last executing test programs: 4.34850582s ago: executing program 2 (id=430): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4.055879592s ago: executing program 2 (id=439): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4186}, {r3, 0x6080}], 0x2, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x24048014}, 0x20000004) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 3.181998258s ago: executing program 2 (id=458): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 3.161465928s ago: executing program 2 (id=459): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x515001, 0x408) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002087000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) 2.253779844s ago: executing program 0 (id=474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x9, &(0x7f0000000000)) 2.251788814s ago: executing program 2 (id=475): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x1100, 0x5dd9, 0x43, 0x2, 0x0, 0x5, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x806, 0x3, 0xa, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) unshare(0x22020600) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000400), 0x1, 0x76f, &(0x7f0000001580)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 2.037861596s ago: executing program 0 (id=479): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)='%pi6 \x00'}, 0x20) (async) r3 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000680)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @generic={0x5, 0xf, 0xb, 0x5, 0x800}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x5d, 0x1f, &(0x7f00000003c0)=""/31, 0x41100, 0x7e, '\x00', 0x0, 0x17, r5, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xaf92, 0xffffffffffffffff, 0x7, &(0x7f00000008c0)=[r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000000900)=[{0x5, 0x2, 0x8, 0x6}, {0x2, 0x1, 0x5, 0x5}, {0x1, 0x2, 0xc}, {0x3, 0x2, 0xb, 0x8}, {0x4, 0x4, 0x5, 0x6}, {0x3, 0x1, 0xc, 0x9}, {0x2, 0x1, 0xa, 0x9}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYBLOB="71e874dde2336e84cc8599d63c749ddd64cd091f5a0e0a503bc9bf56172578c6efdc6b4cd9ec3a6dba871607153db392616568ff7904a3081d6194a8fc48c6b0975d2a73ea2dfd62cb04b8e078adc6acd1987c506e7fae928236c74add5f9d69d6b319a201075540c1e4bd138a7bacc1352ff74ffbaea7591864193ebf1c1764818d25eac117d3596e47dced1b9f96c61e2b4b90475f7d1f88bdba4ffce718", @ANYRES32, @ANYBLOB="0000000000000000000000bf44c509bfa546c5ff0000000000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='fib_table_lookup\x00', r12}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x50) 1.918669247s ago: executing program 0 (id=481): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.788273428s ago: executing program 0 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x216822a75a8bdd29, 0x70bd27, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x4c, 0x2, {{}, 0xb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x101}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x2f, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x795900) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x6d}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r10, 0x0, 0x81, 0x0, 0x0) r11 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r11, 0x0, 0x0, 0x451, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) acct(0x0) 910.114114ms ago: executing program 3 (id=488): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 869.416854ms ago: executing program 0 (id=489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x9, &(0x7f0000000000)) 860.608244ms ago: executing program 3 (id=490): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000006440)='attr\x00') getdents(r1, 0xfffffffffffffffd, 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000080)='./file0\x00', 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 833.142784ms ago: executing program 0 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_setup(0xc90, &(0x7f0000000080)) r2 = io_uring_setup(0x3d66, &(0x7f0000000000)={0x0, 0xef52, 0x4000, 0x5, 0x7e}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r2, 0x18, 0x0, 0x1f, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000040000000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), 0x0}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "0b77380a49fed5c1"}) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x57c, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 751.327625ms ago: executing program 2 (id=493): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x515001, 0x408) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020870000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) sigaltstack(&(0x7f0000001380)={0x0, 0x2}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x13, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_val={0x18, 0x12, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x101}, @jmp={0x5, 0x1, 0xa, 0x1, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xa65}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x1, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000009c0)=[{0x5, 0x1, 0xd, 0x6}, {0x3, 0x3, 0xc, 0x9}, {0x0, 0x3, 0xa, 0x1}, {0x2, 0x5, 0x1, 0x2}, {0x0, 0x4, 0x1, 0x6}, {0x5, 0x2, 0x7, 0xa}, {0x1, 0x5, 0x2}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x4}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x25}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 698.167695ms ago: executing program 3 (id=494): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x1100, 0x5dd9, 0x43, 0x2, 0x0, 0x5, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x806, 0x3, 0xa, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) unshare(0x22020600) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000400), 0x1, 0x76f, &(0x7f0000001580)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 465.619357ms ago: executing program 4 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)) 421.004297ms ago: executing program 4 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r3, &(0x7f0000001480)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x1010080, 0x0, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="3608df9462001178e467a609fff42bf040e1efb76eb6d066ea69bfd0d15f758cf37be396f12b86f4892532409416fcaa54adfc8323c3cb25f4cb061b8640167a288c7f931946a05ed9ce513ddf0363ab7ddf69baa626a1900bc45abc3c166b8c59984ccbd0c94b532f15653f5c921fc6fd2de9c1f70e407b39dc9b4c3a92c42076e216ed9a67d8fed380a7c1aea3c765ed0e3a9d6ac168341873e055ceb316b994cfd8fc8205c32b8dfc224d02760476ee"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r7, 0x0, 0x71) 420.430637ms ago: executing program 4 (id=499): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) fchdir(0xffffffffffffffff) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000840)=0x40) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x2, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x8, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x5, 0x5, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x9, 0x44d, 0x107, 0x200, 0x8, 0xfffffff5, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x7, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x0, 0x81, 0x8003, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x3, 0x404, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x3, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0xa0, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x10, 0x4}}}, 0x24}}, 0x26000844) 310.267658ms ago: executing program 1 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 305.298468ms ago: executing program 3 (id=502): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x71) 273.794018ms ago: executing program 3 (id=503): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 231.988259ms ago: executing program 1 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x15, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510005487758bcdb4e518c26fd88d8c5600030000001839000002000000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000186500000c000000000000000700000018440000fdffffff0000000000000000186b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfa, &(0x7f00000002c0)=""/250, 0x41000, 0x14, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0], 0x0, 0x10, 0x10001, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x2051014, 0x0, 0x6, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x2, 0x5, 0x0) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) 226.341578ms ago: executing program 1 (id=505): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) close_range(r0, r1, 0x0) 205.328599ms ago: executing program 1 (id=506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3a, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0xffffffffffffff37, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x4, 0x1, 0x2, 0x9, 0xca46, 0x8, 0x301, r13}, 0x20) sendmmsg$inet_sctp(r9, &(0x7f0000001240)=[{&(0x7f00000002c0)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000580)=[{&(0x7f00000003c0)="90f2f9a4c9a18ac1624959e4", 0xc}, {&(0x7f0000000500)="efcd3b31904b57", 0x7}, {&(0x7f0000000680)="ed5c45d0d2afb7ba93799764df44eada4b7d12b51edcf975a58c6368403fb3754a432928b74e956d28283cdea003ee758c54478249dd3f9c81cdb0bf7b3e7cbe7fb0fd5b95449da36d38a235897ea6f24b99f13b130093e089c946241c68a34f6f57b159a6b48001318f350edbba22b0ec373ba0cde75b1dd865b50cb8b1cf3e8caaaebf154255aa9a34665933d1b6665ac241dfc8d9e0a865", 0x99}, {&(0x7f0000000540)="f409c4666bddc9dc2bc397f58ed441a40bf250f0d4e8f1a226d2d815e81211", 0x1f}], 0x4, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0xacf, 0x8008, 0x8, 0x8}}], 0x20, 0x1}, {&(0x7f0000000840)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000940)="5f4a8b7574e825864839a6230c820170047df55ea8d3534177550aabd8cd0f7b056327defe68622fe4e1e1a9efd71b0411c2246e12baa6b9d4af053f54fb06ed37ca71b2e45ef61c4371f77647e3872defeb8c60bedb713fe7c743c4f6163779ba708c9c08fbf412372b72f939c05ec5fc925da29593459db992d608da577d31951e01272034f72eb6909e05b3eb14c785579214cb87a17deceabe78ed22fd955f2105f2692f1b57664a2d65bc9edad26b16ad9bf21d9ebeda0bf5825f02bb603a7a7e61eb224336833ad467f15fb973ea9b3af9d4040169685f4a0d23ed4d9ec48ee6c9642a428bcc81", 0xea}, {&(0x7f0000000b00)="9ce32f245b47801754985058193fbda432ec85de4ca094da05b9747dd6e079a50f96d04997bdd5768179187fed0247aecee54ac9e8d62d6698a08e7307a06294c267fdd84a34fa8db623f5a87c46", 0x4e}], 0x2, &(0x7f0000000c00)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x3, 0x1}}], 0x20, 0x4080}, {&(0x7f0000000c40)=@in6={0xa, 0x4e22, 0xfffffffa, @mcast1, 0xfffff0b5}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000c80)="1a34bedab68ccda3603773053495acf67675d2c50425022aea8c2468273d0456aa248218d10bc4dfdf5a42508e5bdc3d60cbac1ae97c7ad9e27f4d5dcaef432bd0b0fa8e6f297de78144fba37c01d070dbffa8b42fd0bff8d57ae29277dc414a399b01e1355d7346b4c8779d63b212d1c97eee65c31b491bc7be6e01cb3f639321d9c14f7d77b03f91571b608037f072842a9918df9bd8cec6e62b941cc2fdcbe3d99345ad7fefb4a04ba8f2cf9cbcd5671226ff1557eba45c1a7ba65d91779616a9913fef471742608d13eed91a5295ca8b43d483432c8350d393e4c46d835c", 0xe0}, {&(0x7f0000000d80)="e2497e6d400cee776bdeb7fbf85b07d2bd799ab563e65d47048cec8b21b73b6d668c412767ee8d60371bfacca9e91629d111e1fec6dc21963801c7f34f8b09bb707f97fc0b05410a55", 0x49}, {&(0x7f0000000e00)="2b77de1bb1cf62a9ca93cb6f09d5e5edf009e86d2a06d43bf2c7057de2bcecf53594ffcc52f4b956e3a41f1ecd0e93ae6c63f89e668f3ac54158d73642cdf1", 0x3f}, {&(0x7f0000000e40)="5cdf38647031da371481ea88ffec0ca5ce7f58ce2265563fb40c0dc65a252df84b1b4d1bfe8d218e2e3a4a84dc7e7089d8c2ea70f9db", 0x36}, {&(0x7f0000000e80)="d2b172686391a5e89307c38460685ab0e2793b675a914ce98b3e7f025932522affc6704668a5fcaf4a1fb3f7e87ad622f510c6244e4c2381ae397dff89ed712a85fa66e8e5c6a6ec5c95288197b3bf145fc99b3fab24f9d4d3f003f9ea4dde1db55b86c35a625eb5b35f7323c8e76a60621762d3c5ee8a8eb48b1cec43fa3ebcd44197ef9464f2b47e8ad77f4eef7b82e8f7df43bce7071814446ebc01238a6968700796de4eec308ce70da9cbb31c84660722cacd106952d982dec15cb71a17255363ba8925e136bea38c9265afce7c405d7fd14805c7b874b0442950113579650f45653d4dd752e868d548fb48d68c12d7fc0985f5def3", 0xf8}, {&(0x7f0000000f80)="98e50e6589d1b74b554d596f318df1ba2ff2b110558b498eb4b39d2da7cac86536ca1530d14e462b4e38240f3a4f4f5ac91e20f1c12ccb05d4d9897ebefec79763377ad1f2837647b696d276bd998dd555ce50d39dbfa2bc64b3c99f3a310a14183638ff67062f65571513371fd4e947ee9d476759c413", 0x77}, {&(0x7f0000001000)="710cf0f5a3a78a6629757e4f3c32b468907ace6238cf487093cdd2a098ae1a4b75913b97c70944c05addf2eec7afda3b17eed9d68ddf231fe880d16ef45d93b79689599619293410b9407dbc8201ee73b6269224eb64dc8838", 0x59}], 0x7, &(0x7f0000001180)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x68, 0x4, 0x7, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x3, 0x208, 0x2, 0xec, 0x5, 0x1, 0x0, r13}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0xf, 0xffff, 0x0, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}], 0xb8, 0x40000}], 0x3, 0x20004014) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 