last executing test programs: 4.464065435s ago: executing program 4 (id=181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4103, 0x1007}], 0x1, 0x200, 0xfffffff9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x21f1, &(0x7f0000000480)={0x0, 0x400000, 0x10100, 0xfffffffb}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x1e4, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa) 4.073947351s ago: executing program 4 (id=183): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) 4.057981441s ago: executing program 4 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0xa1, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.031623526s ago: executing program 3 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES8=r0], 0x1, 0x384, &(0x7f0000001200)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mq_open(&(0x7f0000000c40)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x2, 0x1, &(0x7f00000002c0)={0x1, 0x1a4e34ef, 0x3ad, 0xffff}) getdents(r2, &(0x7f0000000080)=""/87, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x7fffffff, 0xff, 0x2ef49cd6, 0x140, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xa, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000180)='./bus\x00', 0x1a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff000000001c00000020000180080001002326dcdd1f1812f65dd0905afa6b7479e61fdec03aa048efdb392b5987c68267d57f3b30ee524df2af2f9de533600827dc2135b76a6cf82f48c13db3463c96d9dbe0a9f874f877df20763da15cb6c9ed5ba827feb5bcc9f18221cb5ccf6265f81762088209514d7d00c5b8c0c5e01e75cdc2e7a6137107496eed25a509b277f46f8edb306b5e49f897ecd923d57260fa5d13d088825e33c8", @ANYRES32=r7, @ANYBLOB="140002006261746164765f736c6176655f300000"], 0x34}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) r8 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000000540)=""/168, 0xa8, 0x3, &(0x7f00000001c0)={0x77359400}) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r8) 3.031224816s ago: executing program 4 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x82040) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000480)={0x7, &(0x7f0000000340)=[{0xb, 0x86, 0x0, 0x7}, {0x8, 0x80, 0x3, 0xa8}, {0x9, 0x75, 0x3, 0xc}, {0x1000, 0x2, 0x2, 0xdc35}, {0xb07, 0xe, 0xc, 0x2}, {0x9, 0x1, 0x3, 0x2}, {0x2, 0x1, 0x0, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) lseek(0xffffffffffffffff, 0x0, 0x1) 2.810560569s ago: executing program 3 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x10, &(0x7f0000000640)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x0, 0xb, 0x2, 0x9, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}], &(0x7f00000002c0)='GPL\x00', 0x6e9b, 0xfffffffffffffce1, &(0x7f00000006c0)=""/206, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0xfffffff8, 0xf, 0x2860, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)=[{0x3, 0x5, 0xe, 0x1}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x1, 0x7, 0x4}, {0x4, 0x1, 0x6, 0x3}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x3, 0x9, 0xc}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000081000000000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x43000000, @local, 0x3}}}, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000700050000000012000002001ceba68c00002c90472a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r12, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240020005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) r13 = fcntl$dupfd(r11, 0x0, r11) write$sndseq(r13, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {0x3}, {0x5}, @control={0x4, 0x4, 0x4}}, {0x3, 0x4, 0x0, 0x0, @time={0x200040, 0x74e4}, {}, {}, @ext={0x0, 0x0}}], 0x38) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r15}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.810213469s ago: executing program 4 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) 2.808976169s ago: executing program 1 (id=201): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f1ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r4 = syz_io_uring_setup(0x34b3, &(0x7f0000006540)={0x0, 0x0, 0x30c0, 0x0, 0xa6}, &(0x7f0000000100), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 2.76901169s ago: executing program 4 (id=202): socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071129f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x21, 0x16, 0x15, 0x0, 0x8, 0x1001, 0xd, 0x16a, 0x1}}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x2200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x1, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa00000a1) close(r5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000380)={[{@errors_remount}, {@sysvgroups}, {@nomblk_io_submit}], [{@smackfsdef={'smackfsdef', 0x3d, 'sched_switch\x00'}}, {@subj_type={'subj_type', 0x3d, 'nomblk_io_submit'}}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.647695012s ago: executing program 3 (id=204): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 2.518871564s ago: executing program 2 (id=207): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) read$qrtrtun(r1, &(0x7f0000000ac0)=""/4096, 0x1000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf8, r3}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[], 0xffdd) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {}, {@mb_optimize_scan}, {@bsdgroups}, {@orlov}, {@grpjquota, 0x2e}, {@jqfmt_vfsv0}, {@debug}, {@nomblk_io_submit}, {@orlov}], [], 0x2c}, 0x0, 0x4c0, &(0x7f0000000600)="$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") 2.323500046s ago: executing program 2 (id=208): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x802, 0x1, 