0000000000000000000000000000000600000000000000040000408042e3000000000000000000000000000000000020000000000000000000000001000000040000000f000000010000000100000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004010) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x25, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, {0x0, r12}}) 1.38650016s ago: executing program 2 (id=412): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) kcmp(r1, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f28db65635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x1}, 0x18) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 1.308585631s ago: executing program 2 (id=413): syz_clone(0x118100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="21f4b34c87016fa087c26b962a32ef02e752") (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0), 0x0, 0x78f, &(0x7f0000002200)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x9, &(0x7f00000001c0)=r7, 0x4) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f0000022b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000022c40)=""/178, 0xb2}, 0x7}], 0x1, 0x40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r9}, 0x20) futex_waitv(&(0x7f0000001ac0)=[{0x287, &(0x7f0000000280)=0x8000, 0x82}, {0x10, &(0x7f00000002c0), 0x2}, {0x8000, &(0x7f0000000300)=0x7, 0x2}, {0x6, &(0x7f0000000340)=0xd075, 0x80}, {0xfff, &(0x7f0000000380)=0x7fffffffffffffff, 0x2}, {0x2a, &(0x7f00000003c0)=0x1, 0x82}, {0x8, &(0x7f0000000400)=0x1, 0x2}, {0x5, &(0x7f0000000440)=0x6, 0x82}, {0x6, &(0x7f0000000480)=0x2, 0x2}, {0x1, &(0x7f00000004c0)=0xfff, 0x82}, {0x8, &(0x7f0000000540)=0x80000001, 0x2}, {0xfffffffffffffffb, &(0x7f0000000580)=0x8000002c5}, {0xfffffffffffffffa, &(0x7f0000000600)=0x5, 0x2}, {0x6, &(0x7f0000000840)=0xffffffffffffffff, 0x82}, {0xffffffffffffffff, &(0x7f0000000680)=0x5, 0x2}, {0x400, &(0x7f00000006c0)=0x3, 0x2}, {0x8, &(0x7f0000000cc0)=0x1000000000010, 0x2}, {0x5, &(0x7f0000000740)=0xc2d100000000000, 0x82}, {0x1, &(0x7f0000000780)=0x5, 0x82}, {0x80000000, &(0x7f0000000800)=0x2, 0x82}, {0x100000000000005, &(0x7f0000000240)=0x6, 0x82}, {0x91f9, &(0x7f0000000880)=0x40, 0x82}, {0xffffffff7fffffff, &(0x7f00000008c0)=0x400000000000005, 0x2}, {0xb, &(0x7f0000000900)=0xb, 0x82}, {0x1ff, &(0x7f0000000940)=0x6, 0x82}, {0xfcb, &(0x7f0000000980)=0x3, 0x2}, {0x4, &(0x7f00000009c0)=0x4, 0x2}, {0x81, &(0x7f0000000a00)=0x40, 0x82}, {0x3, &(0x7f0000000a40)=0x1, 0x80}, {0x1, &(0x7f0000000a80)=0x3, 0x2}, {0x6, &(0x7f0000000ac0)=0x6, 0x6f56143aabde4a7a}, {0x191fca21, &(0x7f0000000b00)=0x9, 0x2}, {0x69, &(0x7f0000000b40), 0x82}, {0x9, &(0x7f0000000b80)=0xfffffffffffffc01, 0x82}, {0x5, &(0x7f0000000bc0)=0x4, 0x2}, {0x6, &(0x7f0000000c00)=0x4, 0x2}, {0xa, &(0x7f0000000080)=0x100000001, 0x82}, {0x14, &(0x7f0000000c80)=0xfce, 0x82}, {0x2, &(0x7f0000000e00)=0x7fff, 0x82}, {0x50, &(0x7f0000000e40)=0x3ff, 0x2}, {0x8, &(0x7f0000000e80)=0x800, 0x2}, {0x4, &(0x7f0000000ec0), 0x82}, {0x6, &(0x7f0000000f00)=0x1, 0x82}, {0xbe6, &(0x7f0000001a00)=0x185, 0x2}, {0xd, &(0x7f0000000640)=0xfac, 0x2}, {0x3, &(0x7f0000001a80)=0xe, 0x2}], 0x2e, 0x0, &(0x7f0000001f40)={0x77359400}, 0x1) (async) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r11 = getpid() r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}}, r11, 0x0, 0xffffffffffffffff, 0x0) r13 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r13, 0x0, r12, 0x0) 1.236872802s ago: executing program 3 (id=414): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) fallocate(r0, 0x0, 0x0, 0x8000c62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xa, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.189787352s ago: executing program 1 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$eJzs3U1rG9caAOB35K98XjsQwr2Xy60hi6akkWO7Hwl0ka5KaUMD7T41tmKC5ShYcojdQJNFs+mmhEIpDZSs2+67DP0D/RWBNhBKMC2lG5eRR45iS5bqyLYSPQ9Mcs7M2O95NXMOZ3wkFEDPGk3/yUX8JyK+SCKG6471R3ZwdO28lcc3ptMtidXVD39LIsn21c5Psv8PZpV/R8RPn0WczG2OW15anpsqFgsLWX2sMn91rLy0fOry/NRsYbZwZWJy8szrkxNn33yjY7m+cuGPrz+4/+6Zz4+vfPXDwyN3kjgXh7Jj9Xk8g5v1ldEYzV6TgTi34cTxDgTrJsleN4Bt6cv6+UCkY8Bw9GW9HnjxfRoRq0CPSvR/6FG1eUDt2b5Dz8HPjUdvrz0Abc6/f+1vI7Gv+mx0YCV56skofd4d6UD8NMaPv969k27Rub9DALR081ZEnO7v3zz+Jdn4t32n2zhnYwzjH+ye++n859VG85/c+vwnGsx/Djbou9vRuv/nHnYgTFPp/O+thvPf9UWrkb6sdrg65xtILl0uFtKx7V8RcSIGhtL6Vus5Z1YerDY7Vj//S7c0fm0umLXjYf/Q0z8zM1WZepac6z26FfHfhvPfZP36Jw2uf/p6XGgzxrHC3f83O9Y6/521ei/i5YbX/8mKVrL1+uRY9X4Yq90Vm/1++9jPzeLvdf7p9T+wlv+f2SPhhvxrN1+2Xlv+5zG+3fdXodmxtu//wSd70vt/MPmoWq7tvj5VqSyMRwwm72/eP/HkZ2v12vlp/ieObz3+Nbr/90fEx23mf/vo9//bfv47K81/Zuv7fySpX6/fRuHBe5980yx+e9f/tWrpRLannfGv3QY+y2sHAAAAAAAA3SYXEYciyeXXy7lcPr/2/o6jcSBXLJUrJy+VFq/MRPWzsiMxkKutdA/XvR9iPHs/bK0+saE+GRFHIuLLvv3Ven66VJzZ6+QBAAAAAAAAAAAAAAAAAACgSxxs8vn/1C99e906YMe1+srvey/tUkOAXdfyK/878U1PQFdq2f+BF5b+D71L/4fepf9D79L/oXfp/9C79H/oXfo/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNSF8+fTbXXl8Y3ptD5zbWlxrnTt1EyhPJefX5zOT5cWruZnS6XZYiE/XZpv9fuKpdLV8YlYvD5WKZQrY+Wl5YvzpcUrlYuX5787HFEY2JWsAAAAAAAAAAAAAAAAAAAA4PlSXlqemyoWCwvdXRjMmrvjsYZ2PsQ2CsPRFc1oWOjvjmb0UmEodiFW/Shx9p29GZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3fAQAA//+7aTSM") r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 1.184060862s ago: executing program 4 (id=416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfffffe9c, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010101, 0x4e22, 0x1, 'lblcr\x00', 0x2c, 0x10000, 0x100003}, 0x2c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x6, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0x0, 0x1, 0x5c}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x821, 0x2000}, 0x2c) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) socket(0x27, 0x80000, 0xfffffffd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x8, 0x80805, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3, 0x0, 0x8001}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000080000000b088388d1e130c1d8f52a59262691eeac551e9aa6f43ffc51860f13c65cf247a3645d1bbdf6877690f475788b491ef43be22784be28c4ebc34a2499f8dc0eb0c696ec4b8a14dc6231c640f767d1ae4ce65b0adeace90a56edde1c2f5518b2c01a", @ANYRES16=r0, @ANYRESOCT=r6], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001900)=ANY=[@ANYBLOB="3636e9f69be8760aa76843280ba3b80b080d3d502bb99190c1d90c10998ccf94d5aeb77a46721495cced3be7e0b45f53e35342576f06d56668625e2ca0f8baf6c03c78ad31f76b8fead295c0450959b8f657441fe7de3c66618c10cfbfc341f72f6d366fbe9653e828bc229e8da66e521bbb6681166411210aae1038f39aa9da1d55782f428310c8ce9e4476de17132d0b4f4d8d1b3eb758b44d9267d0a581f47ab92303b6fb6ccfa97289d8bcd1d7510b76a6a17482c65859ef487355677fc308a29c02145edcb8d3c6a95f3213ff045b818ba035abde8a2052807b4539f121dd01b42908cc5d78c562b224c26480a14178847e4fbf0ded1c1265262d3c80ed57c6f4b0155ab7462f2cfb4a55cee5bf7f0bc989e008de1b79d384382d16ab19ee8b0f9a5c44e7a4f43884c2d027e83e688e26cb1117eb853b9aec1e8bb167284d61e9f1e706213c7cb2cc8e1269164b2e79bd904cf761ad28de74949a71ae6641a5298e33eebad29b1a7e74d3c7bb5dac6253310be213e386ea0cfcf649457345ab47f6d364fda9077cd1444156b375571ef0a758939e3c6fb77d1a7fb729306fdf89b893bdd8b0623ef9240f30202592b9e2632a0bfd981a577ca487c21abbe2ad11c6bacb8472ce101bccc473cb798ab493e2059b0eb315fdfb08beb19b09398efa0be595803f922e794cd3a6242f11d8a062606dc153dd0458abe7a8bd4f2df16b0013d1cee65ed53a96098e55a6f65761d7a1763f03c5f8fbb5ae2edfe9f886fa873d16bd66419eb19afa4cb04d6842b652c2a044a1cfe11727dfdb8d520da064a1f44d17aa25c078c2616f1e0a39e7f18905c69348a87a5bd1743a044d81176f5879c20108156b077f37527db6747ff55447c57f7baca72b1801a35b910c63dc99a32078e0d0c2d1edb1559c28c68703b6fca9cb660b66a8723dfc4c73b1d0cc219fc323880e0577c324d86f2087b4fe7097cf233a3d720eb8e750274f92c829a0fa7ef326553cf60a4bf6153576482f282bcced8e21df490e666e4de9cf02e4d5661563dc515a74d91fd1dfa658861c154a9cee348d25964af2559a9ee934dc575ecc3d6ac666dd147cbff9c9c6d393e082d92a28d6a7498ffe88525d49935a75357e2f12c96f572dc9ad333a6b84272f321ba0deb8c11af7d4eb6d8d4f1d6bbf1f20180a038106d98b5f7ccfcb921eb360013b33bd8be6a6ffe25c75d02e9707e3bc0cc375a3c5b19f5af984584aa14f6157dd7bdb9aa43495e26c6b41831a51982e6974b4316afb3fe9e2c41f322fedb18fa5b47bbde05c9e187de98ab079eabd1de54718d8f5bbdb53477aec6f60181800714b6783991235d23fb1c5b043325f51a2bf55bce7e180a3add3b2e5fa34830e617a106139ec5390695be0bd3e028d2975f40af2248a641ae3a508c0aa3c690452d393cf75f39049014f85e23fafd2234c5173864aa57a127a2d58cb9806625c6558c2430a64d7967adc77d89a4dac064cf838f1730d03ca02dc12dc765f1143314510c57716df64b66cc8658f0cc5b35a330c320eed9ef81b7f66ef7fcc2ce074f50f5b2ded8249afaac0369231852fe89909f722ef34548853cd3105397e22c0d2bb715973df7f43f20a52d1de651fbd1e1a8d349e80452fd5adf8d5dcf1dccf3956cb5849d6cd3cef6484d3233bc839cb74f38042cbbc23b7d17c397eb150668ec274a969f6dfa0c8925bc8d9db1a0886b76e03d065b289b331ba058af7dfcd4e6680d4e884db34b9378e7f9e54fbef323de14eeb41f0b930e2e4743bab598f815bb3646186b08d9575d4e14aff8d8d60d80b9399cc006989038353d67ff65e8ac4823f32f5a1610cf6816c92855682bb94b84d555becccf025a601c51999956dd881ffda7b51b3d1dff6b2dc757520839f859e96e7be0a0ff3e57adaa9b4e8e758a27d0042389705b34246de996a4b3a5bec70aaac7c12757d5317140baf57be415287217887b2d1e727a73bb7ad358941129e232013b9ae76328204f905fd76e03484098aeed37ff218b7f5fc0ae7d3bb5ca5e4a9539c07818237342476fcf6575b997f242832f3e568841c3abe13dc31872549c3ef64f91333ab2931b895e4205ca399b2d11dcb374b0c9eb96054827fd17b14d266a054ec667c302dfab06aef1e3eec04bfda44e05ccf315991a0a859506f40b5cd2b7a04d5edfa4a70d8f5e4721dc86c0cb22e3946b5b32822b5b346ab64bfd5a37513f2f0b5f0a1e6d0921ccea5a1e6c547adad64a98fee8f8ea05ffc0c64f45ef6bb918a321ce1c749b45215792fdfe90d90f232954dfef6055b6ea247f713bd66efd14b49a83afec20d7e665148412758894d17a1c31a57a890afb55f8aeb7a64c4ae5d87b87fe8f3454eb9297d88d77f8213063e48b7543809a9ee212201a56e3a6e72e5e3d571fff62fe84a272d58fd5d3e13b3bd640c1005ee794bced4ad7c0025eaa2023efb91cf4d8bfa05c807e26f4ce4121049eed7b07155fa24dfe2a6cbc30d27fe7a899aaa4dd81a52e10e5604d8bf89b8f966c6255d6f600aa92776acc11ada8081bf1f631c02b965205596bdd6cdafc91553f79063e742827af5bfe3e93fd1ac93f6701c341a94e99a0a5daca2728e0aec90180d746bb9e692a0f52a91219f54e87e10e954c45d921482f46b9073d432a96f2822bfe6ae452f49721113460915435c80cadeadd43d9975ca5d703ddecefebcba56c6cbbcac340e177d304fddbb5cb0c48012af8fdbdb9f4b44bb6039fd2e9f6b92cbed50103b93e773678ee0e7fc9f3c91ac26ef645b98aa217cb5507e4d21ac5be2a093f6a440ce7bb05528be6cbccb5157759ac356867f6327cc2559b07384d2e2ecaf1b1881b558a1cfe80b164665b8e4f65e8513b26198e47a022408625d5507f2bcc4a67d15d88710f4ae2ef55d1e80f7ef8533dc1b5c154536153e959b51ea424b7d55844fa9f181f6e081ab3718ec0780f45498c1f72ef5dd8b0de778f0edb02e664f3b5e49121fa2bc059cfa082bb257bea66ce4d6876053f8e688266a39c304126040fcf8407e6e1fa282640d94ddae1b51e177ac57c9f93237f910c675426caae10e88bd4d262e7fb5cf4ed6256b6ca3717cbbc5e1d9decb4aea50237c1e13843ad15addceee7d1bc47754bea8441c30fa4923d9a5fddcdfdd02fbaa34f41e0222c2877b6dc65e8a7c0f2e2ac233e8d41efcca1c9252194316154c7a06b700863dba4b2dc0af85a541a3b9d38c0b6937f39804c95ee0179f604f500ea70619602a81ecd00bc95ed89507588d3d511aea1ca4da54ec3bcd58ba3efa4b98cbc5c332afdc4047b7477510cf64e9dde547148437f39c8e039240cf595ba96de72b60d7fa63840456f35815a892c6c808020f75a63f36099cd89b22ccc158788cbd00e51d18a5f061e1d4b705ec436cf2292468f7fed2c5f04783729a12c7f4d660291111c461ec29768c29a81545e00a2b07b43ebb2b2fdc311a10cdddc241df52ff4367a74de7812ec6495bd4a4e8dab128062e3deb51a320268aed9914a457894b796d5a3720af12203c5eccd9570931b877ed1ff8b94c945d473766f5f57ee01de2357afa6b6f0d75f3da955e299692dc2589fe078efaacb444ad3684c1dc1ba5cada0b6b583fc8143f9ce1fc35966b75f8d5a369855c47acf942633a2ed148be2aeb1f8ba914f93a14869052c1338e1b49b212040d6c10f7e995a246d58c0160953a90956b770fa88634123f9fcc6c3f12389347ff067afcba72fd99b885cca98d8b7ec646fd4a069180ea414f6711f0dc01792dea27771f6a5357d785b8707fa9b8a0f054bcd0c92faab2ffcf75cbb4c1d208f357c9b58474a29902f50f717b421288ce4bd29936b60ad60975999df96b273d2eae3a79144f70c50d68edec116803277e69c0c3c2a8eefa2ef15372db2df11ab20019e24a194c24421cc4b313c700aa6d1ee7cc492c950d8b616221519a9efb5cd4493b586044fe117d3c1bcdad8067cdf50b16712b996cdec8dd0c16eeedb4b169341fa5163a4715f154988d378051102fe3e7c4bb286c256e17a566bbf507b2ddc2570f4f60009709c1b9ccd695dfd3b39312529ba3692e513fc3f4f89903ef75821770f8d643b946b82c97c0ff089f105dde100312003bead36fe94d68df6a01135505458bcb820d152a449fb942c0e4329d88efcf3d34bccdccf4b79d542ff4e6fc9f238a5320e6fbd5a3ae25570c494b21ca2c0668610af81fe6228249926a236dbc0278634e95329a821684cd2e908f0f311a3bb332009211550967d6ed6eb144355dbbb6ef05527c83ecf15206db77a50cf22e92054c47cb6852822cd94a4f02dc170a584f6bb46165b841ece2dd020f85b334e8e6eb2e6422fbeb6cb8711532a05fc5ad1135522985834925d4617b545b04e3139f1e230c107a56780a5dc4412efb221e62a34e35889b36f07221eb384beae4bf2a2d9c9ddf55d49c6ece5f475600d1282a0a6de58dcf03055b2f3d97560dd9d3794fb12e256c63698efb5809d852664d2e0c32929ad46cf4897ffb4d698bd6dd8cb59c3174f6b2bd4f2df52a871e911612c0be2d622e4732bfa6048f83d435c9f2ec533ae8db426d5713c447dc3d2a9f20e6d7a1ad71a0498f8fb42afe3cedbab2b5a722778490b2b85607af7a84711239eb7011bb0da9572aaa3e7a73df0fbb8565d0063e56f5e4a9cf91fb1aae8b318715bdc30e7ada5077abe386b9e6ed13cde908adcd8df66f9a1d56165ef6794251d3d840cd252269d57834d8db8f5af39f64a72e56769efb25ee43c56da828253063d236d31025c497f2290d6dc309ae7fc4c5a0cf279793c4bc5d43998fe8f63c6649694b5fbca2917ae4d173f06caff1081684d47b83b56e904ee3ae9054efc4cde83f65a5be749871e21cc500bf8bbc46b2984e8fdc1ed14bd70b9cca8b6de74e6f680709d68570e23f47c52a87c0675183b226fc3237a742bd74875a17ee10ab19eafbe8e4e17eb5f2d54bee3d658af456c0ef15510b4ba3e5ba708a086fc7c8dfecc130c65197ebf4909e49c2a5cf07b865c85861d94b11a7de9dfd332fa2803b73b563ae022ef5f15b282016ed3c7f34a4e590c46dbb9b199f8831493ba900838bc4525b25ff2a2c88319aa9ac42e3e52e4934fc10d787bc6a35974549f8f1e12b1b48c9a4d79d934fb89c3a2d72772f3a88553dff0ee6f50525781c591933262a5911137970c7cce3f7ce78cfe26bcb6b6536cc7513a7ad8430389d7ee543329c081da05816eae4a9e791a4f40ee7d9f9babc1ec9d25cb31017e81e212f0a7b3b3484804f40bd8422f6818ab69b84eb4ebddca64553d02a96479752b2cbd53711822a018e66e5d91381612d913ec1d93e575e5172dcd6beca28b23c6c72bc87f0955b0ada8a47f14f454668942563f953e374ed157f8c167baf305fd4668d351a93108a207f4fa02ab2d3c7251cf5bb244ff7d10515f23ccd9852c037d41320e21686da53fc6fc618db76ecfcf15122fb0f5504137c07d9a60da2ace397b3f4a03bf38c26ba1601304a4452caafc9f81f82102d73746899adfd43cdc1422f3b3eb563a6b4abf16caeec128bea4221e1f4b85080ae96c7de2bd97110caa3bbab999188a0a1ee477f88138a2c3de28c728913a618c6465aaf52520fb6d458e01ead09df80b5bbfb6a20d420969ee6f5aa4a62cb17450b9e001db2de77c61de4ee37ae7a7e38c037a29d86b44743bbe1590b8c06df701eb4c887a3d650f25e27003fe415d3eae4bef284cbe73ef8b22455d580717adb26", @ANYRES8=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7, 0x0, 0xffffffff}, 0x18) close_range(0xffffffffffffffff, r8, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000300), 0x53, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffc65) 1.089262574s ago: executing program 3 (id=417): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 1.088712284s ago: executing program 2 (id=418): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{@errors_remount}, {@sysvgroups}, {@resuid}, {@jqfmt_vfsold}, {@data_ordered}, {@resuid={'resuid', 0x3d, 0xee00}}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5ee, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkysHoyYMXT4aEqOFo4prZzpRuO9sfS7sLnc8nWfrmvRnem06/OzNv35sNoLQG038qEXsjYjqJ6E/mF8s6IyscXFjv3j+fnE5fSVSrb/yVRJLl5esn2c++bOOeiPjlpyT2dKysd2buyvnxqanJy9ny8OyF6eGZuSsHz10YPzt5dvLi6Eujx44eOXps5FBT+3W1IO/k9fc/7P9s7O3vvvk3Gfn+97Ekjser2YpL92OzDMZg7XeSrCzqO7bZlbVJR/Z3svQQJ51Fa3a1rlGsW3780qPzVPRHR9w/eP3x6WttbRywpapJRHW5HXkhsL0lwhxKKr8OyO/tl98HV1p+RQK0yt0TCx0AK+O/c6FvMHpqfQM77yWxtFsniYjmeubq7YqI27fGrp+5NXY9tqgfDig2fy0ini6K/6QW/wPREwO1+K/UxX96XXAq+5nmv95k/cu7isU/tM5C/PesGv/RIP7fWRL/7zZZ/+D95Hu9dfHf2+wuAQAAAAAAQGndPBERLxZ9/l9ZHP8TBeN/+iLi+CbUP7hseeXn/5U7m1ANUODuiYhXCsf/VvLRvwMdWeqx2niAruTMuanJQxHxeEQciK4d6fLIKnUc/HzP143KBrPxf/krrf92NhYwa8edzh3120yMz44/6H4DEXevRTxTOP43WTz/J7XhvvNLpwvU3g+m11nHnudvnGpUtnb8A1ul+m3E/sLz//2nViSrP59juHY9MJxfFaz07Mdf/NCo/mbjv/ARE8CGpOf/navH/0Cy9Hk9Mxuv4/BcZ7VBUXez1//dyZu1R850Z3kfjc/OXh6J6E5OdqS5dfmjG28zbEd5POTxksb/gedW7/9LCvr/eiNiftn/nfxdP6c49+R/fX80ao/rf2ifNP4nNnT+33hi9MbAj43qX9/5/0jtXH8gy9H/Bwu+ysO0uz6/IBw7i4pa3V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A4qEbErksrQYrpSGRqK6IuIJ2JnZerSzOwLZy59cHEiLat9/38l/6bf/oXlJP/+/4Ely6PLlg9HxO6I+LKjt7Y8dPrS1ES7dx4AAAAAAAAAAAAAAAAAAAAeEn0N5v+n/uxod+uALdfZ7gYAbVMQ/7+2ox1A6zn/Q3mJfygv8Q/lJf6hvMQ/lJf4h/IS/1Be4h8AAAAAALaV3ftu/pZExPzLvbVXqjsr62pry4CtVml3A4C28YgfKC9Df6C83OMDyRrlPQ03WmvL1UyffoCNAQAAAAAAAAAAAKB09u81/x/Kyvx/KC/z/6G88vn/+9rcDqD13OMDscZM/sL5/2tuBQAAAAAAAAAAAABsppm5K+fHp6YmLz8KiZ+3tIq32r+DrU5Uq9Wr6V/Bw9KeRzyRD4V/WNqzLJHP9VvfVu17TwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr9HwAA//87QSCw") openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="100005000000000020"], 