123.720179ms ago: executing program 4 (id=507): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) close_range(r0, r1, 0x0) 71.4038ms ago: executing program 1 (id=508): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)) 62.43115ms ago: executing program 4 (id=509): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 48.87361ms ago: executing program 3 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r3, &(0x7f0000001480)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x1010080, 0x0, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="3608df9462001178e467a609fff42bf040e1efb76eb6d066ea69bfd0d15f758cf37be396f12b86f4892532409416fcaa54adfc8323c3cb25f4cb061b8640167a288c7f931946a05ed9ce513ddf0363ab7ddf69baa626a1900bc45abc3c166b8c59984ccbd0c94b532f15653f5c921fc6fd2de9c1f70e407b39dc9b4c3a92c42076e216ed9a67d8fed380a7c1aea3c765ed0e3a9d6ac168341873e055ceb316b994cfd8fc8205c32b8dfc224d02760476ee"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x71) 165.53µs ago: executing program 4 (id=511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x9, &(0x7f0000000000)) 0s ago: executing program 1 (id=512): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.446141][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 19.446158][ T30] audit: type=1400 audit(1741468963.584:76): avc: denied { transition } for pid=3180 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.450234][ T30] audit: type=1400 audit(1741468963.584:77): avc: denied { noatsecure } for pid=3180 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.452931][ T30] audit: type=1400 audit(1741468963.584:78): avc: denied { write } for pid=3180 comm="sh" path="pipe:[1840]" dev="pipefs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.456103][ T30] audit: type=1400 audit(1741468963.584:79): avc: denied { rlimitinh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.458887][ T30] audit: type=1400 audit(1741468963.584:80): avc: denied { siginh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.417036][ T30] audit: type=1400 audit(1741468965.554:81): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 27.581377][ T30] audit: type=1400 audit(1741468971.714:82): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.582407][ T3290] cgroup: Unknown subsys name 'net' [ 27.604129][ T30] audit: type=1400 audit(1741468971.714:83): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.631531][ T30] audit: type=1400 audit(1741468971.744:84): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.764968][ T3290] cgroup: Unknown subsys name 'cpuset' [ 27.771080][ T3290] cgroup: Unknown subsys name 'rlimit' [ 27.941418][ T30] audit: type=1400 audit(1741468972.074:85): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.964686][ T30] audit: type=1400 audit(1741468972.074:86): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.985118][ T30] audit: type=1400 audit(1741468972.074:87): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.005456][ T30] audit: type=1400 audit(1741468972.074:88): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.020942][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.025747][ T30] audit: type=1400 audit(1741468972.084:89): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.059179][ T30] audit: type=1400 audit(1741468972.084:90): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.081188][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.082373][ T30] audit: type=1400 audit(1741468972.174:91): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.326648][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.355338][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 29.385086][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.399529][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.424449][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.471945][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.479071][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.486266][ T3302] bridge_slave_0: entered allmulticast mode [ 29.492594][ T3302] bridge_slave_0: entered promiscuous mode [ 29.503968][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.511065][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.518219][ T3299] bridge_slave_0: entered allmulticast mode [ 29.524744][ T3299] bridge_slave_0: entered promiscuous mode [ 29.536184][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.543233][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.550465][ T3302] bridge_slave_1: entered allmulticast mode [ 29.556951][ T3302] bridge_slave_1: entered promiscuous mode [ 29.567224][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.574304][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.581521][ T3299] bridge_slave_1: entered allmulticast mode [ 29.587918][ T3299] bridge_slave_1: entered promiscuous mode [ 29.625964][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.642314][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.656243][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.663296][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.670467][ T3304] bridge_slave_0: entered allmulticast mode [ 29.676969][ T3304] bridge_slave_0: entered promiscuous mode [ 29.684040][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.693156][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.700240][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.707371][ T3304] bridge_slave_1: entered allmulticast mode [ 29.713688][ T3304] bridge_slave_1: entered promiscuous mode [ 29.723038][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.737092][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.744280][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.751429][ T3300] bridge_slave_0: entered allmulticast mode [ 29.757790][ T3300] bridge_slave_0: entered promiscuous mode [ 29.786851][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.793931][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.801146][ T3308] bridge_slave_0: entered allmulticast mode [ 29.807550][ T3308] bridge_slave_0: entered promiscuous mode [ 29.813879][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.821007][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.828150][ T3300] bridge_slave_1: entered allmulticast mode [ 29.834521][ T3300] bridge_slave_1: entered promiscuous mode [ 29.841447][ T3299] team0: Port device team_slave_0 added [ 29.852428][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.866178][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.873333][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.880542][ T3308] bridge_slave_1: entered allmulticast mode [ 29.886919][ T3308] bridge_slave_1: entered promiscuous mode [ 29.901940][ T3299] team0: Port device team_slave_1 added [ 29.913410][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.927804][ T3302] team0: Port device team_slave_0 added [ 29.951228][ T3302] team0: Port device team_slave_1 added [ 29.957957][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.968182][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.978092][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.987583][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.994553][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.020619][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.031953][ T3304] team0: Port device team_slave_0 added [ 30.038678][ T3304] team0: Port device team_slave_1 added [ 30.049039][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.067605][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.074628][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.100817][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.121386][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.128396][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.154493][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.172442][ T3308] team0: Port device team_slave_0 added [ 30.187498][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.194565][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.220493][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.231967][ T3308] team0: Port device team_slave_1 added [ 30.238684][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.245636][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.271583][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.283039][ T3300] team0: Port device team_slave_0 added [ 30.289985][ T3300] team0: Port device team_slave_1 added [ 30.308310][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.315283][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.341178][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.366982][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.373927][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.399881][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.413133][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.420135][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.446088][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.462715][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.469683][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.495605][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.514536][ T3299] hsr_slave_0: entered promiscuous mode [ 30.520632][ T3299] hsr_slave_1: entered promiscuous mode [ 30.533434][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.540414][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.566364][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.602496][ T3304] hsr_slave_0: entered promiscuous mode [ 30.608582][ T3304] hsr_slave_1: entered promiscuous mode [ 30.614387][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.621932][ T3304] Cannot create hsr debugfs directory [ 30.634709][ T3302] hsr_slave_0: entered promiscuous mode [ 30.640706][ T3302] hsr_slave_1: entered promiscuous mode [ 30.646513][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.654092][ T3302] Cannot create hsr debugfs directory [ 30.684163][ T3300] hsr_slave_0: entered promiscuous mode [ 30.690179][ T3300] hsr_slave_1: entered promiscuous mode [ 30.696164][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.703723][ T3300] Cannot create hsr debugfs directory [ 30.713846][ T3308] hsr_slave_0: entered promiscuous mode [ 30.719798][ T3308] hsr_slave_1: entered promiscuous mode [ 30.725679][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.733229][ T3308] Cannot create hsr debugfs directory [ 30.917606][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.926386][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.937639][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.948094][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.965488][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.974505][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.983091][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.993644][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.015206][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.023627][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.038769][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.047317][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.076930][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.085626][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.103592][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.120373][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.151080][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.160488][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.169292][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.178676][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.230721][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.240237][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.257342][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.269740][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.288913][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.300103][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.307161][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.316026][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.323095][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.332907][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.345267][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.358449][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.365522][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.378462][ T2527] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.385648][ T2527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.400162][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.407234][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.420001][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.441835][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.452218][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.480193][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.487259][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.501046][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.508137][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.517158][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.524339][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.558788][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.603112][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.633032][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.643462][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.655918][ T2349] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.663003][ T2349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.672072][ T2349] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.679209][ T2349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.701905][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.725245][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.750156][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.768744][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.789527][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.861891][ T3304] veth0_vlan: entered promiscuous mode [ 31.883151][ T3304] veth1_vlan: entered promiscuous mode [ 31.912669][ T3302] veth0_vlan: entered promiscuous mode [ 31.931189][ T3304] veth0_macvtap: entered promiscuous mode [ 31.942208][ T3299] veth0_vlan: entered promiscuous mode [ 31.950201][ T3302] veth1_vlan: entered promiscuous mode [ 31.963342][ T3299] veth1_vlan: entered promiscuous mode [ 31.970238][ T3300] veth0_vlan: entered promiscuous mode [ 31.982037][ T3304] veth1_macvtap: entered promiscuous mode [ 32.002535][ T3300] veth1_vlan: entered promiscuous mode [ 32.011623][ T3302] veth0_macvtap: entered promiscuous mode [ 32.020013][ T3302] veth1_macvtap: entered promiscuous mode [ 32.027035][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.041318][ T3299] veth0_macvtap: entered promiscuous mode [ 32.050396][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.058233][ T3299] veth1_macvtap: entered promiscuous mode [ 32.071372][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.081866][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.092416][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.102217][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.112696][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.122643][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.133135][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.144986][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.156389][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.166893][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.177945][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.191823][ T3308] veth0_vlan: entered promiscuous mode [ 32.198368][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.207202][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.216001][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.224822][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.236034][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.246576][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.256476][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.266950][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.277400][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.286905][ T3300] veth0_macvtap: entered promiscuous mode [ 32.302784][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.311609][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.320382][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.329091][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.340114][ T3300] veth1_macvtap: entered promiscuous mode [ 32.347584][ T3308] veth1_vlan: entered promiscuous mode [ 32.360852][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.369601][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.378407][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.387140][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422855][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.433345][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.434461][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.443314][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.468458][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.478325][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.488874][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.499817][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.512630][ T3308] veth0_macvtap: entered promiscuous mode [ 32.535570][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.546264][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.556171][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.566623][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.576539][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.587012][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.600312][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.603072][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 32.603087][ T30] audit: type=1326 audit(1741468976.734:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0866d169 code=0x7ffc0000 [ 32.608643][ T3308] veth1_macvtap: entered promiscuous mode [ 32.613631][ T30] audit: type=1326 audit(1741468976.734:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d0866d169 code=0x7ffc0000 [ 32.641221][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.642407][ T30] audit: type=1400 audit(1741468976.734:126): avc: denied { prog_load } for pid=3440 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.665426][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.665439][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.675859][ T30] audit: type=1400 audit(1741468976.734:127): avc: denied { bpf } for pid=3440 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.694548][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.704340][ T30] audit: type=1326 audit(1741468976.734:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0866d169 code=0x7ffc0000 [ 32.714758][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.734884][ T30] audit: type=1326 audit(1741468976.734:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0866d169 code=0x7ffc0000 [ 32.744748][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.744760][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.744773][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.747268][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.844433][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.853147][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.861916][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.870650][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.882608][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.893069][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.902927][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.909203][ T3448] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 32.913364][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.924701][ T30] audit: type=1400 audit(1741468977.044:130): avc: denied { relabelfrom } for pid=3447 comm="syz.3.4" name="" dev="pipefs" ino=5137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 32.932464][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.954454][ T30] audit: type=1400 audit(1741468977.054:131): avc: denied { relabelto } for pid=3447 comm="syz.3.4" name="" dev="pipefs" ino=5137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:sudo_exec_t:s0" [ 32.964854][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.001008][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.011455][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.024624][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.049380][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.058136][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.058828][ T3450] loop2: detected capacity change from 0 to 512 [ 33.066862][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.081827][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.083010][ T30] audit: type=1400 audit(1741468977.174:132): avc: denied { map_create } for pid=3449 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.104068][ T3450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.109400][ T30] audit: type=1400 audit(1741468977.174:133): avc: denied { create } for pid=3447 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.188319][ T3457] loop4: detected capacity change from 0 to 512 [ 33.205404][ T3457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.393242][ T3473] program syz.0.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.673729][ T3479] loop0: detected capacity change from 0 to 512 [ 33.682969][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.875823][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.955166][ T3491] loop2: detected capacity change from 0 to 512 [ 33.962891][ T3491] EXT4-fs: Ignoring removed oldalloc option [ 33.969646][ T3491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.982800][ T3491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.995437][ T3491] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.008472][ T3491] EXT4-fs (loop2): 1 truncate cleaned up [ 34.014892][ T3491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.207671][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.271891][ T3299] ------------[ cut here ]------------ [ 34.277465][ T3299] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 34.277710][ T3299] WARNING: CPU: 0 PID: 3299 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 34.297142][ T3299] Modules linked in: [ 34.301077][ T3299] CPU: 0 UID: 0 PID: 3299 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 34.312165][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.322358][ T3299] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 34.328314][ T3299] Code: ff 48 c7 c7 9f f6 b2 86 e8 e9 60 c4 ff c6 05 71 62 0b 05 01 90 48 c7 c7 c1 3e 1b 86 4c 89 f6 89 ea 44 89 f9 e8 4d b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 34.348080][ T3299] RSP: 0018:ffffc900014c7ac8 EFLAGS: 00010246 [ 34.354263][ T3299] RAX: da69f660f1ffc900 RBX: ffff8881066de9a8 RCX: ffff888102efb180 [ 34.362263][ T3299] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 34.370292][ T3299] RBP: 0000000000000027 R08: ffffffff81344af7 R09: 0000000000000000 [ 34.378313][ T3299] R10: 0001ffffffffffff R11: ffff888102efb180 R12: ffff8881066de9a8 [ 34.386368][ T3299] R13: ffff8881066de9d0 R14: ffff8881066de880 R15: 000000000000001d [ 34.394391][ T3299] FS: 000055555c4dc500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 34.403358][ T3299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.409982][ T3299] CR2: 000055555c507528 CR3: 00000001049d8000 CR4: 00000000003506f0 [ 34.417976][ T3299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.425986][ T3299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.433994][ T3299] Call Trace: [ 34.437306][ T3299] [ 34.440242][ T3299] ? __warn+0x141/0x350 [ 34.444451][ T3299] ? report_bug+0x315/0x420 [ 34.449114][ T3299] ? inode_set_cached_link+0xc4/0xd0 [ 34.454507][ T3299] ? handle_bug+0x60/0x90 [ 34.458923][ T3299] ? exc_invalid_op+0x1a/0x50 [ 34.463662][ T3299] ? asm_exc_invalid_op+0x1a/0x20 [ 34.468740][ T3299] ? __warn_printk+0x167/0x1b0 [ 34.473512][ T3299] ? inode_set_cached_link+0xc4/0xd0 [ 34.478845][ T3299] ? inode_set_cached_link+0xc3/0xd0 [ 34.484189][ T3299] __ext4_iget+0x1bb5/0x1e20 [ 34.488825][ T3299] ext4_lookup+0x15b/0x390 [ 34.493309][ T3299] __lookup_slow+0x18a/0x250 [ 34.497962][ T3299] lookup_slow+0x3c/0x60 [ 34.502227][ T3299] walk_component+0x1f5/0x230 [ 34.507005][ T3299] ? path_lookupat+0xfd/0x2b0 [ 34.511702][ T3299] path_lookupat+0x10a/0x2b0 [ 34.516367][ T3299] filename_lookup+0x150/0x340 [ 34.521219][ T3299] user_path_at+0x3c/0x120 [ 34.525679][ T3299] __x64_sys_umount+0x85/0xe0 [ 34.530420][ T3299] x64_sys_call+0x20cd/0x2dc0 [ 34.535161][ T3299] do_syscall_64+0xc9/0x1c0 [ 34.539719][ T3299] ? clear_bhb_loop+0x55/0xb0 [ 34.544505][ T3299] ? clear_bhb_loop+0x55/0xb0 [ 34.549204][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.555162][ T3299] RIP: 0033:0x7f33dadde497 [ 34.559591][ T3299] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 34.579249][ T3299] RSP: 002b:00007fff26502048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.587695][ T3299] RAX: ffffffffffffffda RBX: 00007f33dae5e08c RCX: 00007f33dadde497 [ 34.595763][ T3299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff26502100 [ 34.603765][ T3299] RBP: 00007fff26502100 