0x5, 0x209}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000520001b9d1d984750f7d1f250a"], 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000ff00f8ffffffb703000008000000b7040000000000fe84000000160010009500004699f9ee32416b6fb5fba171e3fb9116b3f359bd0920c4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x400, 0x8001, {{0x1b, 0x4, 0x0, 0x1f, 0x6c, 0x64, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@rr={0x7, 0xf, 0x8f, [@loopback, @broadcast, @multicast1]}, @rr={0x7, 0x13, 0x89, [@remote, @empty, @remote, @loopback]}, @timestamp={0x44, 0xc, 0x2e, 0x0, 0x5, [0x1, 0xff]}, @rr={0x7, 0x7, 0x7, [@remote]}, @ssrr={0x89, 0x17, 0x24, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000006800000000000000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0400000004f4ff00230000000000000000000000f6ff000000000000"], 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000740)="27050200000000000600002fb96d020000000000000088a8", 0x18}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r9 = io_uring_setup(0x5211, &(0x7f00000001c0)={0x0, 0x58fd, 0x4, 0x3, 0x9}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, r9, 0x1c8c8000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 2.322795056s ago: executing program 2 (id=209): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000000403000000000000000000050000030a00029ac51bd8060200000005000100010000000800044000000fffd0c1e29f68cd9b2664c7b7c88c9b447e689d9ea8e85bb93445713ae2e4efa36973afb5abb4d0d9711274b6927b932fc4fb0c6e58f4cb1b5d96122b5493465a6c03e48fa4dcbc3a51d1e0e46c43affe99225a522ce6a28a317e23d64b62fc3439a68ffe3b39360139efa8acdb281ee2925d907d21c0f4789cc56acd6e6e01ca3632bc20e73a4deccfe295bba1c63ebb71dd2937612793"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0xfffffce5, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) connect$unix(r0, &(0x7f00000008c0)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f0000001400)=@file={0x1, './file0\x00'}, 0x6e) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) 2.293485877s ago: executing program 2 (id=210): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e3"], 0x48) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x4251, 0x2, 0x0, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000280)="18", 0x1}], 0x1) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000340)={@multicast1, @multicast1, r9}, 0xc) close_range(r3, r4, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0541, 0x0) write$binfmt_format(r10, &(0x7f00000000c0)='0\x00', 0x2) vmsplice(r2, &(0x7f0000002080)=[{&(0x7f0000001f80)='g', 0x1}], 0x1, 0x0) 2.09526685s ago: executing program 2 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x82040) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000480)={0x7, &(0x7f0000000340)=[{0xb, 0x86, 0x0, 0x7}, {0x8, 0x80, 0x3, 0xa8}, {0x9, 0x75, 0x3, 0xc}, {0x1000, 0x2, 0x2, 0xdc35}, {0xb07, 0xe, 0xc, 0x2}, {0x9, 0x1, 0x3, 0x2}, {0x2, 0x1, 0x0, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) lseek(0xffffffffffffffff, 0x0, 0x1) 1.942850142s ago: executing program 2 (id=212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xab1}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x6}, 0x18) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r11, 0x89fa, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e80)={@mcast1, @remote, 0x7, 0xa}}) sendmmsg$inet(r11, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.811722154s ago: executing program 1 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) 1.805836234s ago: executing program 3 (id=215): syz_open_procfs(0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x10800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @loopback, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'veth1_virt_wifi\x00', 'bridge0\x00', {0xff}, {}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x4, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.689146616s ago: executing program 1 (id=217): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.615474457s ago: executing program 3 (id=218): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x109000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/192) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/91) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000200)=[0x868, 0x1000]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, &(0x7f00000002c0), 0x41100, 0x43, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x2800000, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r1, r1, r1, r1], &(0x7f00000003c0)=[{0x4, 0x1, 0xf, 0x3}], 0x10, 0x1, @void, @value}, 0x94) fremovexattr(r0, &(0x7f00000004c0)=@random={'system.', '\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0xce81c38c81975fba, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x204, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x128, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xd1, 0x8, "403b1eeb8abf99192494d1733381a7b607c5cb12d769c81b3b0f357a5da32172a7364cef40ebaf85e8c912da33bf5e3d3df66f3ebea6ed6eb2cbcc49afd5e977476b59c662ffa0789b7907d9bb7502f4a53329df69ce212ee67386b907416f120535775b73b6e4eb1d2a7a11395523b3585968987d12f98684c7a579e25b1a2a5ebf0e4114617f150df61c4865911cc55de54203683b8cbe19c0cdb4193b305f8bffd421969ff5b3062a0ac8fc8cdad84602423118894c1ca8405e524a5255f14d10a16f9a9878700b1c71d493"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWCHAIN={0xf8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xbf, 