0x2c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=':%\xcc\x00', 0x4, 0x1) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x800) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = creat(&(0x7f0000000140)='./file0\x00', 0x28) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r9, {r11, r12}}, './file0\x00'}) setreuid(r8, r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x100000004}, 0x18) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000340)=""/128, 0x80}], 0x1, 0x12c, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) removexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 1.030008565s ago: executing program 1 (id=419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 9) 1.029477885s ago: executing program 3 (id=420): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000000140)=""/38, &(0x7f0000000240)=0x26) lseek(0xffffffffffffffff, 0x10001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x7, 0xfa}}}}]}, 0x40}}, 0x4000010) 526.930392ms ago: executing program 1 (id=421): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x3, 0x2, 0xffffffff}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0xffffffffffffffad) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) mknod$loop(0x0, 0x80, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r5}, 0x38) 253.344416ms ago: executing program 2 (id=422): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = getpid() r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x2, 0xff, 0x1, 0x0, 0x6, 0x1a000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x6, @perf_bp, 0x10004, 0x6, 0x3, 0x3, 0x6, 0x9, 0x6, 0x0, 0x0, 0x0, 0x6d}, r0, 0xd, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001340)={0x424, 0x0, 0x300, 0x4, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x92, 0x3, "bcf262abadd05868f59183524278b32d47487a90317820927b4bd93b554efafb42b70083684c419b20ed769de5f79bd93a83316f238e1ba9bfc0fc01c8dc025d09f817aef32eca37c8b8c6bbd68c2e1d96695cbda7f8e731a91f2b727e5f78f58495c532d0a8899d086eb79be29b140a086b712585473173b23914a646ab5f9af2baad8ef82c556f301db09c0410"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "8491b6587bdb295214f3b91cf424231713b665275cb64c582d7a09ac61bd4f80ca2d0637471628abd3562c570c7c8f502fe436d35a8be7197d06deb7fc299b0032b96ef261b7bc73cf9e03ae64f98964e913c093ec198eb211beeaa3f48f2515357708e5df7efbc857772c498f3e03f1752b991aab1f57c2800c462125e1a7e4be7f57e6cee30ca8843247f182aadb8b096f35317e6209b58e3b99698dc8a793b158a5c8b7875f9e160f06e99bd8f99cfcc3da9afbc4122fa97d73f41c04535c6867459b2d55b3d6"}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "1d02a3da1bf2a0db4bd8eceb315cb25681c05546d08a57a696d9ed18a2409e065e1851761d41ebe799f8363b951c7d942ea1eea90f87962c71fa4e3f0e6472ca43cda0781e02f4f8"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x80b5685}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45fa}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff48e}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r7, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 252.654067ms ago: executing program 4 (id=423): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) kcmp(r1, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f28db65635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x1}, 0x18) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 158.697388ms ago: executing program 4 (id=424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 90.964499ms ago: executing program 2 (id=425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000240)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @b={0x2, 0x5, 0x1, 0x2, {0x1, "ef"}, 0x1}}, 0xa) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5e10075718bef81412511e189459a128000000", @ANYBLOB="a23c0426d1b56e1346082345f9a68bfd1bbd88ceaddddb84fa737874c5622789f4dbb35874497aa90192aaf99624ce3621aaaa7bbb273442efafa0f19be4c238d04906675faffd73c6e741da8bdd41e747370392097861ab0459b04dde6c01b80bf7337bc7c1d61a71d2986ed2a68d1450c6e1a512f21e1145158822c3", @ANYBLOB="1bb30400000000000000010000000c000600020000000200000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 90.666859ms ago: executing program 3 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$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") r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 76.036099ms ago: executing program 4 (id=427): syz_emit_ethernet(0xbc, &(0x7f0000000100)={@local, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@generic={0x18, "2c791a06224f628907def88aabfafcc1b7a0b0ad043b6ccc5a1d3d811c88463cd5b62fc731fc5683ac1cfbc5ae45e5e43c38071da90ab8d76271b25fbb0a274104a1aed65bf07d956ab31e4515bc787a2c77617cedeb8bcbeff25796be60556727b199e0a8f4e891c86a29409d9edcb3e79a6cfbfeebd835242703a6cde7e9bd45ff50b3bceca796fb4373cbe2128069980b5d149aae9baf7560f9c8af94f12e7a164506ae907c8ab678"}}}, &(0x7f0000000280)={0x0, 0x4, [0x95f, 0x6a4, 0xa68, 0xb41]}) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x2, 0x9}}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 60.225249ms ago: executing program 3 (id=428): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net\x00') getdents(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001000)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x75, &(0x7f0000000a00)=[{&(0x7f00000007c0)="0f61647125340e57ea5f109750cf0e23d9079468c1b482cd646aa9ce73323598a0c07bcfa93bed4fca585a74666b9ca16dc695480672798faa3183b35844d5ae9c0625fcc751a936b698d02defbc5c0d39722f5c470cefd058acde48926bc295c2", 0x61}, {&(0x7f0000000940)="42f9c79d1605706a10c61cc4c7d341347c7f639c95896c78aa23b50fdc2e289b473e0f4d26596b34b5c330f79331e0ba1a1f9ef757ec85c302985f780473fd26bd318e9b63a605eb0ecf5eeff0eb8cede079491ce1de069e2a877cd959ada1175474", 0x62}, {&(0x7f0000000840)="e4177eaad024029ac2", 0x9}], 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="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"], 0x28, 0x48080}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000010c0)="314c33736028746411d6d72cf81cd0959a4d98562add2f805b6039b61736adaa994194a02fc240ca9b6860d39a0ef059ac2155d7ecbd5ea250d1889bfce1f446289863b971450dde3a91eab76bc0b9ea7586951bbaac3b52e4eaa1e4402f493e0b46626581a7db5eef1b95d3c521fc584a4c0acadfb49c953a51b73a1153ded5e8bb3f216fce94a5bffb80239516553e6baf04a5", 0x94}, {&(0x7f0000000b40)="a1f54d30c219acf06a36a0b91390adda63396c69484bb912955a7e9a84a0b8b78656e9e28612a81f046a482914784fa022bb5e32cfbf77009a7926cb8878e6f9e02cd383f70bdcc53b9f375e323caf6a0d20c0e1419bab49190fbbd5b60407aa255e9ea7d55062d2bb5a28fdbf2cff1a993e030f148a99cc53fce53079c6b7f6897d693cc76a978d64da21fc1dd0c91cc86babe9dc9d9515fa786955c95e01e37ffaa2", 0xa3}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r2, r4]}}], 0x48, 0x1}}, {{&(0x7f0000000dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e40)="5e6edfcd65423d01b9d3efdd046ecaa8b775bfd3e588fafa0aebda1b5e091f610871a38c8bfbbf7a86751204f15144e8f0b71ed5fec8bd40765a6878475678b979593389ed08fabed14bb5418d220f9ec6a725add663f525b1e4c7afc3dc4e45fe66c10acb94290927a40f2947cef6eab0e98a90c5b2f46d5339f172b10551c61619dd9ea0ccb31aa5ed68ec1db191fb9e69a52153d1799359f0f3c3e841929c7e5a62035e64f12fe20cd16faf9fdd2e3cf47550c65ba4776de2349c17dc12e574bacb4acd7600d8b679dce2c64939cfcef7b422e8af6cf606afd35e9b", 0xdd}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="340001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50, 0x20010080}}], 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x4b}, 0x18) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0xfe}, 'port1\x00', 0x0, 0x400, 0xfffffffc, 0x3, 0x6c54, 0x3d, 0x2, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r8) 33.22488ms ago: executing program 3 (id=429): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x248002, 0x90) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sched_setaffinity(0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x1000, 0x800, &(0x7f00000003c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x814) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) link(&(0x7f0000000280)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=430): socketpair(0x26, 0x3, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x61, 0x8000000000000000, r2}) modify_ldt$write(0x1, &(0x7f0000000100)={0x3, 0x20000800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x22, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd}}, @jmp={0x5, 0x1, 0x4, 0x6, 0x2f46cbd4ef5a537a, 0xffffffffffffffe0, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @generic={0x4, 0x3, 0x2, 0x1, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x44, &(0x7f0000000300)=""/68, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x4, 0x4, 0x2}, {0x2, 0x4, 0x9, 0x4}, {0x3, 0x5, 0x3, 0x7}], 0x10, 0xc11, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='btrfs_add_block_group\x00', r3, 0x0, 0x800}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000081) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x24040880) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000840), 0x9) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x204803, 0x0) connect$inet(r8, &(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0xf1, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@generic={0x19, "1637fbf318abfc6351fc07b59bb9b18fa1aff6d62b74df278a1ce4ab200497253985ef01c492c0ea22c13d3a8d342be6c3c4e98b106213199ce1103c49fa8f79686f263102ad0cc2d14710d7a3de7f3fa4df0a5508d088acfc13e3c1463d05fee9e8bbc55703fe90a04f4cd93cea486f403f0f1f6701aaf0d07eb899816596d55f02379627d37b00fe1b41112d38971beb73ff6ac70df642b208a0fee001203d8645eea7f3d0bfd2464e0d292848aea51cf1f6b725c593f0616c0ae9bb1708a8990a330aa2f038f4204afdd778d1a1b3e56e8d7c242463947b3d064616cce7f8d73884"}}}, &(0x7f0000000a00)={0x1, 0x2, [0x3da, 0x26, 0xbfe, 0xf4]}) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x38, 0xfe, 0x40, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x9, 0x6}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000b40)={0x0, @xdp={0x2c, 0xc, r9}, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8001, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000b00)='vlan1\x00', 0x7fff, 0x8001, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x2, &(0x7f0000000bc0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10001}], &(0x7f0000000c00)='syzkaller\x00', 0x3, 0xc6, &(0x7f0000000c40)=""/198, 0x41000, 0x0, '\x00', r10, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x0, 0xe, 0xa, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r8, r8, r8, r8], &(0x7f0000000dc0)=[{0x1, 0x1, 0x2, 0xa}, {0x4, 0x5, 0x3, 0x4}, {0x0, 0x5, 0xf, 0x6}, {0x0, 0x2, 0x2}], 0x10, 0x1, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x48000) sendmsg$nl_route_sched(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {0x5, 0xfff2}, {0x9, 0x10}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x11) ioctl$TIOCSIG(r7, 0x40045436, 0x38) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) timerfd_settime(r8, 0x1, &(0x7f0000001040)={{0x0, 0x3938700}, {r11, r12+60000000}}, &(0x7f0000001080)) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r13, 0x8902, &(0x7f00000010c0)) bind(r8, &(0x7f0000001100)=@can={0x1d, r9}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000011c0)={'ip6_vti0\x00', 0x1000}) kernel console output (not intermixed with test programs): (ED25519) to the list of known hosts. [ 38.723659][ T30] audit: type=1400 audit(1750563929.469:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 38.724925][ T3294] cgroup: Unknown subsys name 'net' [ 38.748670][ T30] audit: type=1400 audit(1750563929.469:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 38.779447][ T30] audit: type=1400 audit(1750563929.509:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 38.919903][ T3294] cgroup: Unknown subsys name 'cpuset' [ 38.926617][ T3294] cgroup: Unknown subsys name 'rlimit' [ 39.037559][ T30] audit: type=1400 audit(1750563929.779:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.063052][ T30] audit: type=1400 audit(1750563929.779:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.085543][ T30] audit: type=1400 audit(1750563929.789:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.109198][ T30] audit: type=1400 audit(1750563929.789:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 39.127304][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 39.131673][ T30] audit: type=1400 audit(1750563929.809:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.168740][ T30] audit: type=1400 audit(1750563929.809:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.193989][ T30] audit: type=1400 audit(1750563929.899:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.215172][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.596466][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 40.624293][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 40.660701][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 40.692241][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 40.760495][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.768314][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.776458][ T3309] bridge_slave_0: entered allmulticast mode [ 40.783950][ T3309] bridge_slave_0: entered promiscuous mode [ 40.810085][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.817851][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.826200][ T3305] bridge_slave_0: entered allmulticast mode [ 40.833483][ T3305] bridge_slave_0: entered promiscuous mode [ 40.846358][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.854352][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.864349][ T3309] bridge_slave_1: entered allmulticast mode [ 40.871545][ T3309] bridge_slave_1: entered promiscuous mode [ 40.891966][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.899994][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.907900][ T3306] bridge_slave_0: entered allmulticast mode [ 40.915750][ T3306] bridge_slave_0: entered promiscuous mode [ 40.922971][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.932143][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.940232][ T3305] bridge_slave_1: entered allmulticast mode [ 40.947881][ T3305] bridge_slave_1: entered promiscuous mode [ 40.955362][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.963885][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.971966][ T3312] bridge_slave_0: entered allmulticast mode [ 40.978820][ T3312] bridge_slave_0: entered promiscuous mode [ 40.991401][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 41.007896][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.015963][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.024106][ T3306] bridge_slave_1: entered allmulticast mode [ 41.032503][ T3306] bridge_slave_1: entered promiscuous mode [ 41.045027][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.052788][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.061003][ T3312] bridge_slave_1: entered allmulticast mode [ 41.068125][ T3312] bridge_slave_1: entered promiscuous mode [ 