R08: 0000000000000000 R09: 0000000000000000 [ 34.611782][ T3299] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff265031f0 [ 34.619774][ T3299] R13: 00007f33dae5e08c R14: 0000000000008559 R15: 00007fff265053b0 [ 34.627802][ T3299] [ 34.630826][ T3299] ---[ end trace 0000000000000000 ]--- [ 34.938541][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.997390][ T3499] sd 0:0:1:0: device reset [ 35.023716][ T3299] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 35.067166][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.167294][ T3499] infiniband syz!: set active [ 35.172029][ T3499] infiniband syz!: added team_slave_0 [ 35.213112][ T3499] RDS/IB: syz!: added [ 35.230431][ T3499] smc: adding ib device syz! with port count 1 [ 35.238479][ T3499] smc: ib device syz! port 1 has pnetid [ 35.458230][ T3499] syz.4.15 (3499) used greatest stack depth: 10608 bytes left [ 35.522973][ T3513] mmap: syz.4.21 (3513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.580331][ T3521] loop4: detected capacity change from 0 to 2048 [ 35.599092][ T3521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.617699][ T3521] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.712759][ T3526] FAULT_INJECTION: forcing a failure. [ 35.712759][ T3526] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.725827][ T3526] CPU: 0 UID: 0 PID: 3526 Comm: syz.3.23 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 35.725854][ T3526] Tainted: [W]=WARN [ 35.725860][ T3526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.725871][ T3526] Call Trace: [ 35.725878][ T3526] [ 35.725886][ T3526] dump_stack_lvl+0xf2/0x150 [ 35.725982][ T3526] dump_stack+0x15/0x1a [ 35.726007][ T3526] should_fail_ex+0x24a/0x260 [ 35.726041][ T3526] should_fail+0xb/0x10 [ 35.726072][ T3526] should_fail_usercopy+0x1a/0x20 [ 35.726137][ T3526] strncpy_from_user+0x25/0x210 [ 35.726166][ T3526] ? audit_log_end+0x1d0/0x1e0 [ 35.726190][ T3526] strncpy_from_user_nofault+0x66/0xe0 [ 35.726296][ T3526] bpf_probe_read_user_str+0x2a/0x70 [ 35.726355][ T3526] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 35.726375][ T3526] bpf_trace_run4+0x114/0x1e0 [ 35.726410][ T3526] ? update_load_avg+0x1f7/0x7c0 [ 35.726514][ T3526] __traceiter_sched_switch+0x3b/0x60 [ 35.726547][ T3526] __schedule+0x877/0x990 [ 35.726575][ T3526] schedule+0x55/0xc0 [ 35.726598][ T3526] syscall_exit_to_user_mode+0x42/0x120 [ 35.726629][ T3526] do_syscall_64+0xd6/0x1c0 [ 35.726816][ T3526] ? clear_bhb_loop+0x55/0xb0 [ 35.726847][ T3526] ? clear_bhb_loop+0x55/0xb0 [ 35.726916][ T3526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.726945][ T3526] RIP: 0033:0x7fd62763d169 [ 35.727004][ T3526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.727023][ T3526] RSP: 002b:00007fd625ca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 35.727044][ T3526] RAX: 0000000000000000 RBX: 00007fd627855fa0 RCX: 00007fd62763d169 [ 35.727073][ T3526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 35.727091][ T3526] RBP: 00007fd625ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 35.727101][ T3526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.727112][ T3526] R13: 0000000000000000 R14: 00007fd627855fa0 R15: 00007ffd4bbd2c08 [ 35.727130][ T3526] [ 35.887211][ T3521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.22: bg 0: block 345: padding at end of block bitmap is not set [ 35.967514][ T3521] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 35.980209][ T3521] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.980209][ T3521] [ 36.032609][ T3537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.049804][ T3530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.058381][ T3530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.097149][ T3521] syz.4.22 (3521) used greatest stack depth: 9848 bytes left [ 36.130714][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 36.143497][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.143497][ T51] [ 36.153283][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 36.159333][ T51] EXT4-fs (loop4): Free/Dirty block details [ 36.165346][ T51] EXT4-fs (loop4): free_blocks=0 [ 36.170306][ T51] EXT4-fs (loop4): dirty_blocks=2048 [ 36.175749][ T51] EXT4-fs (loop4): Block reservation details [ 36.282111][ T3552] sd 0:0:1:0: device reset [ 36.288942][ T3550] loop4: detected capacity change from 0 to 512 [ 36.307505][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.324254][ T3552] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.601301][ T3564] netlink: 'syz.1.35': attribute type 13 has an invalid length. [ 36.617798][ T3564] gretap0: refused to change device tx_queue_len [ 36.624177][ T3564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.655203][ T3566] FAULT_INJECTION: forcing a failure. [ 36.655203][ T3566] name failslab, interval 1, probability 0, space 0, times 1 [ 36.667979][ T3566] CPU: 0 UID: 0 PID: 3566 Comm: syz.1.36 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 36.668003][ T3566] Tainted: [W]=WARN [ 36.668008][ T3566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.668018][ T3566] Call Trace: [ 36.668022][ T3566] [ 36.668028][ T3566] dump_stack_lvl+0xf2/0x150 [ 36.668127][ T3566] dump_stack+0x15/0x1a [ 36.668151][ T3566] should_fail_ex+0x24a/0x260 [ 36.668178][ T3566] should_failslab+0x8f/0xb0 [ 36.668204][ T3566] __kmalloc_node_noprof+0xad/0x410 [ 36.668223][ T3566] ? __kvmalloc_node_noprof+0x72/0x170 [ 36.668313][ T3566] __kvmalloc_node_noprof+0x72/0x170 [ 36.668338][ T3566] alloc_netdev_mqs+0x741/0xab0 [ 36.668361][ T3566] rtnl_create_link+0x232/0x720 [ 36.668380][ T3566] rtnl_newlink_create+0x133/0x5d0 [ 36.668416][ T3566] ? ns_capable+0x7d/0xb0 [ 36.668519][ T3566] ? netlink_ns_capable+0x88/0xa0 [ 36.668547][ T3566] rtnl_newlink+0xe9f/0x1250 [ 36.668576][ T3566] ? __kfree_skb+0x102/0x150 [ 36.668594][ T3566] ? packet_rcv+0xd4/0x990 [ 36.668618][ T3566] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 36.668663][ T3566] ? packet_rcv+0xd4/0x990 [ 36.668685][ T3566] ? __rcu_read_unlock+0x4e/0x70 [ 36.668703][ T3566] ? avc_has_perm_noaudit+0x1cc/0x210 [ 36.668721][ T3566] ? selinux_capable+0x1f2/0x260 [ 36.668742][ T3566] ? security_capable+0x81/0x90 [ 36.668886][ T3566] ? ns_capable+0x7d/0xb0 [ 36.668932][ T3566] ? __pfx_rtnl_newlink+0x10/0x10 [ 36.668957][ T3566] rtnetlink_rcv_msg+0x651/0x710 [ 36.668996][ T3566] ? ref_tracker_free+0x3a5/0x410 [ 36.669029][ T3566] netlink_rcv_skb+0x12c/0x230 [ 36.669052][ T3566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 36.669112][ T3566] rtnetlink_rcv+0x1c/0x30 [ 36.669130][ T3566] netlink_unicast+0x599/0x670 [ 36.669167][ T3566] netlink_sendmsg+0x5cc/0x6e0 [ 36.669196][ T3566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.669221][ T3566] __sock_sendmsg+0x140/0x180 [ 36.669246][ T3566] ____sys_sendmsg+0x326/0x4b0 [ 36.669282][ T3566] __sys_sendmsg+0x19d/0x230 [ 36.669380][ T3566] __x64_sys_sendmsg+0x46/0x50 [ 36.669399][ T3566] x64_sys_call+0x2734/0x2dc0 [ 36.669429][ T3566] do_syscall_64+0xc9/0x1c0 [ 36.669454][ T3566] ? clear_bhb_loop+0x55/0xb0 [ 36.669475][ T3566] ? clear_bhb_loop+0x55/0xb0 [ 36.669505][ T3566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.669534][ T3566] RIP: 0033:0x7fe83b6ad169 [ 36.669562][ T3566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.669575][ T3566] RSP: 002b:00007fe839d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.669594][ T3566] RAX: ffffffffffffffda RBX: 00007fe83b8c5fa0 RCX: 00007fe83b6ad169 [ 36.669643][ T3566] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 36.669653][ T3566] RBP: 00007fe839d17090 R08: 0000000000000000 R09: 0000000000000000 [ 36.669664][ T3566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.669677][ T3566] R13: 0000000000000000 R14: 00007fe83b8c5fa0 R15: 00007fff635dfda8 [ 36.669715][ T3566] [ 37.012543][ T3572] Zero length message leads to an empty skb [ 37.023267][ T3572] netlink: 'syz.0.39': attribute type 10 has an invalid length. [ 37.033338][ T3572] syz_tun: entered promiscuous mode [ 37.042513][ T3572] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.077967][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 37.118824][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.250372][ T3593] FAULT_INJECTION: forcing a failure. [ 37.250372][ T3593] name failslab, interval 1, probability 0, space 0, times 0 [ 37.263227][ T3593] CPU: 1 UID: 0 PID: 3593 Comm: syz.4.49 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 37.263259][ T3593] Tainted: [W]=WARN [ 37.263266][ T3593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.263279][ T3593] Call Trace: [ 37.263287][ T3593] [ 37.263296][ T3593] dump_stack_lvl+0xf2/0x150 [ 37.263348][ T3593] dump_stack+0x15/0x1a [ 37.263370][ T3593] should_fail_ex+0x24a/0x260 [ 37.263402][ T3593] should_failslab+0x8f/0xb0 [ 37.263531][ T3593] kmem_cache_alloc_noprof+0x52/0x320 [ 37.263599][ T3593] ? skb_clone+0x154/0x1f0 [ 37.263625][ T3593] skb_clone+0x154/0x1f0 [ 37.263677][ T3593] __netlink_deliver_tap+0x2bd/0x4f0 [ 37.263724][ T3593] netlink_sendskb+0x126/0x150 [ 37.263751][ T3593] netlink_unicast+0x291/0x670 [ 37.263853][ T3593] netlink_ack+0x4b7/0x4f0 [ 37.263885][ T3593] netlink_rcv_skb+0x19c/0x230 [ 37.263914][ T3593] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 37.263949][ T3593] nfnetlink_rcv+0x16c/0x15d0 [ 37.263969][ T3593] ? kmem_cache_free+0xdc/0x2d0 [ 37.263990][ T3593] ? nlmon_xmit+0x51/0x60 [ 37.264063][ T3593] ? __kfree_skb+0x102/0x150 [ 37.264084][ T3593] ? consume_skb+0x49/0x160 [ 37.264105][ T3593] ? nlmon_xmit+0x51/0x60 [ 37.264202][ T3593] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 37.264236][ T3593] ? __dev_queue_xmit+0xb6e/0x2090 [ 37.264346][ T3593] ? ref_tracker_free+0x3a5/0x410 [ 37.264386][ T3593] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 37.264428][ T3593] netlink_unicast+0x599/0x670 [ 37.264461][ T3593] netlink_sendmsg+0x5cc/0x6e0 [ 37.264548][ T3593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.264632][ T3593] __sock_sendmsg+0x140/0x180 [ 37.264666][ T3593] ____sys_sendmsg+0x326/0x4b0 [ 37.264755][ T3593] __sys_sendmsg+0x19d/0x230 [ 37.264794][ T3593] __x64_sys_sendmsg+0x46/0x50 [ 37.264821][ T3593] x64_sys_call+0x2734/0x2dc0 [ 37.264890][ T3593] do_syscall_64+0xc9/0x1c0 [ 37.264965][ T3593] ? clear_bhb_loop+0x55/0xb0 [ 37.264996][ T3593] ? clear_bhb_loop+0x55/0xb0 [ 37.265078][ T3593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.265106][ T3593] RIP: 0033:0x7f45d5e1d169 [ 37.265122][ T3593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.265139][ T3593] RSP: 002b:00007f45d4487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.265158][ T3593] RAX: ffffffffffffffda RBX: 00007f45d6035fa0 RCX: 00007f45d5e1d169 [ 37.265172][ T3593] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 37.265184][ T3593] RBP: 00007f45d4487090 R08: 0000000000000000 R09: 0000000000000000 [ 37.265195][ T3593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.265207][ T3593] R13: 0000000000000000 R14: 00007f45d6035fa0 R15: 00007fff1f53b738 [ 37.265224][ T3593] [ 37.673313][ T30] kauditd_printk_skb: 1113 callbacks suppressed [ 37.673394][ T30] audit: type=1400 audit(1741468981.804:1247): avc: denied { execute } for pid=3613 comm="syz.1.56" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.702776][ T3614] process 'syz.1.56' launched '/dev/fd/8' with NULL argv: empty string added [ 37.714941][ T30] audit: type=1400 audit(1741468981.844:1248): avc: denied { execute_no_trans } for pid=3613 comm="syz.1.56" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.720994][ T3615] syz.3.51 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.744172][ T30] audit: type=1404 audit(1741468981.844:1249): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 37.778806][ T30] audit: type=1400 audit(1741468981.854:1250): avc: denied { bpf } for pid=3600 comm="syz.3.51" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 37.799476][ T30] audit: type=1400 audit(1741468981.854:1251): avc: denied { prog_run } for pid=3600 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 37.818273][ T30] audit: type=1400 audit(1741468981.854:1252): avc: denied { create } for pid=3600 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 37.837597][ T30] audit: type=1400 audit(1741468981.854:1253): avc: denied { create } for pid=3600 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 37.858125][ T30] audit: type=1400 audit(1741468981.854:1254): avc: denied { create } for pid=3600 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 37.878918][ T30] audit: type=1400 audit(1741468981.904:1255): avc: denied { map_create } for pid=3600 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 37.897973][ T30] audit: type=1400 audit(1741468981.904:1256): avc: denied { prog_load } for pid=3600 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.022254][ T3632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 