0xc, "b0df28eb62d0514acc330e428a9105533dc0431418b0f7782763453ee772773a6fb3584ca96c762d3fbf6c49accf5646ac4c8a167063a69abf8a7760baf81b5b995e3b1d53ead3dfc09b18715bfcd728676c24a93f0f9a4f0d105dbf35176213a395f1a837dcf3189e674be7590e64757f7b1315b443ae95b9c1d05e3609f08a3f3547365824c85504542e84158fffdd8969130396733a38289ee211a9f231f3e6175a0e8b293dbca1b54bbbd09fe3b4c594fdee6256132f357bc4"}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x43, 0x7, 0x1, 0x0, "e804014f95abf618025fccbedd5c9e519656c27533058627d252acab19dd7cac704925042115f6958e16b8390e41c9cd6f3a84750ee7c5b8318d2b02b756a2"}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x344}, 0x1, 0x0, 0x0, 0x14}, 0x20008800) statx(r1, &(0x7f0000000940)='./file0\x00', 0x400, 0x20, &(0x7f0000000980)) r2 = creat(&(0x7f0000000a80)='./file0\x00', 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000ac0)=0x0) syz_pidfd_open(r3, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000b00)) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffe00}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4c011) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/keys\x00', 0x0, 0x0) chmod(&(0x7f0000000d00)='./file0\x00', 0x40) syz_emit_ethernet(0xd4, &(0x7f0000000d40)={@random="e6ddfbb03bb0", @empty, @void, {@ipv4={0x800, @igmp={{0x18, 0x4, 0x1, 0x30, 0xc6, 0x65, 0x0, 0x8, 0x2, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x24, 0x73, 0x3, 0x1, [{@local}, {@local, 0x7}, {@rand_addr=0x64010100, 0x3}, {@empty, 0x1}]}, @generic={0x88, 0xb, "19367822ffb9aef710"}, @timestamp={0x44, 0x1c, 0xa3, 0x0, 0x0, [0x8, 0x7, 0x4a9a6106, 0x3, 0x72, 0x8]}, @end]}}, {0x1f, 0xca, 0x0, @private=0xa010100, "127531b987877c13dcdf552b557852bd963991701c20ad86882cd498dd2adec6bbae934523cc40076a0b6dd67158666dc13f0743e0720a9f0b692470bc8d78165cece375f3e115c2776226cf614088be6ca2727af3c035d4bed97af941a4"}}}}}, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000e40)=""/151) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000f00)={0xfc}, 0x1) write$binfmt_elf64(r4, &(0x7f0000000f40)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0xba, 0x5, 0x7, 0x3, 0x2, 0x3e, 0xffff, 0x2ee, 0x40, 0x1a2, 0x9, 0x6, 0x38, 0x1, 0x8001, 0x9, 0x7}, [{0x2, 0x7, 0x8, 0x9, 0x80000001, 0x0, 0x8, 0x1}], "280055ef813eb692a65c7c8984b28398d1503364c20f9fd187f8de3e0a95ab9659faa2ad21bdb9987d9715011a8c9bf718f5fc1e7c3a23a0c9eab61c1e872ca4e6a791c8ac8a844bb8650e8245eae2dae4dd444141cd22f272d45659ab394fd1371efeb495c3337acd6beed6af4db67503a8c46c8d07f29ee1decc975d6aaf00e895608730c127aca86e8ef1c6a0902e0d137441ec3f35cb54fe91c13c89fb852635d7b6b7c453bae1d3c98f3c0982a3d5c5674065e2a91b0b35044a3123f7ffd8"}, 0x139) r5 = socket$key(0xf, 0x3, 0x2) connect(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @loopback}, 0x1, 0x3, 0x4, 0x4}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000001100)={{0x1, 0x1, 0x18, r5, {0x22}}, './file0\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x11, &(0x7f0000001140)=0x1000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000011c0)={0x8, &(0x7f0000001180)=[{0x6, 0xa, 0x8, 0xfff}, {0x6, 0x8, 0x2, 0x5}, {0x2, 0x0, 0x8, 0x8}, {0x1, 0xa5, 0x9, 0x1}, {0x8, 0xaf, 0xf6, 0x315}, {0xfffa, 0x2, 0xff}, {0x8, 0x49, 0x4, 0x6}, {0x200, 0x0, 0x4, 0x3}]}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x76a8784e}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3df2303c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1c804}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000001380)={0x4, 0x0, 'client1\x00', 0x0, "e0a5f0483f7ccd5d", "bef9052b35ab415039653624f51d3becab4fbda23a509442ca1890ea0d4842ee", 0x2, 0x6}) 1.614914937s ago: executing program 1 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)) 1.587947157s ago: executing program 1 (id=221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='module_request\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4b07}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100001000000100000000000000007f000001000000000000000000000000ac1e03010000000000000000000000000000fffd000000000a0080003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000e7000000000000000800000000000000000000000000000000000000000000000100000000000000ff800000000000000000000000000000020000000a0004ff6f0000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a4439637f4756eb50fbb554c52434374ea308a6b9bb8bf2bf451a95e9f38f24031b47aafcf8ca8da74dc623c87ed590aff27b6c1aee9dfedcc9b844f647f00000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xf4, 0x2e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xd37697ff2809b40e}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000485000/0x2000)=nil, 0x2000, 0xb635773f06ebbee9, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(r5, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) futex(&(0x7f000000cffc), 0x4, 0x1, 0x0, &(0x7f0000048000)=0x2, 0xfffffffe) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000015c0)=ANY=[@ANYBLOB="38000000031401f02cbd7000000000000900020073797a30000000000800410072786500140033006c6f00000000"], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.277799291s ago: executing program 0 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x82040) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000480)={0x7, &(0x7f0000000340)=[{0xb, 0x86, 0x0, 0x7}, {0x8, 0x80, 0x3, 0xa8}, {0x9, 0x75, 0x3, 0xc}, {0x1000, 0x2, 0x2, 0xdc35}, {0xb07, 0xe, 0xc, 0x2}, {0x1, 0x54, 0xe6, 0x1}, {0x2, 0x1, 0x0, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) lseek(0xffffffffffffffff, 0x0, 0x1) 698.08473ms ago: executing program 3 (id=225): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, 0x0, 0x0, 0x200040d1) 455.593164ms ago: executing program 1 (id=226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg$inet_sctp(r3, &(0x7f0000008fc0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002b40)="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", 