41.079011][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.108226][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.130258][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.141339][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.168719][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.182697][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.196197][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.207245][ T3309] team0: Port device team_slave_0 added [ 41.214580][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.238851][ T3309] team0: Port device team_slave_1 added [ 41.267055][ T3306] team0: Port device team_slave_0 added [ 41.283295][ T3305] team0: Port device team_slave_0 added [ 41.290542][ T3305] team0: Port device team_slave_1 added [ 41.302615][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.310973][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.318290][ T3316] bridge_slave_0: entered allmulticast mode [ 41.324858][ T3316] bridge_slave_0: entered promiscuous mode [ 41.334877][ T3306] team0: Port device team_slave_1 added [ 41.353094][ T3312] team0: Port device team_slave_0 added [ 41.361175][ T3312] team0: Port device team_slave_1 added [ 41.373187][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.381539][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.390470][ T3316] bridge_slave_1: entered allmulticast mode [ 41.397669][ T3316] bridge_slave_1: entered promiscuous mode [ 41.409833][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.417255][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.446928][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.476025][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.484115][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.517994][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.530945][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.539618][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.569162][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.590392][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.597868][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.627334][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.645879][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.656254][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.664726][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.693561][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.723005][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.731045][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.764411][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.777141][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.784918][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.814558][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.831090][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.853269][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.860659][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.894053][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.942725][ T3306] hsr_slave_0: entered promiscuous mode [ 41.951350][ T3306] hsr_slave_1: entered promiscuous mode [ 41.967913][ T3316] team0: Port device team_slave_0 added [ 41.976493][ T3309] hsr_slave_0: entered promiscuous mode [ 41.983490][ T3309] hsr_slave_1: entered promiscuous mode [ 41.990621][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.000209][ T3309] Cannot create hsr debugfs directory [ 42.019457][ T3316] team0: Port device team_slave_1 added [ 42.045683][ T3312] hsr_slave_0: entered promiscuous mode [ 42.052608][ T3312] hsr_slave_1: entered promiscuous mode [ 42.060984][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.069730][ T3312] Cannot create hsr debugfs directory [ 42.100111][ T3305] hsr_slave_0: entered promiscuous mode [ 42.106771][ T3305] hsr_slave_1: entered promiscuous mode [ 42.113219][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.121955][ T3305] Cannot create hsr debugfs directory [ 42.134580][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.146582][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.176194][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.201834][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.209899][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.238398][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.326668][ T3316] hsr_slave_0: entered promiscuous mode [ 42.333254][ T3316] hsr_slave_1: entered promiscuous mode [ 42.340131][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.348314][ T3316] Cannot create hsr debugfs directory [ 42.464128][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.480342][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.492070][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.510235][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.537108][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.547482][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.562421][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.572624][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.601468][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.612086][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.630289][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.640496][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.690190][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.703534][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.719158][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.732770][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.764616][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.789867][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.799887][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.816744][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.824723][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.835617][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.845027][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.864201][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.880953][ T2249] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.889118][ T2249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.899402][ T2249] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.906940][ T2249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.921182][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.938039][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.946036][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.962905][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.975212][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.991072][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.018141][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.026344][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.036881][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.044987][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.055153][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.062601][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.121518][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.133062][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.155331][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.176871][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.196395][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.224219][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.237661][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.246358][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.260501][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.280629][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.288027][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.316505][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.332640][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.340628][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.377624][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.418569][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.426377][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.477979][ T3309] veth0_vlan: entered promiscuous mode [ 43.501688][ T3309] veth1_vlan: entered promiscuous mode [ 43.516159][ T3306] veth0_vlan: entered promiscuous mode [ 43.524506][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.540587][ T3306] veth1_vlan: entered promiscuous mode [ 43.579619][ T3309] veth0_macvtap: entered promiscuous mode [ 43.603168][ T3306] veth0_macvtap: entered promiscuous mode [ 43.615012][ T3309] veth1_macvtap: entered promiscuous mode [ 43.630926][ T3306] veth1_macvtap: entered promiscuous mode [ 43.652717][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.674063][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.686656][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.711868][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.724832][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.734305][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.744339][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.753753][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.777261][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.798684][ T3312] veth0_vlan: entered promiscuous mode [ 43.807490][ T3305] veth0_vlan: entered promiscuous mode [ 43.822758][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.833151][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.842969][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.852731][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.868492][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 43.868508][ T30] audit: type=1400 audit(1750563934.619:81): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.dXiq5u/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.873435][ T3305] veth1_vlan: entered promiscuous mode [ 43.893975][ T30] audit: type=1400 audit(1750563934.619:82): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.923954][ T3312] veth1_vlan: entered promiscuous mode [ 43.932636][ T30] audit: type=1400 audit(1750563934.619:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.dXiq5u/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.967544][ T30] audit: type=1400 audit(1750563934.619:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.991170][ T30] audit: type=1400 audit(1750563934.619:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.dXiq5u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.020994][ T30] audit: type=1400 audit(1750563934.619:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.dXiq5u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 44.054231][ T30] audit: type=1400 audit(1750563934.619:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.078372][ T30] audit: type=1400 audit(1750563934.819:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 44.097690][ T3312] veth0_macvtap: entered promiscuous mode [ 44.105138][ T30] audit: type=1400 audit(1750563934.819:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=4106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 44.132796][ T3305] veth0_macvtap: entered promiscuous mode [ 44.147284][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.174843][ T3305] veth1_macvtap: entered promiscuous mode [ 44.190180][ T3312] veth1_macvtap: entered promiscuous mode [ 44.201187][ T30] audit: type=1400 audit(1750563934.949:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.236589][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.257638][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.276086][ T3316] veth0_vlan: entered promiscuous mode [ 44.289251][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.302257][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.323503][ T3316] veth1_vlan: entered promiscuous mode [ 44.336044][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.345477][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.354999][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.364882][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.377109][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.386320][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.395927][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.406086][ T3312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.433042][ T3316] veth0_macvtap: entered promiscuous mode [ 44.455817][ T3316] veth1_macvtap: entered promiscuous mode [ 44.478937][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.518409][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.556835][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.567322][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.577911][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.587103][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.662321][ T3490] xt_hashlimit: max too large, truncated to 1048576 [ 44.716765][ T3491] SELinux: failed to load policy [ 44.749658][ T3496] 9pnet_fd: Insufficient options for proto=fd [ 44.757955][ T3495] loop4: detected capacity change from 0 to 256 [ 44.767746][ T3495] ======================================================= [ 44.767746][ T3495] WARNING: The mand mount option has been deprecated and [ 44.767746][ T3495] and is ignored by this kernel. Remove the mand [ 44.767746][ T3495] option from the mount to silence this warning. [ 44.767746][ T3495] ======================================================= [ 44.831114][ T3498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.846884][ C0] hrtimer: interrupt took 28025 ns [ 44.862891][ T3501] loop0: detected capacity change from 0 to 128 [ 44.887182][ T3495] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 44.896947][ T3495] FAT-fs (loop4): Filesystem has been set read-only [ 44.937017][ T3312] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 45.037762][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 45.136111][ T3519] loop4: detected capacity change from 0 to 1024 [ 45.193898][ T3521] loop2: detected capacity change from 0 to 128 [ 45.202787][ T3519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.249539][ T3519] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.263560][ T3521] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.286238][ T3521] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.346947][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.446197][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.512511][ T3547] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.661231][ T3554] loop4: detected capacity change from 0 to 8192 [ 45.713850][ T3556] loop3: detected capacity change from 0 to 1024 [ 45.715154][ T3554] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.754009][ T3556] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.862090][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.018834][ T3562] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 46.049646][ T3564] loop4: detected capacity change from 0 to 128 [ 46.061037][ T3564] EXT4-fs: Ignoring removed nobh option [ 46.079690][ T3564] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.098125][ T3564] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.271881][ T3498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.310482][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.363373][ T3578] loop1: detected capacity change from 0 to 1024 [ 46.380932][ T3578] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.427183][ T3578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.486276][ T3583] loop4: detected capacity change from 0 to 1024 [ 46.536322][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.549843][ T3583] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.578932][ T3583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.081181][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.112720][ T3598] loop2: detected capacity change from 0 to 128 [ 47.197144][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.211886][ T3608] loop2: detected capacity change from 