38.031209][ T3632] bridge_slave_1: left allmulticast mode [ 38.037061][ T3632] bridge_slave_1: left promiscuous mode [ 38.042828][ T3632] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.055384][ T3632] bridge_slave_0: left allmulticast mode [ 38.061045][ T3632] bridge_slave_0: left promiscuous mode [ 38.066895][ T3632] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.077583][ T3634] loop4: detected capacity change from 0 to 512 [ 38.096023][ T3634] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.104643][ T3634] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.111276][ T3634] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.126283][ T3634] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 38.133259][ T3634] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.63: bg 0: block 40: padding at end of block bitmap is not set [ 38.148919][ T3634] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 38.158626][ T3634] EXT4-fs (loop4): 1 truncate cleaned up [ 38.165828][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.200424][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.223193][ T3642] FAULT_INJECTION: forcing a failure. [ 38.223193][ T3642] name failslab, interval 1, probability 0, space 0, times 0 [ 38.235948][ T3642] CPU: 1 UID: 0 PID: 3642 Comm: syz.1.66 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 38.236023][ T3642] Tainted: [W]=WARN [ 38.236031][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.236045][ T3642] Call Trace: [ 38.236063][ T3642] [ 38.236071][ T3642] dump_stack_lvl+0xf2/0x150 [ 38.236097][ T3642] dump_stack+0x15/0x1a [ 38.236155][ T3642] should_fail_ex+0x24a/0x260 [ 38.236182][ T3642] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 38.236205][ T3642] should_failslab+0x8f/0xb0 [ 38.236278][ T3642] __kmalloc_cache_noprof+0x4e/0x320 [ 38.236303][ T3642] __se_sys_memfd_create+0x1ea/0x5a0 [ 38.236364][ T3642] __x64_sys_memfd_create+0x31/0x40 [ 38.236392][ T3642] x64_sys_call+0x2d4c/0x2dc0 [ 38.236421][ T3642] do_syscall_64+0xc9/0x1c0 [ 38.236454][ T3642] ? clear_bhb_loop+0x55/0xb0 [ 38.236536][ T3642] ? clear_bhb_loop+0x55/0xb0 [ 38.236590][ T3642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.236617][ T3642] RIP: 0033:0x7fe83b6ad169 [ 38.236633][ T3642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.236688][ T3642] RSP: 002b:00007fe839d16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 38.236705][ T3642] RAX: ffffffffffffffda RBX: 00000000000004c1 RCX: 00007fe83b6ad169 [ 38.236715][ T3642] RDX: 00007fe839d16ef0 RSI: 0000000000000000 RDI: 00007fe83b72ec3c [ 38.236727][ T3642] RBP: 0000400000000680 R08: 00007fe839d16bb7 R09: 00007fe839d16e40 [ 38.236740][ T3642] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000640 [ 38.236753][ T3642] R13: 00007fe839d16ef0 R14: 00007fe839d16eb0 R15: 00004000000001c0 [ 38.236827][ T3642] [ 38.293881][ T3646] loop4: detected capacity change from 0 to 512 [ 38.294084][ T3646] ======================================================= [ 38.294084][ T3646] WARNING: The mand mount option has been deprecated and [ 38.294084][ T3646] and is ignored by this kernel. Remove the mand [ 38.294084][ T3646] option from the mount to silence this warning. [ 38.294084][ T3646] ======================================================= [ 38.295585][ T3646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.312191][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.312352][ T3646] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.312996][ T3646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.315091][ T3649] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.586346][ T3660] program syz.2.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.663873][ T3667] loop1: detected capacity change from 0 to 512 [ 38.673596][ T3673] FAULT_INJECTION: forcing a failure. [ 38.673596][ T3673] name failslab, interval 1, probability 0, space 0, times 0 [ 38.686421][ T3673] CPU: 1 UID: 0 PID: 3673 Comm: syz.0.76 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 38.686552][ T3673] Tainted: [W]=WARN [ 38.686560][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.686574][ T3673] Call Trace: [ 38.686581][ T3673] [ 38.686589][ T3673] dump_stack_lvl+0xf2/0x150 [ 38.686621][ T3673] dump_stack+0x15/0x1a [ 38.686647][ T3673] should_fail_ex+0x24a/0x260 [ 38.686716][ T3673] should_failslab+0x8f/0xb0 [ 38.686753][ T3673] __kmalloc_node_noprof+0xad/0x410 [ 38.686780][ T3673] ? qdisc_alloc+0x65/0x450 [ 38.686816][ T3673] qdisc_alloc+0x65/0x450 [ 38.686851][ T3673] qdisc_create+0xe5/0xae0 [ 38.686903][ T3673] ? __nla_parse+0x40/0x60 [ 38.687020][ T3673] tc_modify_qdisc+0x668/0x1100 [ 38.687056][ T3673] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 38.687084][ T3673] rtnetlink_rcv_msg+0x6aa/0x710 [ 38.687116][ T3673] ? ref_tracker_free+0x3a5/0x410 [ 38.687189][ T3673] netlink_rcv_skb+0x12c/0x230 [ 38.687236][ T3673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 38.687353][ T3673] rtnetlink_rcv+0x1c/0x30 [ 38.687381][ T3673] netlink_unicast+0x599/0x670 [ 38.687417][ T3673] netlink_sendmsg+0x5cc/0x6e0 [ 38.687465][ T3673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.687505][ T3673] __sock_sendmsg+0x140/0x180 [ 38.687544][ T3673] ____sys_sendmsg+0x326/0x4b0 [ 38.687577][ T3673] __sys_sendmsg+0x19d/0x230 [ 38.687730][ T3673] __x64_sys_sendmsg+0x46/0x50 [ 38.687757][ T3673] x64_sys_call+0x2734/0x2dc0 [ 38.687788][ T3673] do_syscall_64+0xc9/0x1c0 [ 38.687824][ T3673] ? clear_bhb_loop+0x55/0xb0 [ 38.687857][ T3673] ? clear_bhb_loop+0x55/0xb0 [ 38.687910][ T3673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.687935][ T3673] RIP: 0033:0x7f6d0866d169 [ 38.687954][ T3673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.687971][ T3673] RSP: 002b:00007f6d06cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.687987][ T3673] RAX: ffffffffffffffda RBX: 00007f6d08885fa0 RCX: 00007f6d0866d169 [ 38.688001][ T3673] RDX: 0000000000044080 RSI: 0000400000000040 RDI: 0000000000000006 [ 38.688014][ T3673] RBP: 00007f6d06cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.688088][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.688099][ T3673] R13: 0000000000000000 R14: 00007f6d08885fa0 R15: 00007ffc6f890708 [ 38.688115][ T3673] [ 38.693900][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.709116][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 38.762010][ T1072] kernel write not supported for file /42/attr/exec (pid: 1072 comm: kworker/0:2) [ 38.780537][ T3675] bridge_slave_1: left allmulticast mode [ 38.918862][ T3691] loop2: detected capacity change from 0 to 512 [ 38.925387][ T3675] bridge_slave_1: left promiscuous mode [ 38.934272][ T3691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.936589][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.967780][ T3691] EXT4-fs: dax option not supported [ 39.011174][ T3675] bridge_slave_0: left allmulticast mode [ 39.016947][ T3675] bridge_slave_0: left promiscuous mode [ 39.022674][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.299428][ T3706] loop2: detected capacity change from 0 to 512 [ 39.333422][ T3711] x_tables: duplicate underflow at hook 2 [ 39.340695][ T3710] IPVS: length: 98 != 24 [ 39.367644][ T3706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.394793][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 39.404381][ T3713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 39.465490][ T3720] netlink: 'syz.3.93': attribute type 5 has an invalid length. [ 39.497386][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.497510][ T3723] program syz.3.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.568934][ T3728] program syz.1.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.683014][ T3737] loop1: detected capacity change from 0 to 2048 [ 39.697331][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.737712][ T3737] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.941453][ T3743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.99: bg 0: block 345: padding at end of block bitmap is not set [ 39.957498][ T3743] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 39.970171][ T3743] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.970171][ T3743] [ 40.017124][ T86] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 40.029969][ T86] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.029969][ T86] [ 40.039637][ T86] EXT4-fs (loop1): Total free blocks count 0 [ 40.045704][ T86] EXT4-fs (loop1): Free/Dirty block details [ 40.051588][ T86] EXT4-fs (loop1): free_blocks=0 [ 40.056557][ T86] EXT4-fs (loop1): dirty_blocks=2048 [ 40.061898][ T86] EXT4-fs (loop1): Block reservation details [ 40.266296][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.539320][ T3761] loop2: detected capacity change from 0 to 512 [ 40.556961][ T3763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 40.573953][ T3761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.622054][ T3765] loop3: detected capacity change from 0 to 512 [ 40.645089][ T3765] EXT4-fs: user quota file already specified [ 40.841944][ T3773] program syz.4.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.132599][ T3786] loop3: detected capacity change from 0 to 512 [ 41.152669][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.431472][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.449106][ T3794] loop1: detected capacity change from 0 to 512 [ 41.531344][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.628103][ T3807] program syz.2.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.686428][ T3811] program syz.2.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.859123][ T3819] program syz.2.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.922832][ T3821] loop2: detected capacity change from 0 to 512 [ 41.935830][ T3821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.974155][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.265088][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.403747][ T3840] program syz.0.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.587376][ T3859] tipc: Started in network mode [ 42.592455][ T3859] tipc: Node identity ca9d0be806c4, cluster identity 4711 [ 42.599827][ T3859] tipc: Enabled bearer , priority 0 [ 42.628764][ T3859] syzkaller0: entered promiscuous mode [ 42.634462][ T3859] syzkaller0: entered allmulticast mode [ 42.640693][ T3859] tipc: Resetting bearer [ 42.681967][ T30] kauditd_printk_skb: 784 callbacks suppressed [ 42.681980][ T30] audit: type=1326 audit(1741468986.814:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45d5e14127 code=0x7ffc0000 [ 42.712363][ T30] audit: type=1326 audit(1741468986.844:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45d5db9359 code=0x7ffc0000 [ 42.735853][ T30] audit: type=1326 audit(1741468986.844:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45d5e14127 code=0x7ffc0000 [ 42.746800][ T1072] kernel write not supported for file /73/attr/exec (pid: 1072 comm: kworker/0:2) [ 42.759141][ T30] audit: type=1326 audit(1741468986.844:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45d5db9359 code=0x7ffc0000 [ 42.791663][ T30] audit: type=1326 audit(1741468986.844:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 42.815005][ T30] audit: type=1326 audit(1741468986.844:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45d5e14127 code=0x7ffc0000 [ 42.838235][ T30] audit: type=1326 audit(1741468986.844:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45d5db9359 code=0x7ffc0000 [ 42.861459][ T30] audit: type=1326 audit(1741468986.844:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 42.884837][ T30] audit: type=1326 audit(1741468986.874:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45d5e14127 code=0x7ffc0000 [ 42.885017][ T3858] tipc: Resetting bearer [ 42.908108][ T30] audit: type=1326 audit(1741468986.874:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45d5db9359 code=0x7ffc0000 [ 42.966678][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.967034][ T3858] tipc: Disabling bearer [ 43.000020][ T3866] loop2: detected capacity change from 0 to 512 [ 43.018877][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.050496][ T3870] program syz.1.