0x1ce}], 0x1, 0x0, 0x0, 0x20004050}], 0x1, 0x4) recvmsg(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x101) 383.104985ms ago: executing program 0 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) 359.482085ms ago: executing program 0 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xf4, 0x6, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x1, 0x6}}) r2 = dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x400, 0x3, 0x40, 0x40014, 0x1, 0x97b, '\x00', r1, r3, 0x2, 0x3, 0x1, 0xf, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000240)='./file0\x00', 0x100, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r10, @ANYBLOB="100003000006000020"], 0x2c, 0x0) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x6, r11, r13, r14) getgroups(0x4, &(0x7f00000003c0)=[r8, r9, r10, r14]) unshare(0x2a020400) r15 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x120) vmsplice(r15, 0x0, 0x4000, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_int(r15, 0x0, 0x3, &(0x7f0000000000)=0x7, 0x4) 30.42552ms ago: executing program 0 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29, 0x1420}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 6) 16.70156ms ago: executing program 0 (id=230): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffd) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 0s ago: executing program 0 (id=231): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 27.509073][ T29] audit: type=1400 audit(1747255719.173:65): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.510139][ T3302] cgroup: Unknown subsys name 'net' [ 27.531808][ T29] audit: type=1400 audit(1747255719.173:66): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.559204][ T29] audit: type=1400 audit(1747255719.203:67): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.716059][ T3302] cgroup: Unknown subsys name 'cpuset' [ 27.722187][ T3302] cgroup: Unknown subsys name 'rlimit' [ 27.853655][ T29] audit: type=1400 audit(1747255719.513:68): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.879022][ T29] audit: type=1400 audit(1747255719.513:69): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.899625][ T29] audit: type=1400 audit(1747255719.513:70): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.905191][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.920063][ T29] audit: type=1400 audit(1747255719.523:71): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.948969][ T29] audit: type=1400 audit(1747255719.523:72): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.973832][ T29] audit: type=1400 audit(1747255719.523:73): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.994124][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.997054][ T29] audit: type=1400 audit(1747255719.593:74): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.521872][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.618432][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.633615][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.640767][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.647940][ T3320] bridge_slave_0: entered allmulticast mode [ 29.654367][ T3320] bridge_slave_0: entered promiscuous mode [ 29.665583][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.680832][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.687982][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.695129][ T3320] bridge_slave_1: entered allmulticast mode [ 29.701677][ T3320] bridge_slave_1: entered promiscuous mode [ 29.744108][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.772551][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.781691][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.817277][ T3320] team0: Port device team_slave_0 added [ 29.832924][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.842466][ T3320] team0: Port device team_slave_1 added [ 29.860552][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.867734][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.874826][ T3318] bridge_slave_0: entered allmulticast mode [ 29.881251][ T3318] bridge_slave_0: entered promiscuous mode [ 29.897984][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.905040][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.912274][ T3313] bridge_slave_0: entered allmulticast mode [ 29.918756][ T3313] bridge_slave_0: entered promiscuous mode [ 29.925386][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.932517][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.939636][ T3313] bridge_slave_1: entered allmulticast mode [ 29.945991][ T3313] bridge_slave_1: entered promiscuous mode [ 29.952425][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.959544][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.966652][ T3318] bridge_slave_1: entered allmulticast mode [ 29.972985][ T3318] bridge_slave_1: entered promiscuous mode [ 30.008512][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.015518][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.041599][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.069793][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.079139][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.086172][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.112223][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.128939][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.141317][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.161813][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.168918][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.176094][ T3314] bridge_slave_0: entered allmulticast mode [ 30.182491][ T3314] bridge_slave_0: entered promiscuous mode [ 30.189168][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.196283][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.203432][ T3314] bridge_slave_1: entered allmulticast mode [ 30.209819][ T3314] bridge_slave_1: entered promiscuous mode [ 30.216921][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.236906][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.244006][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.251164][ T3322] bridge_slave_0: entered allmulticast mode [ 30.257757][ T3322] bridge_slave_0: entered promiscuous mode [ 30.264847][ T3318] team0: Port device team_slave_0 added [ 30.290172][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.297329][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.304519][ T3322] bridge_slave_1: entered allmulticast mode [ 30.311074][ T3322] bridge_slave_1: entered promiscuous mode [ 30.323062][ T3318] team0: Port device team_slave_1 added [ 30.334771][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.345331][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.384664][ T3313] team0: Port device team_slave_0 added [ 30.391462][ T3313] team0: Port device team_slave_1 added [ 30.399334][ T3320] hsr_slave_0: entered promiscuous mode [ 30.405439][ T3320] hsr_slave_1: entered promiscuous mode [ 30.412706][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.422166][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.429133][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.455364][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.466811][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.473759][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.499685][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.511041][ T3314] team0: Port device team_slave_0 added [ 30.528133][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.551112][ T3314] team0: Port device team_slave_1 added [ 30.562060][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.569114][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.595075][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.606477][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.613518][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.639539][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.677189][ T3322] team0: Port device team_slave_0 added [ 30.683169][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.690137][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.716146][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.742894][ T3322] team0: Port device team_slave_1 added [ 30.750336][ T3318] hsr_slave_0: entered promiscuous mode [ 30.756275][ T3318] hsr_slave_1: entered promiscuous mode [ 30.762063][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.769721][ T3318] Cannot create hsr debugfs directory [ 30.775608][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.782605][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.808570][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849724][ T3313] hsr_slave_0: entered promiscuous mode [ 30.855734][ T3313] hsr_slave_1: entered promiscuous mode [ 30.861521][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.869172][ T3313] Cannot create hsr debugfs directory [ 30.879925][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.886928][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.912936][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.936198][ T3314] hsr_slave_0: entered promiscuous mode [ 30.942106][ T3314] hsr_slave_1: entered promiscuous mode [ 30.948045][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.955620][ T3314] Cannot create hsr debugfs directory [ 30.965672][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.972688][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.998697][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.096702][ T3322] hsr_slave_0: entered promiscuous mode [ 31.102747][ T3322] hsr_slave_1: entered promiscuous mode [ 31.108805][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.116439][ T3322] Cannot create hsr debugfs directory [ 31.187547][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.196286][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.216515][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.225415][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.272020][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.283142][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.291871][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.305007][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.330598][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.339883][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.349349][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.360598][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.407213][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.416430][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.441266][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.450635][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.480752][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.488204][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.497078][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.506448][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.521325][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.541350