0 to 128 [ 47.228954][ T3608] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.245552][ T3608] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.320973][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.336271][ T3613] Invalid ELF header magic: != ELF [ 47.397336][ T3615] netlink: 'syz.2.42': attribute type 6 has an invalid length. [ 47.419441][ T3615] loop2: detected capacity change from 0 to 256 [ 47.430606][ T3615] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.456123][ T3615] FAT-fs (loop2): Directory bread(block 64) failed [ 47.466520][ T3615] FAT-fs (loop2): Directory bread(block 65) failed [ 47.503807][ T3615] FAT-fs (loop2): Directory bread(block 66) failed [ 47.530906][ T3620] FAULT_INJECTION: forcing a failure. [ 47.530906][ T3620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.546475][ T3620] CPU: 1 UID: 0 PID: 3620 Comm: syz.3.44 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 47.546583][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.546604][ T3620] Call Trace: [ 47.546612][ T3620] [ 47.546622][ T3620] __dump_stack+0x1d/0x30 [ 47.546654][ T3620] dump_stack_lvl+0xe8/0x140 [ 47.546705][ T3620] dump_stack+0x15/0x1b [ 47.546732][ T3620] should_fail_ex+0x265/0x280 [ 47.546764][ T3620] should_fail+0xb/0x20 [ 47.546792][ T3620] should_fail_usercopy+0x1a/0x20 [ 47.546855][ T3620] strncpy_from_user+0x25/0x230 [ 47.546887][ T3620] strncpy_from_user_nofault+0x68/0xf0 [ 47.546909][ T3620] bpf_bprintf_prepare+0x8f3/0xd50 [ 47.547001][ T3620] ? bpf_trace_run2+0xf5/0x1c0 [ 47.547032][ T3620] bpf_trace_printk+0x84/0x1c0 [ 47.547048][ T3620] ? htab_map_hash+0x15f/0x1d0 [ 47.547153][ T3620] ? bpf_trace_run2+0xf5/0x1c0 [ 47.547190][ T3620] ? __htab_map_lookup_elem+0x148/0x150 [ 47.547219][ T3620] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 47.547242][ T3620] bpf_trace_run2+0x104/0x1c0 [ 47.547377][ T3620] ? hhf_destroy+0x4d/0x240 [ 47.547406][ T3620] ? __pfx_hhf_destroy+0x10/0x10 [ 47.547442][ T3620] ? hhf_destroy+0x4d/0x240 [ 47.547476][ T3620] __traceiter_kfree+0x2b/0x50 [ 47.547512][ T3620] ? hhf_destroy+0x4d/0x240 [ 47.547558][ T3620] kfree+0x27b/0x320 [ 47.547584][ T3620] ? __pfx_hhf_destroy+0x10/0x10 [ 47.547700][ T3620] hhf_destroy+0x4d/0x240 [ 47.547736][ T3620] ? hhf_init+0x157/0x5b0 [ 47.547767][ T3620] ? __pfx_hhf_destroy+0x10/0x10 [ 47.547796][ T3620] qdisc_create+0x8ae/0x9e0 [ 47.547865][ T3620] tc_modify_qdisc+0xe2c/0x1380 [ 47.547988][ T3620] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 47.548081][ T3620] rtnetlink_rcv_msg+0x65a/0x6d0 [ 47.548119][ T3620] netlink_rcv_skb+0x120/0x220 [ 47.548160][ T3620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.548264][ T3620] rtnetlink_rcv+0x1c/0x30 [ 47.548283][ T3620] netlink_unicast+0x59e/0x670 [ 47.548352][ T3620] netlink_sendmsg+0x58b/0x6b0 [ 47.548374][ T3620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.548462][ T3620] __sock_sendmsg+0x142/0x180 [ 47.548494][ T3620] ____sys_sendmsg+0x31e/0x4e0 [ 47.548530][ T3620] ___sys_sendmsg+0x17b/0x1d0 [ 47.548611][ T3620] __x64_sys_sendmsg+0xd4/0x160 [ 47.548660][ T3620] x64_sys_call+0x2999/0x2fb0 [ 47.548689][ T3620] do_syscall_64+0xd2/0x200 [ 47.548716][ T3620] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.548835][ T3620] ? clear_bhb_loop+0x40/0x90 [ 47.548885][ T3620] ? clear_bhb_loop+0x40/0x90 [ 47.548907][ T3620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.548952][ T3620] RIP: 0033:0x7f0fbdfce929 [ 47.548968][ T3620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.548985][ T3620] RSP: 002b:00007f0fbc637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.549013][ T3620] RAX: ffffffffffffffda RBX: 00007f0fbe1f5fa0 RCX: 00007f0fbdfce929 [ 47.549051][ T3620] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 47.549064][ T3620] RBP: 00007f0fbc637090 R08: 0000000000000000 R09: 0000000000000000 [ 47.549075][ T3620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.549087][ T3620] R13: 0000000000000000 R14: 00007f0fbe1f5fa0 R15: 00007ffc76471f28 [ 47.549107][ T3620] [ 47.941892][ T3615] FAT-fs (loop2): Directory bread(block 67) failed [ 47.995801][ T3620] syz.3.44 (3620) used greatest stack depth: 10712 bytes left [ 48.017146][ T3615] FAT-fs (loop2): Directory bread(block 68) failed [ 48.018438][ T3498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.036038][ T3615] FAT-fs (loop2): Directory bread(block 69) failed [ 48.110275][ T3615] FAT-fs (loop2): Directory bread(block 70) failed [ 48.120111][ T3615] FAT-fs (loop2): Directory bread(block 71) failed [ 48.131164][ T3622] vlan2: entered allmulticast mode [ 48.152641][ T3622] dummy0: entered allmulticast mode [ 48.165672][ T3615] FAT-fs (loop2): Directory bread(block 72) failed [ 48.180638][ T3615] FAT-fs (loop2): Directory bread(block 73) failed [ 48.191986][ T3627] syz.3.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.217334][ T3625] loop1: detected capacity change from 0 to 128 [ 48.299756][ T3625] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.363365][ T3635] vlan2: entered allmulticast mode [ 48.364315][ T3625] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.369327][ T3635] dummy0: entered allmulticast mode [ 48.420764][ T3635] Zero length message leads to an empty skb [ 48.431255][ T3498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.483189][ T3638] loop2: detected capacity change from 0 to 512 [ 48.496285][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.525130][ T3498] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.539620][ T3498] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.550904][ T3638] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.49: corrupted in-inode xattr: invalid ea_ino [ 48.576315][ T3498] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586610][ T3638] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.49: couldn't read orphan inode 15 (err -117) [ 48.604227][ T3498] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.618129][ T3638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.633832][ T3638] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 3: comm syz.2.49: lblock 0 mapped to illegal pblock 3 (length 1) [ 48.653316][ T3638] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.49: error -117 reading directory block [ 48.668198][ T3641] loop4: detected capacity change from 0 to 512 [ 48.677474][ T3643] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 48.679430][ T3638] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 3: comm syz.2.49: lblock 0 mapped to illegal pblock 3 (length 1) [ 48.685658][ T3643] FAULT_INJECTION: forcing a failure. [ 48.685658][ T3643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.715666][ T3643] CPU: 1 UID: 0 PID: 3643 Comm: syz.1.50 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 48.715700][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.715712][ T3643] Call Trace: [ 48.715718][ T3643] [ 48.715787][ T3643] __dump_stack+0x1d/0x30 [ 48.715807][ T3643] dump_stack_lvl+0xe8/0x140 [ 48.715826][ T3643] dump_stack+0x15/0x1b [ 48.715841][ T3643] should_fail_ex+0x265/0x280 [ 48.715922][ T3643] should_fail+0xb/0x20 [ 48.715953][ T3643] should_fail_usercopy+0x1a/0x20 [ 48.715985][ T3643] _copy_to_user+0x20/0xa0 [ 48.716088][ T3643] simple_read_from_buffer+0xb5/0x130 [ 48.716132][ T3643] proc_fail_nth_read+0x100/0x140 [ 48.716156][ T3643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.716188][ T3643] vfs_read+0x1a0/0x6f0 [ 48.716255][ T3643] ? __rcu_read_unlock+0x4f/0x70 [ 48.716277][ T3643] ? __fget_files+0x184/0x1c0 [ 48.716299][ T3643] ksys_read+0xda/0x1a0 [ 48.716432][ T3643] __x64_sys_read+0x40/0x50 [ 48.716479][ T3643] x64_sys_call+0x2d77/0x2fb0 [ 48.716500][ T3643] do_syscall_64+0xd2/0x200 [ 48.716584][ T3643] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.716730][ T3643] ? clear_bhb_loop+0x40/0x90 [ 48.716754][ T3643] ? clear_bhb_loop+0x40/0x90 [ 48.716872][ T3643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.716980][ T3643] RIP: 0033:0x7f786a24d33c [ 48.717000][ T3643] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 48.717021][ T3643] RSP: 002b:00007f78688b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.717039][ T3643] RAX: ffffffffffffffda RBX: 00007f786a475fa0 RCX: 00007f786a24d33c [ 48.717050][ T3643] RDX: 000000000000000f RSI: 00007f78688b70a0 RDI: 0000000000000009 [ 48.717062][ T3643] RBP: 00007f78688b7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.717077][ T3643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.717092][ T3643] R13: 0000000000000000 R14: 00007f786a475fa0 R15: 00007ffcdf756a48 [ 48.717180][ T3643] [ 48.718870][ T3638] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.49: error -117 reading directory block [ 48.848305][ T3641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.962000][ T3648] vlan2: entered allmulticast mode [ 48.998334][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.000559][ T3641] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 49.019502][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 49.019520][ T30] audit: type=1400 audit(1750563939.769:325): avc: denied { create } for pid=3646 comm="+}[@" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.049026][ T30] audit: type=1400 audit(1750563939.769:326): avc: denied { setattr } for pid=3646 comm="+}[@" name="file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.077994][ T3648] dummy0: entered allmulticast mode [ 49.093575][ T3641] System zones: 0-2, 18-18, 34-34 [ 49.101119][ T30] audit: type=1326 audit(1750563939.839:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.2.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1083eee929 code=0x0 [ 49.127426][ T3641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.141876][ T3641] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.157092][ T30] audit: type=1400 audit(1750563939.909:328): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.195647][ T3656] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 49.212858][ T3658] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 49.221867][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 49.222262][ T3641] mmap: ext4 (3641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.276902][ T30] audit: type=1400 audit(1750563939.939:329): avc: denied { block_suspend } for pid=3640 comm="ext4" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.279654][ T3665] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 49.300130][ T30] audit: type=1400 audit(1750563939.939:330): avc: denied { watch } for pid=3654 comm="syz.3.55" path="/9/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 49.300176][ T30] audit: type=1400 audit(1750563939.949:331): avc: denied { relabelto } for pid=3654 comm="syz.3.55" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.361470][ T30] audit: type=1400 audit(1750563939.949:332): avc: denied { associate } for pid=3654 comm="syz.3.55" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.391867][ T30] audit: type=1400 audit(1750563939.989:333): avc: denied { create } for pid=3654 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.414407][ T30] audit: type=1400 audit(1750563939.999:334): avc: denied { write } for pid=3654 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.437883][ T3665] ipvlan0: entered allmulticast mode [ 49.444108][ T3665] veth0_vlan: entered allmulticast mode [ 49.460014][ T3665] team0: Device ipvlan0 failed to register rx_handler [ 49.507848][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.556810][ T3669] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.595241][ T3665] syz.1.57 (3665) used greatest stack depth: 10488 bytes left [ 49.616390][ T3669] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.648967][ T3675] loop1: detected capacity change from 0 to 512 [ 49.671341][ T3669] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.689947][ T3677] ref_ctr increment failed for inode: 0x77 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810bb0d080 [ 49.691261][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.716077][ T3676] uprobe: syz.4.61:3676 failed to unregister, leaking uprobe [ 49.718970][ T3675] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.741843][ T3669] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.765423][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.790434][ T3681] loop1: detected capacity change from 0 to 256 [ 50.020435][ T3690] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 50.035175][ T3690] team0: Port device dummy0 added [ 50.044971][ T3690] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 50.059942][ T3690] team0: Port device dummy0 removed [ 50.072282][ T3690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.108994][ T3696] netlink: 'syz.2.69': attribute type 10 has an invalid length. [ 50.116312][ T3692] syz.4.67 (3692) used greatest stack depth: 9464 bytes left [ 50.117898][ T3696] ipvlan0: entered allmulticast mode [ 50.131536][ T3696] veth0_vlan: entered allmulticast mode [ 50.139742][ T3696] team0: Device ipvlan0 failed to register rx_handler [ 50.156209][ T3698] syz_tun: entered allmulticast mode [ 50.209946][ T3702] loop2: detected capacity change from 0 to 128 [ 50.218565][ T3704] netlink: 'syz.4.70': attribute type 39 has an invalid length. [ 50.220404][ T3702] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.243237][ T3702] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.256737][ T3707] loop1: detected capacity change from 0 to 1024 [ 50.265969][ T3704] syz_tun (unregistering): left allmulticast mode [ 50.266253][ T3707] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.300593][ T3707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.327191][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.938360][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.580885][ T3729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 51.618244][ T3731] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET) [ 51.699274][ T3736] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 51.713077][ T3736] team0: Port device dummy0 added [ 51.723357][ T3736] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 51.736465][ T3736] team0: Port device dummy0 removed [ 51.745117][ T3736] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.945143][ T3746] loop4: detected capacity change from 0 to 512 [ 51.953422][ T3746] ext4: Bad value for 'journal_dev' [ 51.988571][ T3748] loop4: detected capacity change from 0 to 1024 [ 51.996567][ T3748] EXT4-fs: Ignoring removed bh option [ 52.011006][ T3748] EXT4-fs (loop4): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.191623][ T3761] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 19: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 52.209022][ T3761] EXT4-fs (loop4): Remounting filesystem read-only [ 52.708667][ T3775] loop1: detected capacity change from 0 to 764 [ 52.715885][ T3775] iso9660: Unknown parameter '' [ 52.726968][ T3775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3775 comm=syz.1.90 [ 52.784393][ T3782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.92'. [ 52.820127][ T3782] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 52.905242][ T3669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.960267][ T3312] EXT4-fs (loop4): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 52.976278][ T3669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.993943][ T3788] loop1: detected capacity change from 0 to 512 [ 53.026367][ T3669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.053072][ T3794] vlan2: entered allmulticast mode [ 53.059882][ T3794] dummy0: entered allmulticast mode [ 53.081551][ T3669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.111670][ T3793] loop3: detected capacity change from 0 to 1024 [ 53.177307][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.197457][ T3806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.259759][ T3810] tipc: Started in network mode [ 53.265157][ T3810] tipc: Node identity c2a5b9d70a58, cluster identity 4711 [ 53.273231][ T3810] tipc: Enabled bearer , priority 0 [ 53.281934][ T3811] loop1: detected capacity change from 0 to 128 [ 53.297337][ T3812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58657 sclass=netlink_route_socket pid=3812 comm=syz.4.101 [ 53.332005][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.345085][ T3806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.379484][ T3810] syzkaller0: mtu greater than device maximum [ 53.388640][ T3815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.104'. [ 53.399848][ T3809] tipc: Disabling bearer [ 53.422775][ T3806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.435893][ T3815] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 53.503467][ T3819] SELinux: Context Ü is not valid (left unmapped). [ 53.522032][ T3821] netlink: 'syz.4.107': attribute type 10 has an invalid length. [ 53.534778][ T3806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.556312][ T3821] team0: Port device dummy0 added [ 53.573294][ T3821] netlink: 'syz.4.107': attribute type 10 has an invalid length. [ 53.591437][ T3821] team0: Port device dummy0 removed [ 53.605161][ T3821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.642504][ T3806] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.662771][ T3806] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.678728][ T3830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 53.682759][ T3806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.705725][ T3806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.842912][ T3842] loop2: detected capacity change from 0 to 128 [ 53.852677][ T3842] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.867081][ T3842] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.886119][ T3848] loop1: detected capacity change from 0 to 1024 [ 53.894458][ T3848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.899885][ T3844] bridge_slave_0: left allmulticast mode [ 53.909757][ T3844] bridge_slave_0: left promiscuous mode [ 53.916252][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.923166][ T3848] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.947150][ T3850] loop0: detected capacity change from 0 to 2048 [ 53.950754][ T3848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 53.964451][ T3844] bridge_slave_1: left allmulticast mode [ 53.971066][ T3844] bridge_slave_1: left promiscuous mode [ 53.978569][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.981134][ T3848] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.117: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.003914][ T3848] EXT4-fs (loop1): Remounting filesystem read-only [ 54.011945][ T3848] EXT4-fs (loop1): 1 orphan inode deleted [ 54.015704][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.018982][ T3848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.032189][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.042846][ T3848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.059332][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 54.059352][ T30] audit: type=1400 audit(1750563944.809:582): avc: denied { read } for pid=3843 comm="syz.0.118" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 54.100984][ T30] audit: type=1326 audit(1750563944.839:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f786a24d290 code=0x7ffc0000 [ 54.126995][ T30] audit: type=1326 audit(1750563944.839:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f786a24e52b code=0x7ffc0000 [ 54.155146][ T30] audit: type=1326 audit(1750563944.839:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f786a24d58a code=0x7ffc0000 [ 54.155743][ T3848] loop1: detected capacity change from 0 to 2048 [ 54.180389][ T30] audit: type=1326 audit(1750563944.839:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 54.180429][ T30] audit: type=1326 audit(1750563944.849:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 54.189751][ T3844] bond0: (slave bond_slave_0): Releasing backup interface [ 54.217488][ T30] audit: type=1326 audit(1750563944.879:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 54.276992][ T30] audit: type=1326 audit(1750563944.879:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 54.308223][ T30] audit: type=1326 audit(1750563944.879:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 54.335798][ T30] audit: type=1326 audit(1750563944.879:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 54.371210][ T3844] bond0: (slave bond_slave_1): Releasing backup interface [ 54.386246][ T3844] team0: Port device team_slave_0 removed [ 54.393695][ T3848] Alternate GPT is invalid, using primary GPT. [ 54.401633][ T3848] loop1: p1 p2 p3 [ 54.407833][ T3844] team0: Port device team_slave_1 removed [ 54.417419][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.426186][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.434325][ T3867] SELinux: +}[@ (3867) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.453338][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.461813][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.600911][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.024742][ T3918] netlink: 'syz.1.139': attribute type 3 has an invalid length. [ 55.033425][ T3918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 55.274752][ T3929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.143'. [ 55.309732][ T3929] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 55.320500][ T3930] loop2: detected capacity change from 0 to 8192 [ 55.364664][ T3932] FAULT_INJECTION: forcing a failure. [ 55.364664][ T3932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.379536][ T3932] CPU: 1 UID: 0 PID: 3932 Comm: syz.4.145 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 55.379569][ T3932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.379583][ T3932] Call Trace: [ 55.379590][ T3932] [ 55.379598][ T3932] __dump_stack+0x1d/0x30 [ 55.379621][ T3932] dump_stack_lvl+0xe8/0x140 [ 55.379719][ T3932] dump_stack+0x15/0x1b [ 55.379739][ T3932] should_fail_ex+0x265/0x280 [ 55.379766][ T3930] loop2: p1 p2 [ 55.379781][ T3932] should_fail+0xb/0x20 [ 55.379910][ T3932] should_fail_usercopy+0x1a/0x20 [ 55.379957][ T3932] _copy_to_user+0x20/0xa0 [ 55.379988][ T3932] simple_read_from_buffer+0xb5/0x130 [ 55.380097][ T3932] proc_fail_nth_read+0x100/0x140 [ 55.380128][ T3932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.380175][ T3932] vfs_read+0x1a0/0x6f0 [ 55.380269][ T3932] ? __rcu_read_unlock+0x4f/0x70 [ 55.380429][ T3932] ? __fget_files+0x184/0x1c0 [ 55.380461][ T3932] ksys_read+0xda/0x1a0 [ 55.380507][ T3932] __x64_sys_read+0x40/0x50 [ 55.380606][ T3932] x64_sys_call+0x2d77/0x2fb0 [ 55.380680][ T3932] do_syscall_64+0xd2/0x200 [ 55.380706][ T3932] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.380742][ T3932] ? clear_bhb_loop+0x40/0x90 [ 55.380774][ T3932] ? clear_bhb_loop+0x40/0x90 [ 55.380804][ T3932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.380892][ T3932] RIP: 0033:0x7fd10e3bd33c [ 55.380914][ T3932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.380939][ T3932] RSP: 002b:00007fd10ca27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.381026][ T3932] RAX: ffffffffffffffda RBX: 00007fd10e5e5fa0 RCX: 00007fd10e3bd33c [ 55.381044][ T3932] RDX: 000000000000000f RSI: 00007fd10ca270a0 RDI: 0000000000000005 [ 55.381130][ T3932] RBP: 00007fd10ca27090 R08: 0000000000000000 R09: 0000000000000000 [ 55.381147][ T3932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.381163][ T3932] R13: 0000000000000000 R14: 00007fd10e5e5fa0 R15: 00007ffecd1df5d8 [ 55.381191][ T3932] [ 55.425068][ T3934] loop4: detected capacity change from 0 to 512 [ 55.428677][ T3930] loop2: p2 start 3506442254 is beyond EOD, [ 55.598958][ T3937] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(0x000000000000000e [ 55.603402][ T3930] truncated [ 55.629980][ T3934] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 55.685094][ T3943] loop4: detected capacity change from 0 to 512 [ 55.692574][ T3943] ext4: Bad value for 'journal_dev' [ 55.755285][ T3947] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 55.763950][ T3947] netlink: 72 bytes leftover after parsing attributes in process `syz.4.151'. [ 55.790562][ T3947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 55.801211][ T3951] loop3: detected capacity change from 0 to 128 [ 55.808834][ T3951] EXT4-fs: Ignoring removed nobh option [ 55.819599][ T3951] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.838782][ T3951] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.853419][ T3958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.155'. [ 55.893991][ T3958] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 55.894350][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 56.062042][ T3951] FAULT_INJECTION: forcing a failure. [ 56.062042][ T3951] name failslab, interval 1, probability 0, space 0, times 0 [ 56.077038][ T3951] CPU: 0 UID: 0 PID: 3951 Comm: syz.3.153 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 56.077128][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.077145][ T3951] Call Trace: [ 56.077154][ T3951] [ 56.077164][ T3951] __dump_stack+0x1d/0x30 [ 56.077229][ T3951] dump_stack_lvl+0xe8/0x140 [ 56.077255][ T3951] dump_stack+0x15/0x1b [ 56.077277][ T3951] should_fail_ex+0x265/0x280 [ 56.077319][ T3951] should_failslab+0x8c/0xb0 [ 56.077415][ T3951] __kvmalloc_node_noprof+0x123/0x4e0 [ 56.077452][ T3951] ? nf_hook_entries_grow+0x1bc/0x450 [ 56.077496][ T3951] nf_hook_entries_grow+0x1bc/0x450 [ 56.077607][ T3951] __nf_register_net_hook+0x18e/0x480 [ 56.077652][ T3951] nf_register_net_hook+0x88/0x130 [ 56.077693][ T3951] nf_register_net_hooks+0x44/0x150 [ 56.077781][ T3951] nf_ct_netns_do_get+0x2b1/0x380 [ 56.077819][ T3951] ? nf_register_net_hook+0x9e/0x130 [ 56.077869][ T3951] nf_ct_netns_get+0x87/0xc0 [ 56.077976][ T3951] connlimit_mt_check+0x4a/0x150 [ 56.078007][ T3951] xt_check_match+0x2aa/0x4f0 [ 56.078041][ T3951] ? strnlen+0x28/0x50 [ 56.078062][ T3951] ? strcmp+0x22/0x50 [ 56.078090][ T3951] ? xt_find_match+0x1d1/0x210 [ 56.078194][ T3951] translate_table+0xa9c/0xf90 [ 56.078243][ T3951] do_ipt_set_ctl+0x66f/0x820 [ 56.078277][ T3951] ? _raw_spin_unlock_bh+0x36/0x40 [ 56.078312][ T3951] ? tcp_release_cb+0xf1/0x370 [ 56.078388][ T3951] nf_setsockopt+0x196/0x1b0 [ 56.078415][ T3951] ip_setsockopt+0x102/0x110 [ 56.078451][ T3951] tcp_setsockopt+0x98/0xb0 [ 56.078490][ T3951] sock_common_setsockopt+0x66/0x80 [ 56.078580][ T3951] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 56.078613][ T3951] __sys_setsockopt+0x181/0x200 [ 56.078681][ T3951] __x64_sys_setsockopt+0x64/0x80 [ 56.078720][ T3951] x64_sys_call+0x2bd5/0x2fb0 [ 56.078747][ T3951] do_syscall_64+0xd2/0x200 [ 56.078769][ T3951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.078861][ T3951] ? clear_bhb_loop+0x40/0x90 [ 56.078887][ T3951] ? clear_bhb_loop+0x40/0x90 [ 56.078914][ T3951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.078940][ T3951] RIP: 0033:0x7f0fbdfce929 [ 56.079000][ T3951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.079021][ T3951] RSP: 002b:00007f0fbc637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.079050][ T3951] RAX: ffffffffffffffda RBX: 00007f0fbe1f5fa0 RCX: 00007f0fbdfce929 [ 56.079065][ T3951] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 56.079080][ T3951] RBP: 00007f0fbc637090 R08: 0000000000000570 R09: 0000000000000000 [ 56.079094][ T3951] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 56.079108][ T3951] R13: 0000000000000000 R14: 00007f0fbe1f5fa0 R15: 00007ffc76471f28 [ 56.079153][ T3951] [ 56.396930][ T3951] xt_connlimit: cannot load conntrack support for proto=2 [ 56.404426][ T3970] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 56.479977][ T3974] loop0: detected capacity change from 0 to 512 [ 56.487296][ T3974] ext4: Bad value for 'journal_dev' [ 56.533763][ T3976] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 56.543252][ T3976] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 56.624843][ T3979] SELinux: syz.4.162 (3979) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 56.726117][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.885474][ T3996] __nla_validate_parse: 5 callbacks suppressed [ 56.885728][ T3996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.169'. [ 56.929829][ T3996] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 57.004004][ T4002] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.026763][ T4004] loop0: detected capacity change from 0 to 512 [ 57.036196][ T4004] ext4: Bad value for 'journal_dev' [ 57.050704][ T4002] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.070880][ T4006] loop1: detected capacity change from 0 to 128 [ 57.092026][ T4006] syz.1.171: attempt to access beyond end of device [ 57.092026][ T4006] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 57.118848][ T4002] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.181153][ T4002] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.250470][ T4013] loop0: detected capacity change from 0 to 1024 [ 57.259501][ T4013] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.272657][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.287985][ T4015] loop2: detected capacity change from 0 to 512 [ 57.299749][ T4015] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.314786][ T4015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 57.324822][ T4015] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.333084][ T4015] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.176: invalid block [ 57.348806][ T4015] EXT4-fs (loop2): Remounting filesystem read-only [ 57.356937][ T4015] EXT4-fs (loop2): 1 truncate cleaned up [ 57.368281][ T4015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 57.427373][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 57.500366][ T4028] vlan2: entered allmulticast mode [ 57.594627][ T4032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.181'. [ 57.630839][ T4032] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 57.775425][ T4040] loop4: detected capacity change from 0 to 512 [ 57.791856][ T4040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.808771][ T4040] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.888549][ T4002] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.888650][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.902969][ T4002] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.922193][ T4002] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.941810][ T4002] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.979898][ T4051] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 57.992433][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.135111][ T4059] loop0: detected capacity change from 0 to 512 [ 58.145218][ T4059] ext4: Bad value for 'journal_dev' [ 58.183278][ T4063] loop0: detected capacity change from 0 to 128 [ 58.193080][ T4063] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.207162][ T4063] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.258475][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.295662][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 58.306241][ T4071] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 58.322088][ T4071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.394424][ T4077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.429594][ T4079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.195'. [ 58.440983][ T4087] FAULT_INJECTION: forcing a failure. [ 58.440983][ T4087] name failslab, interval 1, probability 0, space 0, times 0 [ 58.452652][ T4089] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 58.456732][ T4087] CPU: 0 UID: 0 PID: 4087 Comm: syz.4.202 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 