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.123228][ T3880] loop1: detected capacity change from 0 to 1024 [ 43.140983][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.211979][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.368517][ T3899] loop4: detected capacity change from 0 to 128 [ 43.511786][ T3308] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 43.520437][ T3308] FAT-fs (loop4): Filesystem has been set read-only [ 43.549257][ T3905] netlink: 'syz.0.156': attribute type 13 has an invalid length. [ 43.557060][ T3905] netlink: 152 bytes leftover after parsing attributes in process `syz.0.156'. [ 43.566942][ T3905] syz_tun: refused to change device tx_queue_len [ 43.573365][ T3905] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 43.659739][ T3916] loop4: detected capacity change from 0 to 512 [ 43.671148][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.685265][ T3916] netlink: 64 bytes leftover after parsing attributes in process `syz.4.160'. [ 43.839429][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.963336][ T3924] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 44.004230][ C0] hrtimer: interrupt took 28423 ns [ 44.220245][ T3375] kernel write not supported for file /96/attr/exec (pid: 3375 comm: kworker/1:3) [ 44.505377][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.526614][ T3950] program syz.3.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.579378][ T3954] sd 0:0:1:0: device reset [ 44.601070][ T3956] loop4: detected capacity change from 0 to 512 [ 44.617068][ T3956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.629170][ T3956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 44.637837][ T3956] System zones: 1-12 [ 44.645833][ T3956] EXT4-fs (loop4): 1 truncate cleaned up [ 44.652412][ T3956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.771310][ T3967] program syz.3.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.813320][ T3965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.821846][ T3965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.963049][ T3973] program syz.3.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.028413][ T3977] loop3: detected capacity change from 0 to 512 [ 45.047429][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.066865][ T3977] netlink: 64 bytes leftover after parsing attributes in process `syz.3.182'. [ 45.852086][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.902718][ T4008] program syz.3.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.125332][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 46.139223][ T4022] bond0: (slave bond_slave_1): Releasing backup interface [ 46.189145][ T4025] loop3: detected capacity change from 0 to 164 [ 46.197405][ T4025] Unable to read rock-ridge attributes [ 46.270622][ T4027] loop2: detected capacity change from 0 to 1024 [ 46.287043][ T4027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.303687][ T4027] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.199: corrupted in-inode xattr: bad magic number in in-inode xattr [ 46.390026][ T4038] loop3: detected capacity change from 0 to 512 [ 46.416458][ T4038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.432750][ T4038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.202'. [ 46.500171][ T4046] program syz.0.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.700729][ T4056] loop1: detected capacity change from 0 to 128 [ 46.724896][ T4056] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.737299][ T4056] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.024187][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.043184][ T4063] program syz.2.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.168737][ T4068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 47.178010][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 47.226028][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.250135][ T4070] loop3: detected capacity change from 0 to 512 [ 47.258319][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.483362][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.547818][ T4080] netlink: 'syz.1.218': attribute type 13 has an invalid length. [ 47.555646][ T4080] netlink: 152 bytes leftover after parsing attributes in process `syz.1.218'. [ 47.565819][ T4080] syz_tun: refused to change device tx_queue_len [ 47.572232][ T4080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 47.611216][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 47.648948][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.692706][ T30] kauditd_printk_skb: 1426 callbacks suppressed [ 47.692718][ T30] audit: type=1326 audit(1741468991.824:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.727300][ T30] audit: type=1326 audit(1741468991.864:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.750780][ T30] audit: type=1326 audit(1741468991.864:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.774172][ T30] audit: type=1326 audit(1741468991.864:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.797606][ T30] audit: type=1326 audit(1741468991.864:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.821018][ T30] audit: type=1326 audit(1741468991.864:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.844378][ T30] audit: type=1326 audit(1741468991.864:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.867692][ T30] audit: type=1326 audit(1741468991.864:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.891040][ T30] audit: type=1326 audit(1741468991.864:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.914462][ T30] audit: type=1326 audit(1741468991.864:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d5e1d169 code=0x7ffc0000 [ 47.978809][ T4098] loop4: detected capacity change from 0 to 512 [ 47.996378][ T4098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.116541][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.174897][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 48.184041][ T4108] bridge_slave_1: left allmulticast mode [ 48.189899][ T4108] bridge_slave_1: left promiscuous mode [ 48.195831][ T4108] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.205126][ T4108] bridge_slave_0: left allmulticast mode [ 48.210822][ T4108] bridge_slave_0: left promiscuous mode [ 48.216537][ T4108] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.560616][ T4121] program syz.3.235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.574603][ T4122] netlink: 'syz.0.234': attribute type 13 has an invalid length. [ 48.582368][ T4122] netlink: 152 bytes leftover after parsing attributes in process `syz.0.234'. [ 48.735047][ T4122] syz_tun: refused to change device tx_queue_len [ 48.741443][ T4122] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 48.890793][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.993748][ T4130] loop3: detected capacity change from 0 to 512 [ 49.075945][ T4130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.786333][ T1072] kernel write not supported for file /102/attr/exec (pid: 1072 comm: kworker/0:2) [ 49.816308][ T1072] kernel write not supported for file /133/attr/exec (pid: 1072 comm: kworker/0:2) [ 49.846887][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.968953][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 50.170061][ T4158] loop2: detected capacity change from 0 to 512 [ 50.183953][ T4158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.523230][ T4164] loop1: detected capacity change from 0 to 512 [ 50.531357][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.933871][ T4177] loop3: detected capacity change from 0 to 128 [ 51.060573][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.227830][ T3302] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 51.236452][ T3302] FAT-fs (loop3): Filesystem has been set read-only [ 51.349246][ T1072] kernel write not supported for file /145/attr/exec (pid: 1072 comm: kworker/0:2) [ 51.426765][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.922430][ T4191] program syz.1.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.420153][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 52.429191][ T4199] bridge_slave_1: left allmulticast mode [ 52.434932][ T4199] bridge_slave_1: left promiscuous mode [ 52.440576][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.448370][ T4199] bridge_slave_0: left allmulticast mode [ 52.454050][ T4199] bridge_slave_0: left promiscuous mode [ 52.459852][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.700047][ T30] kauditd_printk_skb: 332 callbacks suppressed [ 52.700065][ T30] audit: type=1326 audit(1741468996.834:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe83b6a4127 code=0x7ffc0000 [ 52.729632][ T30] audit: type=1326 audit(1741468996.834:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe83b649359 code=0x7ffc0000 [ 52.752938][ T30] audit: type=1326 audit(1741468996.834:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe83b6ad169 code=0x7ffc0000 [ 52.776282][ T30] audit: type=1326 audit(1741468996.844:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe83b6a4127 code=0x7ffc0000 [ 52.799622][ T30] audit: type=1326 audit(1741468996.844:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe83b649359 code=0x7ffc0000 [ 52.822906][ T30] audit: type=1326 audit(1741468996.844:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe83b6ad169 code=0x7ffc0000 [ 52.846262][ T30] audit: type=1326 audit(1741468996.854:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe83b6a4127 code=0x7ffc0000 [ 52.869665][ T30] audit: type=1326 audit(1741468996.854:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe83b649359 code=0x7ffc0000 [ 52.892973][ T30] audit: type=1326 audit(1741468996.854:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe83b6ad169 code=0x7ffc0000 [ 52.916897][ T30] audit: type=1326 audit(1741468996.864:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe83b6a4127 code=0x7ffc0000 [ 52.979715][ T10] kernel write not supported for file /145/attr/exec (pid: 10 comm: kworker/0:1) [ 53.028453][ T4217] bridge_slave_0: left allmulticast mode [ 53.034196][ T4217] bridge_slave_0: left promiscuous mode [ 53.039888][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.085283][ T4217] bridge_slave_1: left allmulticast mode [ 53.090977][ T4217] bridge_slave_1: left promiscuous mode [ 53.096732][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.106460][ T4217] bond0: (slave bond_slave_0): Releasing backup interface [ 53.116531][ T4217] bond0: (slave bond_slave_1): Releasing backup interface [ 53.130495][ T4217] team0: Port device team_slave_0 removed [ 53.139925][ T4217] team0: Port device team_slave_1 removed [ 53.147166][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.154767][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.165696][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.173113][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.213045][ T4229] program syz.0.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.257154][ T4230] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 53.332391][ T4238] 9pnet_fd: Insufficient options for proto=fd [ 53.358491][ T3375] kernel write not supported for file /156/attr/exec (pid: 3375 comm: kworker/1:3) [ 53.510433][ T4257] loop3: detected capacity change from 0 to 1024 [ 53.541226][ T4258] loop2: detected capacity change from 0 to 2048 [ 53.573384][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.596291][ T4258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.709366][ T4273] FAULT_INJECTION: forcing a failure. [ 53.709366][ T4273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.722994][ T4273] CPU: 1 UID: 0 PID: 4273 Comm: syz.0.287 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 53.723099][ T4273] Tainted: [W]=WARN [ 53.723171][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.723181][ T4273] Call Trace: [ 53.723186][ T4273] [ 53.723191][ T4273] dump_stack_lvl+0xf2/0x150 [ 53.723216][ T4273] dump_stack+0x15/0x1a [ 53.723241][ T4273] should_fail_ex+0x24a/0x260 [ 53.723267][ T4273] should_fail+0xb/0x10 [ 53.723290][ T4273] should_fail_usercopy+0x1a/0x20 [ 53.723330][ T4273] _copy_from_user+0x1c/0xa0 [ 53.723345][ T4273] get_user_ifreq+0x8c/0x160 [ 53.723370][ T4273] sock_do_ioctl+0xc6/0x260 [ 53.723465][ T4273] sock_ioctl+0x40f/0x600 [ 53.723490][ T4273] ? __pfx_sock_ioctl+0x10/0x10 [ 53.723514][ T4273] __se_sys_ioctl+0xc9/0x140 [ 53.723601][ T4273] __x64_sys_ioctl+0x43/0x50 [ 53.723627][ T4273] x64_sys_call+0x1690/0x2dc0 [ 53.723651][ T4273] do_syscall_64+0xc9/0x1c0 [ 53.723678][ T4273] ? clear_bhb_loop+0x55/0xb0 [ 53.723714][ T4273] ? clear_bhb_loop+0x55/0xb0 [ 53.723738][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.723761][ T4273] RIP: 0033:0x7f6d0866d169 [ 53.723773][ T4273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.723823][ T4273] RSP: 002b:00007f6d06cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.723838][ T4273] RAX: ffffffffffffffda RBX: 00007f6d08885fa0 RCX: 00007f6d0866d169 [ 53.723848][ T4273] RDX: 0000400000000280 RSI: 0000000000008914 RDI: 0000000000000009 [ 53.723865][ T4273] RBP: 00007f6d06cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.723875][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.723885][ T4273] R13: 0000000000000000 R14: 00007f6d08885fa0 R15: 00007ffc6f890708 [ 53.723963][ T4273] [ 54.026157][ T4258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.138219][ T1072] kernel write not supported for file /161/attr/exec (pid: 1072 comm: kworker/0:2) [ 54.247044][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.267429][ T4287] program syz.3.