][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.549647][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.568718][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.575785][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.594273][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.601375][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.611218][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.629944][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.641084][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.656798][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.666101][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.673233][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.688756][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.695857][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.709804][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.722967][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.730073][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.738952][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.746034][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.763115][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.770349][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.789963][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.797282][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.829066][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.866852][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.878361][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.893914][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.904318][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.917270][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.981174][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.990226][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.997429][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.006479][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.013590][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.039979][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.052659][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.078709][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.097717][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.172327][ T3314] veth0_vlan: entered promiscuous mode [ 32.198130][ T3314] veth1_vlan: entered promiscuous mode [ 32.229508][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.264769][ T3314] veth0_macvtap: entered promiscuous mode [ 32.277090][ T3322] veth0_vlan: entered promiscuous mode [ 32.288320][ T3318] veth0_vlan: entered promiscuous mode [ 32.297098][ T3314] veth1_macvtap: entered promiscuous mode [ 32.309122][ T3322] veth1_vlan: entered promiscuous mode [ 32.317421][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.338730][ T3322] veth0_macvtap: entered promiscuous mode [ 32.346793][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.354665][ T3318] veth1_vlan: entered promiscuous mode [ 32.372222][ T3322] veth1_macvtap: entered promiscuous mode [ 32.380065][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388938][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.397866][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.406691][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422387][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.432928][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.445719][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.474865][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.485467][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.496326][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.514246][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523123][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.532007][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.540748][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.550932][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 32.550949][ T29] audit: type=1400 audit(1747255724.223:91): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.572886][ T3318] veth0_macvtap: entered promiscuous mode [ 32.580066][ T29] audit: type=1400 audit(1747255724.223:92): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.589581][ T3313] veth0_vlan: entered promiscuous mode [ 32.621337][ T3320] veth0_vlan: entered promiscuous mode [ 32.631337][ T3320] veth1_vlan: entered promiscuous mode [ 32.641288][ T3318] veth1_macvtap: entered promiscuous mode [ 32.649845][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.661139][ T3320] veth0_macvtap: entered promiscuous mode [ 32.673301][ T3313] veth1_vlan: entered promiscuous mode [ 32.686944][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.697450][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.707371][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.717915][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.727764][ T29] audit: type=1400 audit(1747255724.383:93): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.730006][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.751847][ T29] audit: type=1400 audit(1747255724.383:94): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.769129][ T3313] veth0_macvtap: entered promiscuous mode [ 32.783245][ T29] audit: type=1400 audit(1747255724.383:95): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.790951][ T3313] veth1_macvtap: entered promiscuous mode [ 32.838790][ T3320] veth1_macvtap: entered promiscuous mode [ 