58.456806][ T4087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.456825][ T4087] Call Trace: [ 58.456833][ T4087] [ 58.456847][ T4087] __dump_stack+0x1d/0x30 [ 58.456880][ T4087] dump_stack_lvl+0xe8/0x140 [ 58.456907][ T4087] dump_stack+0x15/0x1b [ 58.456939][ T4087] should_fail_ex+0x265/0x280 [ 58.457068][ T4087] should_failslab+0x8c/0xb0 [ 58.457101][ T4087] kmem_cache_alloc_noprof+0x50/0x310 [ 58.457430][ T4087] ? getname_flags+0x80/0x3b0 [ 58.457477][ T4087] getname_flags+0x80/0x3b0 [ 58.457520][ T4087] user_path_at+0x28/0x130 [ 58.457560][ T4087] __se_sys_mount_setattr+0x136/0x240 [ 58.457666][ T4087] __x64_sys_mount_setattr+0x67/0x80 [ 58.457705][ T4087] x64_sys_call+0xda0/0x2fb0 [ 58.457738][ T4087] do_syscall_64+0xd2/0x200 [ 58.457765][ T4087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.457856][ T4087] ? clear_bhb_loop+0x40/0x90 [ 58.457923][ T4087] ? clear_bhb_loop+0x40/0x90 [ 58.457954][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.457985][ T4087] RIP: 0033:0x7fd10e3be929 [ 58.458089][ T4087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.458115][ T4087] RSP: 002b:00007fd10ca27038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 58.458143][ T4087] RAX: ffffffffffffffda RBX: 00007fd10e5e5fa0 RCX: 00007fd10e3be929 [ 58.458177][ T4087] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffffff [ 58.458194][ T4087] RBP: 00007fd10ca27090 R08: 0000000000000020 R09: 0000000000000000 [ 58.458212][ T4087] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 58.458231][ T4087] R13: 0000000000000000 R14: 00007fd10e5e5fa0 R15: 00007ffecd1df5d8 [ 58.458272][ T4087] [ 58.484537][ T4085] loop2: detected capacity change from 0 to 128 [ 58.540196][ T4089] loop1: detected capacity change from 0 to 2048 [ 58.721841][ T4077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.736018][ T4085] syz.2.198: attempt to access beyond end of device [ 58.736018][ T4085] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 58.760494][ T4094] loop4: detected capacity change from 0 to 128 [ 58.770689][ T4094] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.785823][ T4089] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 58.809782][ T4098] loop0: detected capacity change from 0 to 128 [ 58.810965][ T4077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.829947][ T4089] EXT4-fs (loop1): get root inode failed [ 58.836400][ T4089] EXT4-fs (loop1): mount failed [ 58.840385][ T4098] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.855674][ T4098] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.867844][ T4094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.205'. [ 58.893034][ T4094] FAT-fs (loop4): FAT read failed (blocknr 234) [ 58.906150][ T4077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.932857][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.986896][ T4077] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.003405][ T4077] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.017442][ T4077] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.031277][ T4077] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.071628][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 59.071647][ T30] audit: type=1326 audit(1750563949.819:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e6131e929 code=0x0 [ 59.209864][ T30] audit: type=1400 audit(1750563949.959:903): avc: denied { audit_write } for pid=4119 comm="syz.2.211" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.389709][ T4126] loop1: detected capacity change from 0 to 512 [ 59.398360][ T4126] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.410232][ T4126] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.419247][ T4126] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.428324][ T4126] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 59.440164][ T4126] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.460848][ T4126] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 59.470495][ T4126] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.214: bg 0: block 40: padding at end of block bitmap is not set [ 59.490793][ T4126] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 59.502729][ T4126] EXT4-fs (loop1): 1 truncate cleaned up [ 59.510328][ T4126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.526750][ T30] audit: type=1400 audit(1750563950.269:904): avc: denied { setopt } for pid=4125 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.548605][ T30] audit: type=1400 audit(1750563950.269:905): avc: denied { shutdown } for pid=4125 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.572924][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.594851][ T4130] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.660937][ T4131] loop1: detected capacity change from 0 to 128 [ 59.671791][ T4130] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.674436][ T30] audit: type=1326 audit(1750563950.419:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 59.711557][ T30] audit: type=1326 audit(1750563950.439:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 59.736945][ T30] audit: type=1326 audit(1750563950.439:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 59.765242][ T30] audit: type=1326 audit(1750563950.439:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 59.791415][ T30] audit: type=1326 audit(1750563950.439:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786a24e929 code=0x7ffc0000 [ 59.871209][ T4137] loop4: detected capacity change from 0 to 512 [ 59.878976][ T4137] ext4: Bad value for 'journal_dev' [ 59.915974][ T4139] loop4: detected capacity change from 0 to 128 [ 59.927409][ T4130] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.942441][ T4139] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.959605][ T4139] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.014273][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.026904][ T4130] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.067483][ T4147] netlink: 'syz.4.220': attribute type 3 has an invalid length. [ 60.076479][ T4147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.220'. [ 60.857852][ T4156] netlink: 'syz.0.224': attribute type 10 has an invalid length. [ 60.867235][ T4156] netlink: 72 bytes leftover after parsing attributes in process `syz.0.224'. [ 60.877583][ T4156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.224'. [ 61.794640][ T4178] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.841082][ T4180] openvswitch: netlink: Message has 6 unknown bytes. [ 62.035330][ T4130] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.047895][ T4130] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.060574][ T4130] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.073105][ T4130] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.586425][ T4205] FAULT_INJECTION: forcing a failure. [ 62.586425][ T4205] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.602473][ T4205] CPU: 0 UID: 0 PID: 4205 Comm: syz.1.239 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 62.602509][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.602526][ T4205] Call Trace: [ 62.602533][ T4205] [ 62.602541][ T4205] __dump_stack+0x1d/0x30 [ 62.602613][ T4205] dump_stack_lvl+0xe8/0x140 [ 62.602632][ T4205] dump_stack+0x15/0x1b [ 62.602690][ T4205] should_fail_ex+0x265/0x280 [ 62.602731][ T4205] should_fail_alloc_page+0xf2/0x100 [ 62.602759][ T4205] __alloc_frozen_pages_noprof+0xff/0x360 [ 62.602801][ T4205] alloc_pages_mpol+0xb3/0x250 [ 62.602917][ T4205] alloc_pages_noprof+0x90/0x130 [ 62.602948][ T4205] get_free_pages_noprof+0xc/0x40 [ 62.602979][ T4205] __se_sys_mincore+0xd9/0x490 [ 62.603060][ T4205] __x64_sys_mincore+0x43/0x50 [ 62.603087][ T4205] x64_sys_call+0x2c2d/0x2fb0 [ 62.603187][ T4205] do_syscall_64+0xd2/0x200 [ 62.603211][ T4205] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.603250][ T4205] ? clear_bhb_loop+0x40/0x90 [ 62.603271][ T4205] ? clear_bhb_loop+0x40/0x90 [ 62.603292][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.603334][ T4205] RIP: 0033:0x7f786a24e929 [ 62.603357][ T4205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.603373][ T4205] RSP: 002b:00007f7868875038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 62.603392][ T4205] RAX: ffffffffffffffda RBX: 00007f786a476160 RCX: 00007f786a24e929 [ 62.603407][ T4205] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ff5000 [ 62.603422][ T4205] RBP: 00007f7868875090 R08: 0000000000000000 R09: 0000000000000000 [ 62.603483][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.603495][ T4205] R13: 0000000000000000 R14: 00007f786a476160 R15: 00007ffcdf756a48 [ 62.603514][ T4205] [ 62.878964][ T4211] FAULT_INJECTION: forcing a failure. [ 62.878964][ T4211] name failslab, interval 1, probability 0, space 0, times 0 [ 62.893681][ T4211] CPU: 1 UID: 0 PID: 4211 Comm: syz.4.242 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 62.893741][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.893756][ T4211] Call Trace: [ 62.893763][ T4211] [ 62.893772][ T4211] __dump_stack+0x1d/0x30 [ 62.893796][ T4211] dump_stack_lvl+0xe8/0x140 [ 62.893826][ T4211] dump_stack+0x15/0x1b [ 62.893844][ T4211] should_fail_ex+0x265/0x280 [ 62.893879][ T4211] should_failslab+0x8c/0xb0 [ 62.893960][ T4211] kmem_cache_alloc_node_noprof+0x57/0x320 [ 62.893992][ T4211] ? __alloc_skb+0x101/0x320 [ 62.894025][ T4211] __alloc_skb+0x101/0x320 [ 62.894128][ T4211] netlink_alloc_large_skb+0xba/0xf0 [ 62.894162][ T4211] netlink_sendmsg+0x3cf/0x6b0 [ 62.894261][ T4211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.894287][ T4211] __sock_sendmsg+0x142/0x180 [ 62.894320][ T4211] ____sys_sendmsg+0x31e/0x4e0 [ 62.894357][ T4211] ___sys_sendmsg+0x17b/0x1d0 [ 62.894429][ T4211] __x64_sys_sendmsg+0xd4/0x160 [ 62.894479][ T4211] x64_sys_call+0x2999/0x2fb0 [ 62.894566][ T4211] do_syscall_64+0xd2/0x200 [ 62.894589][ T4211] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.894618][ T4211] ? clear_bhb_loop+0x40/0x90 [ 62.894638][ T4211] ? clear_bhb_loop+0x40/0x90 [ 62.894752][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.894780][ T4211] RIP: 0033:0x7fd10e3be929 [ 62.894800][ T4211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.894817][ T4211] RSP: 002b:00007fd10ca27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.894836][ T4211] RAX: ffffffffffffffda RBX: 00007fd10e5e5fa0 RCX: 00007fd10e3be929 [ 62.894849][ T4211] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000005 [ 62.894931][ T4211] RBP: 00007fd10ca27090 R08: 0000000000000000 R09: 0000000000000000 [ 62.894953][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.894969][ T4211] R13: 0000000000000000 R14: 00007fd10e5e5fa0 R15: 00007ffecd1df5d8 [ 62.895063][ T4211] [ 63.242629][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 63.328833][ T4214] hsr_slave_0: left promiscuous mode [ 63.351650][ T4214] hsr_slave_1: left promiscuous mode [ 63.385064][ T4218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.464192][ T4219] loop0: detected capacity change from 0 to 128 [ 63.483259][ T4218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.541457][ T4218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.583048][ T4218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.635546][ T4218] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.649559][ T4218] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.662094][ T4218] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.674130][ T4218] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.725949][ T4235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.741867][ T4236] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.758101][ T51] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.775159][ T4239] loop3: detected capacity change from 0 to 128 [ 63.799010][ T4238] loop0: detected capacity change from 0 to 128 [ 63.808731][ T4235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.813127][ T4238] syz.0.249: attempt to access beyond end of device [ 63.813127][ T4238] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 63.843589][ T4239] syz.3.250: attempt to access beyond end of device [ 63.843589][ T4239] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 63.868428][ T4236] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.921567][ T51] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.936419][ T4235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.960717][ T4236] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.003898][ T51] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.018204][ T4235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.036242][ T4236] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.082874][ T51] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.104839][ T4235] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121042][ T4235] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.130659][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 64.146768][ T4235] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.167050][ T4235] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.205201][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213344][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.221515][ T4245] bridge_slave_0: entered allmulticast mode [ 64.228848][ T4245] bridge_slave_0: entered promiscuous mode [ 64.239761][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.247680][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.255689][ T4245] bridge_slave_1: entered allmulticast mode [ 64.263330][ T4245] bridge_slave_1: entered promiscuous mode [ 64.287791][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.305683][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.318734][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 64.318752][ T30] audit: type=1326 audit(1750563955.069:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.3.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fbdfce929 code=0x0 [ 64.351692][ T51] bridge_slave_1: left allmulticast mode [ 64.358314][ T51] bridge_slave_1: left promiscuous mode [ 64.365016][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.374324][ T51] bridge_slave_0: left allmulticast mode [ 64.381038][ T51] bridge_slave_0: left promiscuous mode [ 64.387274][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.416844][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 64.447696][ T4267] loop1: detected capacity change from 0 to 2048 [ 64.474243][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.486360][ T4267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 64.502201][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.513228][ T51] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 64.523228][ T51] bond0 (unregistering): Released all slaves [ 64.531519][ T4267] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.548258][ T4267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 64.561864][ T4267] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.561864][ T4267] [ 64.572148][ T4267] EXT4-fs (loop1): Total free blocks count 0 [ 64.578184][ T4267] EXT4-fs (loop1): Free/Dirty block details [ 64.584889][ T4267] EXT4-fs (loop1): free_blocks=2415919104 [ 64.591046][ T4267] EXT4-fs (loop1): dirty_blocks=32 [ 64.596937][ T4267] EXT4-fs (loop1): Block reservation details [ 64.603422][ T4267] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 64.618479][ T4245] team0: Port device team_slave_0 added [ 64.626915][ T4245] team0: Port device team_slave_1 added [ 64.633813][ T4270] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.660137][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.667756][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.695659][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.715974][ T51] hsr_slave_0: left promiscuous mode [ 64.717263][ T30] audit: type=1400 audit(1750563955.429:1065): avc: denied { name_bind } for pid=4280 comm="syz.4.258" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 64.745404][ T30] audit: type=1326 audit(1750563955.439:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.4.