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.291288][ T4289] 9pnet_fd: Insufficient options for proto=fd [ 54.524032][ T4303] bond0: (slave bond_slave_0): Releasing backup interface [ 54.548394][ T4304] loop4: detected capacity change from 0 to 1024 [ 54.568125][ T4304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.568210][ T4303] team0: Port device team_slave_0 removed [ 54.596826][ T4303] team0: Port device team_slave_1 removed [ 54.603939][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.611518][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.621288][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.628914][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.656022][ T4315] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 54.675091][ T4317] loop1: detected capacity change from 0 to 512 [ 54.682893][ T4317] EXT4-fs: Ignoring removed orlov option [ 54.690474][ T4317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.701486][ T4317] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.712157][ T4318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.721638][ T4317] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.729065][ T4317] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.304: bg 0: block 248: padding at end of block bitmap is not set [ 54.745318][ T4317] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.304: Failed to acquire dquot type 1 [ 54.757460][ T4317] EXT4-fs (loop1): 1 truncate cleaned up [ 54.763979][ T4317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.788021][ T4317] syz.1.304 (4317) used greatest stack depth: 9208 bytes left [ 54.808136][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.849186][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 54.861160][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.868649][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.877827][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.885319][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.003581][ T4339] loop3: detected capacity change from 0 to 1024 [ 55.017938][ T4339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.040231][ T4339] FAULT_INJECTION: forcing a failure. [ 55.040231][ T4339] name failslab, interval 1, probability 0, space 0, times 0 [ 55.052959][ T4339] CPU: 1 UID: 0 PID: 4339 Comm: syz.3.310 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 55.052993][ T4339] Tainted: [W]=WARN [ 55.053001][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.053016][ T4339] Call Trace: [ 55.053025][ T4339] [ 55.053033][ T4339] dump_stack_lvl+0xf2/0x150 [ 55.053061][ T4339] dump_stack+0x15/0x1a [ 55.053159][ T4339] should_fail_ex+0x24a/0x260 [ 55.053189][ T4339] should_failslab+0x8f/0xb0 [ 55.053220][ T4339] kmem_cache_alloc_noprof+0x52/0x320 [ 55.053382][ T4339] ? __es_insert_extent+0x563/0xed0 [ 55.053422][ T4339] __es_insert_extent+0x563/0xed0 [ 55.053464][ T4339] ext4_es_insert_extent+0x45a/0x1c60 [ 55.053580][ T4339] ext4_map_blocks+0x8b9/0xd20 [ 55.053622][ T4339] _ext4_get_block+0x104/0x370 [ 55.053656][ T4339] ext4_get_block_unwritten+0x2c/0xb0 [ 55.053731][ T4339] ext4_block_write_begin+0x34f/0x9c0 [ 55.053768][ T4339] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 55.053798][ T4339] ? ext4_inode_journal_mode+0xdf/0x1d0 [ 55.053818][ T4339] ext4_try_to_write_inline_data+0x5ad/0xba0 [ 55.053876][ T4339] ext4_write_begin+0x11e/0xc30 [ 55.053900][ T4339] ? __brelse+0x30/0x60 [ 55.053928][ T4339] ? ext4_mark_iloc_dirty+0xd1c/0xd60 [ 55.054024][ T4339] ext4_da_write_begin+0x1b6/0x540 [ 55.054102][ T4339] generic_perform_write+0x1a8/0x4a0 [ 55.054125][ T4339] ? __mark_inode_dirty+0x45e/0x7e0 [ 55.054167][ T4339] ext4_buffered_write_iter+0x1ed/0x3c0 [ 55.054210][ T4339] ext4_file_write_iter+0x383/0xf20 [ 55.054314][ T4339] ? kstrtoull+0x110/0x140 [ 55.054339][ T4339] ? __import_iovec+0x422/0x540 [ 55.054359][ T4339] do_iter_readv_writev+0x403/0x4b0 [ 55.054391][ T4339] vfs_writev+0x2d9/0x880 [ 55.054412][ T4339] ? proc_fail_nth_write+0x12a/0x150 [ 55.054474][ T4339] ? putname+0xcf/0xf0 [ 55.054490][ T4339] __se_sys_pwritev2+0x100/0x1c0 [ 55.054529][ T4339] __x64_sys_pwritev2+0x78/0x90 [ 55.054564][ T4339] x64_sys_call+0x2afe/0x2dc0 [ 55.054619][ T4339] do_syscall_64+0xc9/0x1c0 [ 55.054692][ T4339] ? clear_bhb_loop+0x55/0xb0 [ 55.054728][ T4339] ? clear_bhb_loop+0x55/0xb0 [ 55.054758][ T4339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.054784][ T4339] RIP: 0033:0x7fd62763d169 [ 55.054798][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.054884][ T4339] RSP: 002b:00007fd625ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 55.054906][ T4339] RAX: ffffffffffffffda RBX: 00007fd627855fa0 RCX: 00007fd62763d169 [ 55.054920][ T4339] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000005 [ 55.054935][ T4339] RBP: 00007fd625ca1090 R08: 0000000000000000 R09: 0000000000000003 [ 55.054965][ T4339] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 55.054979][ T4339] R13: 0000000000000000 R14: 00007fd627855fa0 R15: 00007ffd4bbd2c08 [ 55.055001][ T4339] [ 55.366188][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.383285][ T4339] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.310: Allocating blocks 497-513 which overlap fs metadata [ 55.399625][ T4339] EXT4-fs (loop3): pa ffff8881065500e0: logic 256, phys. 385, len 8 [ 55.407719][ T4339] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 55.422629][ T4350] FAULT_INJECTION: forcing a failure. [ 55.422629][ T4350] name failslab, interval 1, probability 0, space 0, times 0 [ 55.435372][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: gtp Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 55.435403][ T4350] Tainted: [W]=WARN [ 55.435410][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.435421][ T4350] Call Trace: [ 55.435427][ T4350] [ 55.435487][ T4350] dump_stack_lvl+0xf2/0x150 [ 55.435545][ T4350] dump_stack+0x15/0x1a [ 55.435569][ T4350] should_fail_ex+0x24a/0x260 [ 55.435599][ T4350] should_failslab+0x8f/0xb0 [ 55.435714][ T4350] kmem_cache_alloc_noprof+0x52/0x320 [ 55.435740][ T4350] ? audit_log_start+0x34c/0x6b0 [ 55.435876][ T4350] ? audit_log_end+0x1d0/0x1e0 [ 55.435900][ T4350] audit_log_start+0x34c/0x6b0 [ 55.435938][ T4350] ? kmem_cache_free+0xdc/0x2d0 [ 55.435967][ T4350] audit_seccomp+0x4b/0x130 [ 55.435996][ T4350] __seccomp_filter+0x6fa/0x1180 [ 55.436022][ T4350] ? update_load_avg+0x1f7/0x7c0 [ 55.436045][ T4350] ? __dequeue_entity+0x22/0x310 [ 55.436070][ T4350] ? __list_add_valid_or_report+0x38/0xe0 [ 55.436183][ T4350] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 55.436224][ T4350] __secure_computing+0x9f/0x1c0 [ 55.436253][ T4350] syscall_trace_enter+0xd1/0x1f0 [ 55.436283][ T4350] do_syscall_64+0xaa/0x1c0 [ 55.436377][ T4350] ? clear_bhb_loop+0x55/0xb0 [ 55.436412][ T4350] ? clear_bhb_loop+0x55/0xb0 [ 55.436444][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.436505][ T4350] RIP: 0033:0x7f45d5e1bb7c [ 55.436523][ T4350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.436544][ T4350] RSP: 002b:00007f45d4487030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.436566][ T4350] RAX: ffffffffffffffda RBX: 00007f45d6035fa0 RCX: 00007f45d5e1bb7c [ 55.436581][ T4350] RDX: 000000000000000f RSI: 00007f45d44870a0 RDI: 0000000000000005 [ 55.436595][ T4350] RBP: 00007f45d4487090 R08: 0000000000000000 R09: 0000000000000000 [ 55.436618][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.436713][ T4350] R13: 0000000000000000 R14: 00007f45d6035fa0 R15: 00007fff1f53b738 [ 55.436735][ T4350] [ 55.699657][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.784829][ T4367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 55.809154][ T4367] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.816128][ T4369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 55.817944][ T4367] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.835564][ T4367] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.844421][ T4367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.855583][ T4367] vxlan0: entered promiscuous mode [ 55.893798][ T4374] loop2: detected capacity change from 0 to 128 [ 55.962494][ T4377] loop3: detected capacity change from 0 to 512 [ 56.000666][ T3299] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 56.009388][ T3299] FAT-fs (loop2): Filesystem has been set read-only [ 56.017310][ T4377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.146047][ T4392] FAULT_INJECTION: forcing a failure. [ 56.146047][ T4392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.151022][ T4391] loop2: detected capacity change from 0 to 1024 [ 56.159177][ T4392] CPU: 0 UID: 0 PID: 4392 Comm: syz.4.329 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 56.159209][ T4392] Tainted: [W]=WARN [ 56.159218][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.159231][ T4392] Call Trace: [ 56.159239][ T4392] [ 56.159266][ T4392] dump_stack_lvl+0xf2/0x150 [ 56.159303][ T4392] dump_stack+0x15/0x1a [ 56.159330][ T4392] should_fail_ex+0x24a/0x260 [ 56.159370][ T4392] should_fail+0xb/0x10 [ 56.159416][ T4392] should_fail_usercopy+0x1a/0x20 [ 56.159510][ T4392] strncpy_from_user+0x25/0x210 [ 56.159538][ T4392] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 56.159565][ T4392] ? getname_flags+0x81/0x3b0 [ 56.159675][ T4392] getname_flags+0xb0/0x3b0 [ 56.159716][ T4392] user_path_at+0x26/0x120 [ 56.159742][ T4392] __se_sys_mount+0x24b/0x2d0 [ 56.159783][ T4392] ? fput+0x1c4/0x200 [ 56.159810][ T4392] __x64_sys_mount+0x67/0x80 [ 56.159847][ T4392] x64_sys_call+0x2c84/0x2dc0 [ 56.159906][ T4392] do_syscall_64+0xc9/0x1c0 [ 56.159943][ T4392] ? clear_bhb_loop+0x55/0xb0 [ 56.159977][ T4392] ? clear_bhb_loop+0x55/0xb0 [ 56.160008][ T4392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.160110][ T4392] RIP: 0033:0x7f45d5e1d169 [ 56.160128][ T4392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.160150][ T4392] RSP: 002b:00007f45d4487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.160172][ T4392] RAX: ffffffffffffffda RBX: 00007f45d6035fa0 RCX: 00007f45d5e1d169 [ 56.160186][ T4392] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 56.160201][ T4392] RBP: 00007f45d4487090 R08: 0000400000000400 R09: 0000000000000000 [ 56.160259][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.160273][ T4392] R13: 0000000000000000 R14: 00007f45d6035fa0 R15: 00007fff1f53b738 [ 56.160295][ T4392] [ 56.318588][ T4398] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 56.379804][ T4391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.521986][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 56.531511][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 56.604779][ T4413] 9pnet_fd: Insufficient options for proto=fd [ 57.044708][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.076120][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.408119][ T4422] netlink: 'syz.4.341': attribute type 10 has an invalid length. [ 57.581127][ T4422] team0: Device hsr_slave_0 failed to register rx_handler [ 57.798280][ T4439] capability: warning: `syz.3.346' uses deprecated v2 capabilities in a way that may be insecure [ 57.851902][ T4443] loop3: detected capacity change from 0 to 128 [ 57.991677][ T30] kauditd_printk_skb: 418 callbacks suppressed [ 57.991696][ T30] audit: type=1400 audit(1741469002.074:4240): avc: denied { create } for pid=4440 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.017300][ T30] audit: type=1400 audit(1741469002.074:4241): avc: denied { write } for pid=4440 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.246216][ T4450] 9pnet_fd: Insufficient options for proto=fd [ 58.268032][ T4443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.322686][ T4443] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.346196][ T30] audit: type=1400 audit(1741469002.174:4242): avc: denied { sqpoll } for pid=4440 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.365446][ T30] audit: type=1400 audit(1741469002.204:4243): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.386617][ T30] audit: type=1400 audit(1741469002.224:4244): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.407974][ T30] audit: type=1400 audit(1741469002.224:4245): avc: denied { read } for pid=3040 comm="dhcpcd" name="n25" dev="tmpfs" ino=2108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.429691][ T30] audit: type=1400 audit(1741469002.224:4246): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.452667][ T30] audit: type=1400 audit(1741469002.224:4247): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.476044][ T30] audit: type=1326 audit(1741469002.434:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33daddd169 code=0x7ffc0000 [ 58.499442][ T30] audit: type=1326 audit(1741469002.434:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33daddd169 code=0x7ffc0000 [ 58.655215][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 58.686684][ T3002] udevd[3002]: worker [3377] terminated by signal 33 (Unknown signal 33) [ 58.697928][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.722081][ T3002] udevd[3002]: worker [3377] failed while handling '/devices/virtual/net/sl0/queues/tx-0' [ 58.732993][ T3002] udevd[3002]: worker [3510] terminated by signal 33 (Unknown signal 33) [ 58.741622][ T3002] udevd[3002]: worker [3510] failed while handling '/devices/virtual/net/sl0/queues/rx-0' [ 58.931647][ T4501] loop3: detected capacity change from 0 to 256 [ 59.079253][ T4514] bond0: (slave bond_slave_0): Releasing backup interface [ 59.114018][ T4514] bond0: (slave bond_slave_1): Releasing backup interface [ 59.125988][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 59.139548][ T4514] team0: Port device team_slave_0 removed [ 59.226243][ T4514] team0: Port device team_slave_1 removed [ 59.237848][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.245380][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.282402][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.290239][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.051898][ T4541] loop2: detected capacity change from 0 to 2048 [ 60.118246][ T4541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.144823][ T4551] netlink: 'syz.4.374': attribute type 4 has an invalid length. [ 60.152612][ T4551] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.374'. [ 60.206586][ T4551] FAULT_INJECTION: forcing a failure. [ 60.206586][ T4551] name failslab, interval 1, probability 0, space 0, times 0 [ 60.219370][ T4551] CPU: 0 UID: 0 PID: 4551 Comm: syz.4.374 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 60.219406][ T4551] Tainted: [W]=WARN [ 60.219415][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.219429][ T4551] Call Trace: [ 60.219436][ T4551] [ 60.219493][ T4551] dump_stack_lvl+0xf2/0x150 [ 60.219520][ T4551] dump_stack+0x15/0x1a [ 60.219540][ T4551] should_fail_ex+0x24a/0x260 [ 60.219613][ T4551] should_failslab+0x8f/0xb0 [ 60.219642][ T4551] __kmalloc_noprof+0xab/0x3f0 [ 60.219665][ T4551] ? fib_trie_table+0x2f/0xf0 [ 60.219686][ T4551] fib_trie_table+0x2f/0xf0 [ 60.219727][ T4551] fib_new_table+0xdd/0x1c0 [ 60.219755][ T4551] inet_rtm_newroute+0x8d/0x140 [ 60.219825][ T4551] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 60.219858][ T4551] rtnetlink_rcv_msg+0x6aa/0x710 [ 60.219887][ T4551] ? ref_tracker_free+0x3a5/0x410 [ 60.219968][ T4551] netlink_rcv_skb+0x12c/0x230 [ 60.220000][ T4551] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.220044][ T4551] rtnetlink_rcv+0x1c/0x30 [ 60.220072][ T4551] netlink_unicast+0x599/0x670 [ 60.220100][ T4551] netlink_sendmsg+0x5cc/0x6e0 [ 60.220217][ T4551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.220252][ T4551] __sock_sendmsg+0x140/0x180 [ 60.220290][ T4551] __sys_sendto+0x1a8/0x230 [ 60.220353][ T4551] __x64_sys_sendto+0x78/0x90 [ 60.220380][ T4551] x64_sys_call+0x29fa/0x2dc0 [ 60.220409][ T4551] do_syscall_64+0xc9/0x1c0 [ 60.220447][ T4551] ? clear_bhb_loop+0x55/0xb0 [ 60.220530][ T4551] ? clear_bhb_loop+0x55/0xb0 [ 60.220560][ T4551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.220592][ T4551] RIP: 0033:0x7f45d5e1d169 [ 60.220607][ T4551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.220627][ T4551] RSP: 002b:00007f45d4487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 60.220649][ T4551] RAX: ffffffffffffffda RBX: 00007f45d6035fa0 RCX: 00007f45d5e1d169 [ 60.220720][ T4551] RDX: 0000000000000ec1 RSI: 0000400000000100 RDI: 0000000000000006 [ 60.220735][ T4551] RBP: 00007f45d4487090 R08: 0000000000000000 R09: 9e5e111c47e3504f [ 60.220749][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.220762][ T4551] R13: 0000000000000000 R14: 00007f45d6035fa0 R15: 00007fff1f53b738 [ 60.220854][ T4551] [ 60.539678][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.558050][ T4557] loop4: detected capacity change from 0 to 128 [ 60.811801][ T3308] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 60.820533][ T3308] FAT-fs (loop4): Filesystem has been set read-only [ 61.083727][ T4598] netlink: 'syz.2.391': attribute type 10 has an invalid length. [ 61.092503][ T4598] veth1_macvtap: left promiscuous mode [ 61.322695][ T4603] bond0: (slave syz_tun): Releasing backup interface [ 61.350282][ T4605] loop1: detected capacity change from 0 to 512 [ 61.426413][ T4605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.447158][ T4603] bond0: (slave bond_slave_0): Releasing backup interface [ 61.486561][ T4603] bond0: (slave bond_slave_1): Releasing backup interface [ 61.542214][ T4603] team0: Port device team_slave_0 removed [ 61.552618][ T4603] team0: Port device team_slave_1 removed [ 61.587105][ T4613] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 61.962469][ T4628] loop2: detected capacity change from 0 to 512 [ 62.359478][ T4641] loop1: detected capacity change from 0 to 2048 [ 62.516665][ T4648] Cannot find del_set index 0 as target [ 62.583992][ T4655] netlink: 76 bytes leftover after parsing attributes in process `syz.0.410'. [ 62.710486][ T4667] loop4: detected capacity change from 0 to 2048 [ 62.719260][ T4667] EXT4-fs: Ignoring removed bh option [ 62.734893][ T4673] loop1: detected capacity change from 0 to 128 [ 62.753400][ T4667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.784355][ T4667] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 62.796732][ T4667] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.796732][ T4667] [ 62.806496][ T4667] EXT4-fs (loop4): Total free blocks count 0 [ 62.812484][ T4667] EXT4-fs (loop4): Free/Dirty block details [ 62.815542][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 62.818484][ T4667] EXT4-fs (loop4): free_blocks=2415919104 [ 62.833111][ T4667] EXT4-fs (loop4): dirty_blocks=32 [ 62.838293][ T4667] EXT4-fs (loop4): Block reservation details [ 62.844338][ T4667] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 62.852290][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.859880][ T4681] batadv_slave_0: entered promiscuous mode [ 62.865744][ T4681] batadv_slave_0: entered allmulticast mode [ 62.987684][ T4696] loop4: detected capacity change from 0 to 1024 [ 62.996255][ T30] kauditd_printk_skb: 953 callbacks suppressed [ 62.996268][ T30] audit: type=1326 audit(1741469007.134:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd627634127 code=0x7ffc0000 [ 63.032758][ T4696] EXT4-fs: Ignoring removed nobh option [ 63.038481][ T4696] EXT4-fs: Ignoring removed bh option [ 63.044515][ T30] audit: type=1326 audit(1741469007.164:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6275d9359 code=0x7ffc0000 [ 63.067875][ T30] audit: type=1326 audit(1741469007.164:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd627634127 code=0x7ffc0000 [ 63.091181][ T30] audit: type=1326 audit(1741469007.164:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6275d9359 code=0x7ffc0000 [ 63.114504][ T30] audit: type=1326 audit(1741469007.164:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd62763d169 code=0x7ffc0000 [ 63.137924][ T30] audit: type=1326 audit(1741469007.174:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd627634127 code=0x7ffc0000 [ 63.161249][ T30] audit: type=1326 audit(1741469007.174:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6275d9359 code=0x7ffc0000 [ 63.184577][ T30] audit: type=1326 audit(1741469007.174:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd62763d169 code=0x7ffc0000 [ 63.208302][ T30] audit: type=1326 audit(1741469007.254:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b6ad169 code=0x7ffc0000 [ 63.231715][ T30] audit: type=1326 audit(1741469007.254:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b6ad169 code=0x7ffc0000 [ 63.268568][ T4704] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 63.278721][ T4704] team0: Device hsr_slave_0 failed to register rx_handler [ 63.314139][ T4706] loop1: detected capacity change from 0 to 128 [ 63.333094][ T4696] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.425: Allocating blocks 497-513 which overlap fs metadata [ 63.352755][ T4696] EXT4-fs (loop4): pa ffff888106482150: logic 256, phys. 385, len 8 [ 63.360811][ T4696] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 63.841409][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 64.184430][ T4762] loop3: detected capacity change from 0 to 128 [ 64.500606][ T4776] loop2: detected capacity change from 0 to 512 [ 65.013373][ T4789] lo speed is unknown, defaulting to 1000 [ 65.025424][ T4789] lo speed is unknown, defaulting to 1000 [ 65.031432][ T4789] lo speed is unknown, defaulting to 1000 [ 65.037885][ T4789] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.045885][ T4789] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 65.057563][ T4789] lo speed is unknown, defaulting to 1000 [ 65.063620][ T4789] lo speed is unknown, defaulting to 1000 [ 65.071222][ T4789] lo speed is unknown, defaulting to 1000 [ 65.077366][ T4789] lo speed is unknown, defaulting to 1000 [ 65.089852][ T4789] lo speed is unknown, defaulting to 1000 [ 65.096368][ T4789] lo speed is unknown, defaulting to 1000 [ 65.191232][ T4803] loop1: detected capacity change from 0 to 128 [ 65.361970][ T3300] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 65.370540][ T3300] FAT-fs (loop1): Filesystem has been set read-only [ 65.569211][ T4820] loop3: detected capacity change from 0 to 512 [ 65.918978][ T4838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 65.927959][ T4838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 65.936983][ T4838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.483'. [ 66.237205][ T4840] netlink: 52 bytes leftover after parsing attributes in process `syz.0.483'. [ 66.519407][ T4842] loop2: detected capacity change from 0 to 2048 [ 66.749462][ T4857] rdma_op ffff888116f18180 conn xmit_rdma 0000000000000000 [ 66.814832][ T4861] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 66.836263][ T4861] team0: Device hsr_slave_0 failed to register rx_handler [ 66.941120][ T4870] loop2: detected capacity change from 0 to 512 [ 66.954553][ T4867] loop4: detected capacity change from 0 to 512 [ 67.051097][ T4873] loop3: detected capacity change from 0 to 2048 [ 67.291205][ T4873] EXT4-fs unmount: 17 callbacks suppressed [ 67.291221][ T4873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.308105][ T4892] rdma_op ffff888116f44180 conn xmit_rdma 0000000000000000 [ 67.313150][ T4890] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 67.324691][ T4890] netlink: 4 bytes leftover after parsing attributes in process `\'. [ 67.332912][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.358390][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.365843][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.399684][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 67.619785][ T3291] ================================================================== [ 67.627914][ T3291] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 67.634978][ T3291] [ 67.637301][ T3291] write to 0xffff8881022720ec of 4 bytes by task 3727 on cpu 0: [ 67.644929][ T3291] shmem_unlink+0x13b/0x170 [ 67.649442][ T3291] shmem_rename2+0x1d4/0x2c0 [ 67.654069][ T3291] vfs_rename+0x875/0x9c0 [ 67.658409][ T3291] do_renameat2+0x6a3/0xa70 [ 67.662921][ T3291] __x64_sys_rename+0x58/0x70 [ 67.667609][ T3291] x64_sys_call+0x2b1c/0x2dc0 [ 67.672293][ T3291] do_syscall_64+0xc9/0x1c0 [ 67.676805][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.682702][ T3291] [ 67.685022][ T3291] read to 0xffff8881022720ec of 4 bytes by task 3291 on cpu 1: [ 67.692562][ T3291] fill_mg_cmtime+0x58/0x280 [ 67.697162][ T3291] generic_fillattr+0x241/0x330 [ 67.702068][ T3291] shmem_getattr+0x17b/0x200 [ 67.706670][ T3291] vfs_getattr+0x172/0x1b0 [ 67.711096][ T3291] vfs_statx+0x12d/0x320 [ 67.715339][ T3291] vfs_fstatat+0xe4/0x130 [ 67.719666][ T3291] __se_sys_newfstatat+0x58/0x260 [ 67.724691][ T3291] __x64_sys_newfstatat+0x55/0x70 [ 67.729724][ T3291] x64_sys_call+0x236d/0x2dc0 [ 67.734416][ T3291] do_syscall_64+0xc9/0x1c0 [ 67.738931][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.744826][ T3291] [ 67.747153][ T3291] value changed: 0x2d54cc25 -> 0x2d569819 [ 67.752862][ T3291] [ 67.755177][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 67.761844][ T3291] CPU: 1 UID: 0 PID: 3291 Comm: udevd Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 67.773566][ T3291] Tainted: [W]=WARN [ 67.777365][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.787427][ T3291] ================================================================== [ 67.798332][ T4922] rdma_op ffff888116f44980 conn xmit_rdma 0000000000000000 [ 67.835513][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.