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 64.767021][ T4291] loop4: detected capacity change from 0 to 128 [ 64.773400][ T30] audit: type=1326 audit(1750563955.439:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.4.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 64.805120][ T51] hsr_slave_1: left promiscuous mode [ 64.805362][ T30] audit: type=1326 audit(1750563955.539:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 64.812082][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.837107][ T30] audit: type=1326 audit(1750563955.539:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 64.837144][ T30] audit: type=1326 audit(1750563955.539:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 64.837204][ T30] audit: type=1326 audit(1750563955.539:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 64.921560][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.930486][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.938351][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.947633][ T51] veth1_macvtap: left promiscuous mode [ 64.953420][ T51] veth0_macvtap: left promiscuous mode [ 64.959505][ T51] veth1_vlan: left promiscuous mode [ 64.965270][ T51] veth0_vlan: left promiscuous mode [ 65.036003][ T51] team0 (unregistering): Port device team_slave_1 removed [ 65.046001][ T51] team0 (unregistering): Port device team_slave_0 removed [ 65.083616][ T4286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.097136][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.105170][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.131972][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.162956][ T30] audit: type=1326 audit(1750563955.909:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.3.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbdfce929 code=0x0 [ 65.189902][ T4245] hsr_slave_0: entered promiscuous mode [ 65.196489][ T4245] hsr_slave_1: entered promiscuous mode [ 65.202858][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.211703][ T4245] Cannot create hsr debugfs directory [ 65.222980][ T4286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.285659][ T4286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.374257][ T4286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.450381][ T4286] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.463406][ T4286] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.475853][ T4286] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487775][ T4286] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.520050][ T30] audit: type=1326 audit(1750563956.269:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 65.566777][ T4304] netlink: 56 bytes leftover after parsing attributes in process `syz.4.262'. [ 65.602552][ T4245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.612353][ T4245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.623216][ T4245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.635660][ T4245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.686565][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.703284][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.716321][ T2249] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.724672][ T2249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.737230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.744705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.758359][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 65.768485][ T4321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 65.771101][ T4245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.789088][ T4245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.837327][ T4326] loop4: detected capacity change from 0 to 128 [ 65.846485][ T4326] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.860252][ T4326] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.865833][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.918414][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.953549][ T4245] veth0_vlan: entered promiscuous mode [ 65.961849][ T4245] veth1_vlan: entered promiscuous mode [ 65.977622][ T4339] loop4: detected capacity change from 0 to 512 [ 65.979828][ T4245] veth0_macvtap: entered promiscuous mode [ 65.985739][ T4339] ext4: Bad value for 'journal_dev' [ 65.994175][ T4245] veth1_macvtap: entered promiscuous mode [ 66.057231][ T4341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.270'. [ 66.066468][ T4341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.270'. [ 66.078152][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.092755][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.103615][ T4245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.112826][ T4245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.122011][ T4245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.131046][ T4245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456394][ T4376] loop1: detected capacity change from 0 to 512 [ 66.463716][ T4376] ext4: Bad value for 'journal_dev' [ 66.525638][ T4378] netlink: 'syz.1.282': attribute type 13 has an invalid length. [ 66.564489][ T4378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.683151][ T4386] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 66.692168][ T4386] netlink: 72 bytes leftover after parsing attributes in process `syz.1.286'. [ 66.705806][ T4386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.286'. [ 67.089351][ T4401] loop1: detected capacity change from 0 to 512 [ 67.097459][ T4401] ext4: Bad value for 'journal_dev' [ 67.200176][ T4412] loop4: detected capacity change from 0 to 512 [ 67.209848][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.271251][ T4412] EXT4-fs (loop4): 1 orphan inode deleted [ 67.278475][ T4412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.329670][ T2249] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 67.343791][ T4412] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.447624][ T4412] SELinux: failed to load policy [ 67.498242][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.755338][ T4426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.302'. [ 67.812002][ T4426] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 67.894797][ T4428] loop2: detected capacity change from 0 to 512 [ 67.922845][ T4428] ext4: Bad value for 'journal_dev' [ 68.526897][ T4236] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.540410][ T4236] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.552829][ T4236] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.581464][ T4236] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.672549][ T4453] loop3: detected capacity change from 0 to 256 [ 68.681127][ T4454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.314'. [ 68.701382][ T4453] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 68.741226][ T4453] FAT-fs (loop3): codepage cp855 not found [ 68.752473][ T4454] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 68.770402][ T4453] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 68.798691][ T4453] team0: Port device dummy0 added [ 68.822036][ T4457] loop4: detected capacity change from 0 to 128 [ 68.851944][ T4457] syz.4.315: attempt to access beyond end of device [ 68.851944][ T4457] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 68.872429][ T4461] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 68.897721][ T4461] team0: Port device dummy0 removed [ 68.974634][ T4461] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.056874][ T4474] ref_ctr increment failed for inode: 0x10d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810bb0bf40 [ 69.088187][ T4469] uprobe: syz.0.318:4469 failed to unregister, leaking uprobe [ 69.170984][ T4486] SELinux: failed to load policy [ 69.183687][ T4486] netlink: 'syz.4.325': attribute type 13 has an invalid length. [ 69.253044][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.261534][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.336648][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.351430][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.402428][ T4486] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.412425][ T4486] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.422054][ T4486] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.431014][ T4486] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.491486][ T4518] ref_ctr increment failed for inode: 0x225 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881041461c0 [ 69.507906][ T4517] uprobe: syz.4.338:4517 failed to unregister, leaking uprobe [ 69.581822][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 69.581839][ T30] audit: type=1400 audit(1750563960.329:1334): avc: denied { read } for pid=4519 comm="syz.2.339" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.617434][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.626892][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.658460][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'. [ 69.668674][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'. [ 69.682089][ T4520] dummy0: entered promiscuous mode [ 69.706735][ T30] audit: type=1326 audit(1750563960.399:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.732093][ T30] audit: type=1326 audit(1750563960.399:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.756925][ T30] audit: type=1326 audit(1750563960.399:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.783070][ T30] audit: type=1326 audit(1750563960.399:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.808560][ T30] audit: type=1326 audit(1750563960.399:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.811811][ T4520] ip6gretap0: entered promiscuous mode [ 69.834005][ T30] audit: type=1326 audit(1750563960.399:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.865683][ T30] audit: type=1326 audit(1750563960.399:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.893196][ T30] audit: type=1326 audit(1750563960.399:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 69.921309][ T30] audit: type=1326 audit(1750563960.399:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed9732e929 code=0x7ffc0000 [ 70.005323][ T4533] netlink: 'syz.4.344': attribute type 10 has an invalid length. [ 70.014821][ T4533] netlink: 72 bytes leftover after parsing attributes in process `syz.4.344'. [ 70.026811][ T4533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.344'. [ 70.105231][ T4539] FAULT_INJECTION: forcing a failure. [ 70.105231][ T4539] name failslab, interval 1, probability 0, space 0, times 0 [ 70.118798][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.3.347 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 70.118828][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.118842][ T4539] Call Trace: [ 70.118849][ T4539] [ 70.118857][ T4539] __dump_stack+0x1d/0x30 [ 70.118890][ T4539] dump_stack_lvl+0xe8/0x140 [ 70.118909][ T4539] dump_stack+0x15/0x1b [ 70.118927][ T4539] should_fail_ex+0x265/0x280 [ 70.119046][ T4539] should_failslab+0x8c/0xb0 [ 70.119132][ T4539] kmem_cache_alloc_noprof+0x50/0x310 [ 70.119161][ T4539] ? skb_clone+0x151/0x1f0 [ 70.119181][ T4539] skb_clone+0x151/0x1f0 [ 70.119203][ T4539] __netlink_deliver_tap+0x2c9/0x500 [ 70.119291][ T4539] netlink_unicast+0x64c/0x670 [ 70.119325][ T4539] netlink_sendmsg+0x58b/0x6b0 [ 70.119346][ T4539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.119370][ T4539] __sock_sendmsg+0x142/0x180 [ 70.119421][ T4539] ____sys_sendmsg+0x31e/0x4e0 [ 70.119465][ T4539] ___sys_sendmsg+0x17b/0x1d0 [ 70.119520][ T4539] __x64_sys_sendmsg+0xd4/0x160 [ 70.119616][ T4539] x64_sys_call+0x2999/0x2fb0 [ 70.119645][ T4539] do_syscall_64+0xd2/0x200 [ 70.119669][ T4539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.119705][ T4539] ? clear_bhb_loop+0x40/0x90 [ 70.119778][ T4539] ? clear_bhb_loop+0x40/0x90 [ 70.119808][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.119838][ T4539] RIP: 0033:0x7f0fbdfce929 [ 70.119858][ T4539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.119882][ T4539] RSP: 002b:00007f0fbc637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.119988][ T4539] RAX: ffffffffffffffda RBX: 00007f0fbe1f5fa0 RCX: 00007f0fbdfce929 [ 70.120001][ T4539] RDX: 0000000020008050 RSI: 0000200000000340 RDI: 0000000000000008 [ 70.120013][ T4539] RBP: 00007f0fbc637090 R08: 0000000000000000 R09: 0000000000000000 [ 70.120025][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.120038][ T4539] R13: 0000000000000000 R14: 00007f0fbe1f5fa0 R15: 00007ffc76471f28 [ 70.120134][ T4539] [ 70.414366][ T4550] loop0: detected capacity change from 0 to 128 [ 70.427300][ T4550] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 70.438026][ T4550] FAT-fs (loop0): Filesystem has been set read-only [ 70.449887][ T4550] syz.0.351: attempt to access beyond end of device [ 70.449887][ T4550] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 70.466965][ T4550] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 70.476772][ T4550] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 70.489428][ T4550] syz.0.351: attempt to access beyond end of device [ 70.489428][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.508000][ T4550] syz.0.351: attempt to access beyond end of device [ 70.508000][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.523940][ T4550] syz.0.351: attempt to access beyond end of device [ 70.523940][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.538928][ T4550] syz.0.351: attempt to access beyond end of device [ 70.538928][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.565554][ T4550] syz.0.351: attempt to access beyond end of device [ 70.565554][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.594233][ T4550] syz.0.351: attempt to access beyond end of device [ 70.594233][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.609338][ T4550] syz.0.351: attempt to access beyond end of device [ 70.609338][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.625298][ T4550] syz.0.351: attempt to access beyond end of device [ 70.625298][ T4550] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.647559][ T4562] loop3: detected capacity change from 0 to 128 [ 70.720442][ T4562] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.737430][ T4562] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.823756][ T4567] ipvlan2: entered promiscuous mode [ 70.831542][ T4567] bridge0: port 3(ipvlan2) entered blocking state [ 70.838777][ T4567] bridge0: port 3(ipvlan2) entered disabled state [ 70.846456][ T4567] ipvlan2: entered allmulticast mode [ 70.852221][ T4567] bridge0: entered allmulticast mode [ 70.859330][ T4567] ipvlan2: left allmulticast mode [ 70.865445][ T4567] bridge0: left allmulticast mode [ 71.134236][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.157770][ T4572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'. [ 71.273076][ T4572] random: crng reseeded on system resumption [ 71.787804][ T4584] loop1: detected capacity change from 0 to 512 [ 71.828081][ T4584] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.363: casefold flag without casefold feature [ 71.845576][ T4590] IPVS: Error connecting to the multicast addr [ 71.889325][ T4584] EXT4-fs (loop1): get root inode failed [ 71.896092][ T4584] EXT4-fs (loop1): mount failed [ 71.962402][ T4601] loop4: detected capacity change from 0 to 128 [ 72.022281][ T4610] netlink: 'syz.1.372': attribute type 10 has an invalid length. [ 72.031115][ T4610] netlink: 72 bytes leftover after parsing attributes in process `syz.1.372'. [ 72.043112][ T4610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'. [ 72.084622][ T4615] vlan2: entered allmulticast mode [ 72.126010][ T4620] loop4: detected capacity change from 0 to 128 [ 72.135935][ T4622] syz_tun: entered allmulticast mode [ 72.147507][ T4620] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.179187][ T4620] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.235105][ T4630] ref_ctr increment failed for inode: 0x80 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104145c00 [ 72.253342][ T4629] uprobe: syz.2.379:4629 failed to unregister, leaking uprobe [ 72.272924][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.482946][ T4641] 9pnet_fd: Insufficient options for proto=fd [ 72.525791][ T4644] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.566228][ T4647] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.602655][ T4644] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.630970][ T4648] loop1: detected capacity change from 0 to 128 [ 72.643548][ T4647] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.674017][ T4644] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.687618][ T4651] loop0: detected capacity change from 0 to 128 [ 72.711136][ T4647] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.751605][ T4644] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.781288][ T4647] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.814304][ T4659] loop3: detected capacity change from 0 to 2048 [ 72.830357][ T4644] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.842865][ T4644] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.856024][ T4644] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.867495][ T4659] EXT4-fs (loop3): failed to initialize system zone (-117) [ 72.871311][ T4644] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.875940][ T4659] EXT4-fs (loop3): mount failed [ 72.963842][ T4665] loop1: detected capacity change from 0 to 1024 [ 72.972181][ T4665] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.001548][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.034012][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.074957][ T4670] loop1: detected capacity change from 0 to 128 [ 73.085140][ T4670] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.101206][ T4670] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.191275][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.289145][ T4676] loop1: detected capacity change from 0 to 512 [ 73.306808][ T4676] EXT4-fs: Ignoring removed i_version option [ 73.313578][ T4676] EXT4-fs: Ignoring removed nobh option [ 73.352827][ T4676] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.390757][ T4676] EXT4-fs (loop1): 1 truncate cleaned up [ 73.409561][ T4676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.494351][ T4681] ref_ctr increment failed for inode: 0x90 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810bb09140 [ 73.516019][ T4680] uprobe: syz.2.393:4680 failed to unregister, leaking uprobe [ 73.565715][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.660901][ T4686] loop1: detected capacity change from 0 to 1024 [ 73.668039][ T4686] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.699607][ T4686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.790603][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.848363][ T4696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.921044][ T4696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.956868][ T4697] loop2: detected capacity change from 0 to 128 [ 73.984464][ T4697] bio_check_eod: 5872 callbacks suppressed [ 73.984483][ T4697] syz.2.399: attempt to access beyond end of device [ 73.984483][ T4697] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 73.987585][ T4647] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.018692][ T4701] loop1: detected capacity change from 0 to 128 [ 74.043861][ T4647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054724][ T4701] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.091032][ T4696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.102525][ T4701] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.151920][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.164643][ T4647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.179420][ T4647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.194817][ T4696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.255962][ T4712] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.279870][ T4696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.294961][ T4696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.308826][ T4712] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.332769][ T4696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.359325][ T4696] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.367955][ T4717] loop0: detected capacity change from 0 to 128 [ 74.387561][ T4712] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.453275][ T4720] loop2: detected capacity change from 0 to 512 [ 74.471404][ T4712] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.492521][ T4720] capability: warning: `syz.2.404' uses deprecated v2 capabilities in a way that may be insecure [ 74.524687][ T4720] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 74.531740][ T4720] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.539949][ T4720] vhci_hcd vhci_hcd.0: Device attached [ 74.575889][ T4720] loop2: detected capacity change from 0 to 512 [ 74.586329][ T4721] vhci_hcd: connection closed [ 74.587374][ T2249] vhci_hcd: stop threads [ 74.597538][ T2249] vhci_hcd: release socket [ 74.602568][ T2249] vhci_hcd: disconnect device [ 74.624915][ T4659] syz.3.387 (4659) used greatest stack depth: 6712 bytes left [ 74.746209][ T4732] loop3: detected capacity change from 0 to 164 [ 74.755720][ T4732] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.765778][ T30] kauditd_printk_skb: 785 callbacks suppressed [ 74.765794][ T30] audit: type=1400 audit(1750563965.519:2129): avc: denied { mount } for pid=4731 comm="syz.3.408" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 74.768250][ T4732] netlink: 176 bytes leftover after parsing attributes in process `syz.3.408'. [ 74.809831][ T30] audit: type=1400 audit(1750563965.559:2130): avc: denied { setopt } for pid=4731 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.845866][ T30] audit: type=1400 audit(1750563965.589:2131): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 74.901769][ T4736] FAULT_INJECTION: forcing a failure. [ 74.901769][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 74.916500][ T4736] CPU: 1 UID: 0 PID: 4736 Comm: syz.3.410 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 74.916540][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.916552][ T4736] Call Trace: [ 74.916558][ T4736] [ 74.916565][ T4736] __dump_stack+0x1d/0x30 [ 74.916584][ T4736] dump_stack_lvl+0xe8/0x140 [ 74.916601][ T4736] dump_stack+0x15/0x1b [ 74.916651][ T4736] should_fail_ex+0x265/0x280 [ 74.916679][ T4736] should_failslab+0x8c/0xb0 [ 74.916718][ T4736] kmem_cache_alloc_noprof+0x50/0x310 [ 74.916741][ T4736] ? alloc_empty_file+0x76/0x200 [ 74.916843][ T4736] alloc_empty_file+0x76/0x200 [ 74.916865][ T4736] alloc_file_pseudo+0xc6/0x160 [ 74.916889][ T4736] anon_inode_getfile+0xa0/0x120 [ 74.916913][ T4736] __se_sys_perf_event_open+0xb69/0x11c0 [ 74.917009][ T4736] __x64_sys_perf_event_open+0x67/0x80 [ 74.917034][ T4736] x64_sys_call+0x27ec/0x2fb0 [ 74.917053][ T4736] do_syscall_64+0xd2/0x200 [ 74.917070][ T4736] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.917138][ T4736] ? clear_bhb_loop+0x40/0x90 [ 74.917187][ T4736] ? clear_bhb_loop+0x40/0x90 [ 74.917207][ T4736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.917225][ T4736] RIP: 0033:0x7f0fbdfce929 [ 74.917238][ T4736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.917253][ T4736] RSP: 002b:00007f0fbc637038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 74.917270][ T4736] RAX: ffffffffffffffda RBX: 00007f0fbe1f5fa0 RCX: 00007f0fbdfce929 [ 74.917351][ T4736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 74.917361][ T4736] RBP: 00007f0fbc637090 R08: 0000000000000000 R09: 0000000000000000 [ 74.917371][ T4736] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 74.917382][ T4736] R13: 0000000000000000 R14: 00007f0fbe1f5fa0 R15: 00007ffc76471f28 [ 74.917399][ T4736] [ 75.165154][ T4740] loop2: detected capacity change from 0 to 128 [ 75.174032][ T4740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.187425][ T4740] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.232511][ T4245] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.256162][ T4744] loop3: detected capacity change from 0 to 1024 [ 75.269688][ T4738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58657 sclass=netlink_route_socket pid=4738 comm=syz.1.411 [ 75.275153][ T4744] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.414: Allocating blocks 385-513 which overlap fs metadata [ 75.352424][ T4744] EXT4-fs (loop3): pa ffff88810a01c620: logic 16, phys. 129, len 24 [ 75.361039][ T4744] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 75.380752][ T3886] IPVS: starting estimator thread 0... [ 75.383768][ T4757] loop1: detected capacity change from 0 to 1024 [ 75.404558][ T4757] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.422011][ T4762] loop2: detected capacity change from 0 to 1024 [ 75.441414][ T4762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.449920][ T4762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.462161][ T30] audit: type=1400 audit(1750563966.189:2132): avc: denied { create } for pid=4754 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 75.484081][ T30] audit: type=1326 audit(1750563966.189:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 75.508946][ T30] audit: type=1326 audit(1750563966.189:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 75.535238][ T30] audit: type=1326 audit(1750563966.189:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 75.540661][ T4758] IPVS: using max 1824 ests per chain, 91200 per kthread [ 75.561211][ T30] audit: type=1326 audit(1750563966.189:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd10e3be929 code=0x7ffc0000 [ 75.660906][ T4772] FAULT_INJECTION: forcing a failure. [ 75.660906][ T4772] name failslab, interval 1, probability 0, space 0, times 0 [ 75.674439][ T4772] CPU: 0 UID: 0 PID: 4772 Comm: syz.1.419 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 75.674476][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.674494][ T4772] Call Trace: [ 75.674512][ T4772] [ 75.674523][ T4772] __dump_stack+0x1d/0x30 [ 75.674603][ T4772] dump_stack_lvl+0xe8/0x140 [ 75.674638][ T4772] dump_stack+0x15/0x1b [ 75.674708][ T4772] should_fail_ex+0x265/0x280 [ 75.674755][ T4772] ? sctp_add_bind_addr+0x71/0x1e0 [ 75.674792][ T4772] should_failslab+0x8c/0xb0 [ 75.674833][ T4772] __kmalloc_cache_noprof+0x4c/0x320 [ 75.675386][ T4772] sctp_add_bind_addr+0x71/0x1e0 [ 75.675484][ T4772] sctp_copy_local_addr_list+0x199/0x220 [ 75.675509][ T4772] sctp_copy_one_addr+0x7f/0x280 [ 75.675538][ T4772] sctp_bind_addr_copy+0x79/0x290 [ 75.675619][ T4772] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 75.675703][ T4772] sctp_connect_new_asoc+0x1c3/0x3a0 [ 75.675734][ T4772] sctp_sendmsg+0xf10/0x18d0 [ 75.675771][ T4772] ? selinux_socket_sendmsg+0xd1/0x1b0 [ 75.675852][ T4772] ? __pfx_sctp_sendmsg+0x10/0x10 [ 75.675884][ T4772] inet_sendmsg+0xc2/0xd0 [ 75.675910][ T4772] __sock_sendmsg+0x102/0x180 [ 75.675934][ T4772] __sys_sendto+0x268/0x330 [ 75.675998][ T4772] __x64_sys_sendto+0x76/0x90 [ 75.676027][ T4772] x64_sys_call+0x2eb6/0x2fb0 [ 75.676048][ T4772] do_syscall_64+0xd2/0x200 [ 75.676087][ T4772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.676118][ T4772] ? clear_bhb_loop+0x40/0x90 [ 75.676171][ T4772] ? clear_bhb_loop+0x40/0x90 [ 75.676279][ T4772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.676300][ T4772] RIP: 0033:0x7f786a24e929 [ 75.676315][ T4772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.676384][ T4772] RSP: 002b:00007f78688b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.676405][ T4772] RAX: ffffffffffffffda RBX: 00007f786a475fa0 RCX: 00007f786a24e929 [ 75.676421][ T4772] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 75.676437][ T4772] RBP: 00007f78688b7090 R08: 0000200000000140 R09: 000000000000001c [ 75.676452][ T4772] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 75.676467][ T4772] R13: 0000000000000000 R14: 00007f786a475fa0 R15: 00007ffcdf756a48 [ 75.676511][ T4772] [ 75.959664][ T30] audit: type=1400 audit(1750563966.379:2137): avc: denied { read write } for pid=4761 comm="syz.2.418" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.985616][ T30] audit: type=1400 audit(1750563966.379:2138): avc: denied { open } for pid=4761 comm="syz.2.418" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.306351][ T4783] loop4: detected capacity change from 0 to 128 [ 76.317961][ T4783] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.341715][ T4785] loop2: detected capacity change from 0 to 128 [ 76.352885][ T4785] syz.2.422: attempt to access beyond end of device [ 76.352885][ T4785] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 76.425182][ T4798] loop3: detected capacity change from 0 to 1024 [ 76.433193][ T4798] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.466998][ T55] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.513238][ T4809] loop3: detected capacity change from 0 to 128 [ 76.720368][ T4814] ================================================================== [ 76.729131][ T4814] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 76.738061][ T4814] [ 76.741291][ T4814] write to 0xffff88810a12a528 of 4 bytes by task 4809 on cpu 0: [ 76.749815][ T4814] writeback_single_inode+0x14a/0x3e0 [ 76.756036][ T4814] sync_inode_metadata+0x5b/0x90 [ 76.762185][ T4814] __generic_file_fsync+0xf8/0x140 [ 76.769659][ T4814] fat_file_fsync+0x49/0x100 [ 76.775014][ T4814] vfs_fsync_range+0x10d/0x130 [ 76.780532][ T4814] generic_file_write_iter+0x1b8/0x2f0 [ 76.786588][ T4814] iter_file_splice_write+0x5f2/0x970 [ 76.792995][ T4814] direct_splice_actor+0x156/0x2a0 [ 76.798753][ T4814] splice_direct_to_actor+0x312/0x680 [ 76.805181][ T4814] do_splice_direct+0xda/0x150 [ 76.810630][ T4814] do_sendfile+0x380/0x650 [ 76.815481][ T4814] __x64_sys_sendfile64+0x105/0x150 [ 76.821395][ T4814] x64_sys_call+0xb39/0x2fb0 [ 76.826205][ T4814] do_syscall_64+0xd2/0x200 [ 76.830941][ T4814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.837938][ T4814] [ 76.840866][ T4814] read to 0xffff88810a12a528 of 4 bytes by task 4814 on cpu 1: [ 76.849445][ T4814] __mark_inode_dirty+0x52/0x760 [ 76.855255][ T4814] fat_update_time+0x1ec/0x200 [ 76.861473][ T4814] touch_atime+0x145/0x340 [ 76.866474][ T4814] filemap_splice_read+0x629/0x6b0 [ 76.872426][ T4814] splice_direct_to_actor+0x26c/0x680 [ 76.878485][ T4814] do_splice_direct+0xda/0x150 [ 76.883810][ T4814] do_sendfile+0x380/0x650 [ 76.888457][ T4814] __x64_sys_sendfile64+0x105/0x150 [ 76.893915][ T4814] x64_sys_call+0xb39/0x2fb0 [ 76.899526][ T4814] do_syscall_64+0xd2/0x200 [ 76.904333][ T4814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.910882][ T4814] [ 76.913500][ T4814] value changed: 0x00000038 -> 0x00000002 [ 76.919693][ T4814] [ 76.922252][ T4814] Reported by Kernel Concurrency Sanitizer on: [ 76.929752][ T4814] CPU: 1 UID: 0 PID: 4814 Comm: syz.3.429 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 76.943175][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.953897][ T4814] ================================================================== [ 78.414340][ T4712] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.426532][ T4712] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.438156][ T4712] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.450645][ T4712] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0