32.850956][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.861479][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.871417][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.881868][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.892857][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.902149][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.910986][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.919793][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.928520][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.941966][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.952583][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.962542][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.973035][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.983068][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.993609][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.004387][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.019415][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.030028][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.039939][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.050549][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.060423][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.070933][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.080789][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.091303][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.102377][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.144820][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.155440][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.165381][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.175887][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.185787][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.196388][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.211027][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.219680][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.228439][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.237230][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.246101][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.262017][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.272543][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.282514][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.293030][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.303029][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.313638][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.323575][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.334055][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346309][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.393259][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.402121][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.410868][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.419586][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.435640][ T3459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.450218][ T3459] xt_hashlimit: max too large, truncated to 1048576 [ 33.458002][ T3459] Cannot find set identified by id 0 to match [ 33.476898][ T29] audit: type=1400 audit(1747255725.093:96): avc: denied { prog_load } for pid=3456 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.495667][ T29] audit: type=1400 audit(1747255725.093:97): avc: denied { bpf } for pid=3456 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.515890][ T29] audit: type=1400 audit(1747255725.093:98): avc: denied { perfmon } for pid=3456 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.536501][ T29] audit: type=1400 audit(1747255725.093:99): avc: denied { prog_run } for pid=3456 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.555065][ T29] audit: type=1400 audit(1747255725.103:100): avc: denied { create } for pid=3456 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.733217][ T3465] Cannot find add_set index 0 as target [ 33.802417][ T3472] loop1: detected capacity change from 0 to 128 [ 33.861238][ T3472] EXT4-fs: Ignoring removed oldalloc option [ 33.925535][ T3472] /dev/loop1: Can't open blockdev [ 33.935660][ T3474] loop4: detected capacity change from 0 to 512 [ 33.956591][ T3474] EXT4-fs: inline encryption not supported [ 33.965139][ T3474] EXT4-fs: Ignoring removed nobh option [ 33.985521][ T3474] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 34.022156][ T3474] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.7: attempt to clear invalid blocks 2 len 1 [ 34.070974][ T3474] EXT4-fs (loop4): Remounting filesystem read-only [ 34.097833][ T3474] EXT4-fs (loop4): 1 truncate cleaned up [ 34.104044][ T3474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.249291][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.335657][ T3512] rdma_op ffff88811a0d8d80 conn xmit_rdma 0000000000000000 [ 34.356946][ T3513] loop4: detected capacity change from 0 to 128 [ 34.478095][ T3520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.631488][ T3528] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.694342][ T3526] netlink: 260 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.703393][ T3526] netlink: 260 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.948078][ T3542] loop1: detected capacity change from 0 to 512 [ 34.973756][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.989947][ T3542] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.013332][ T3542] xt_connbytes: Forcing CT accounting to be enabled [ 35.026534][ T3542] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 35.062212][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 35.071010][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 35.104003][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.230497][ T3551] loop2: detected capacity change from 0 to 1024 [ 35.239635][ T3551] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 35.275876][ T3526] syz.3.20 (3526) used greatest stack depth: 10232 bytes left [ 35.350600][ T3556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'. [ 35.359478][ T3556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'. [ 35.588187][ T3520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.625855][ T3547] wireguard0: entered promiscuous mode [ 35.631332][ T3547] wireguard0: entered allmulticast mode [ 35.693282][ T3569] loop4: detected capacity change from 0 to 512 [ 35.731060][ T3569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.734121][ T3572] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.755396][ T3569] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.827301][ T3569] xt_connbytes: Forcing CT accounting to be enabled [ 35.846603][ T3569] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 35.897152][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 35.906017][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 35.944889][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.972413][ T3588] loop4: detected capacity change from 0 to 512 [ 36.009369][ T3588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.022653][ T3588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.043708][ T3520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.056466][ T3588] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.074746][ T3588] EXT4-fs (loop4): 1 truncate cleaned up [ 36.093959][ T3590] loop2: detected capacity change from 0 to 512 [ 36.102028][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.121736][ T3590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.135632][ T3588] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 36.135632][ T3588] program syz.4.38 not setting count and/or reply_len properly [ 36.162600][ T3520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.175709][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 36.184560][ T3588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 36.199294][ T3590] ext4: Unknown parameter 'smackfsdef' [ 36.233534][ T3520] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.257369][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.269415][ T3520] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.290601][ T3520] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304606][ T3520] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.169643][ T3610] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.292512][ T3581] syz.2.34 (3581) used greatest stack depth: 7208 bytes left [ 37.347395][ T3616] loop0: detected capacity change from 0 to 512 [ 37.366441][ T3616] EXT4-fs: Ignoring removed oldalloc option [ 37.391206][ T3616] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.47: Parent and EA inode have the same ino 15 [ 37.437058][ T3616] EXT4-fs (loop0): Remounting filesystem read-only [ 37.443704][ T3616] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 37.458442][ T3624] loop2: detected capacity change from 0 to 1764 [ 37.546141][ T3616] EXT4-fs (loop0): 1 orphan inode deleted [ 37.552418][ T3616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.566258][ T29] kauditd_printk_skb: 1482 callbacks suppressed [ 37.566274][ T29] audit: type=1400 audit(1747255729.133:1583): avc: denied { sqpoll } for pid=3605 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.591614][ T29] audit: type=1326 audit(1747255729.213:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc95ee969 code=0x7ffc0000 [ 37.614865][ T29] audit: type=1326 audit(1747255729.213:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc95ee969 code=0x7ffc0000 [ 37.674060][ T29] audit: type=1400 audit(1747255729.333:1586): avc: denied { mount } for pid=3623 comm="syz.2.49" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 37.700643][ T3625] FAULT_INJECTION: forcing a failure. [ 37.700643][ T3625] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.713815][ T3625] CPU: 1 UID: 0 PID: 3625 Comm: syz.3.43 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 37.713847][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 37.713909][ T3625] Call Trace: [ 37.713918][ T3625] [ 37.713927][ T3625] __dump_stack+0x1d/0x30 [ 37.714034][ T3625] dump_stack_lvl+0xe8/0x140 [ 37.714128][ T3625] dump_stack+0x15/0x1b [ 37.714156][ T3625] should_fail_ex+0x265/0x280 [ 37.714199][ T3625] should_fail+0xb/0x20 [ 37.714235][ T3625] should_fail_usercopy+0x1a/0x20 [ 37.714266][ T3625] copy_to_user_nofault+0x7f/0x120 [ 37.714370][ T3625] bpf_probe_write_user+0x83/0xc0 [ 37.714412][ T3625] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 37.714439][ T3625] bpf_trace_run2+0x107/0x1c0 [ 37.714472][ T3625] ? __memcg_slab_post_alloc_hook+0x464/0x5a0 [ 37.714572][ T3625] ? pipe_resize_ring+0x27c/0x350 [ 37.714611][ T3625] ? pipe_resize_ring+0x27c/0x350 [ 37.714725][ T3625] kfree+0x26f/0x310 [ 37.714742][ T3625] ? pipe_resize_ring+0x35/0x350 [ 37.714780][ T3625] pipe_resize_ring+0x27c/0x350 [ 37.714825][ T3625] ? get_pid_task+0x96/0xd0 [ 37.714854][ T3625] pipe_fcntl+0x2e3/0x350 [ 37.714970][ T3625] do_fcntl+0x667/0xdf0 [ 37.715054][ T3625] ? selinux_file_fcntl+0x1b4/0x1e0 [ 37.715088][ T3625] __se_sys_fcntl+0xb1/0x120 [ 37.715107][ T3625] __x64_sys_fcntl+0x43/0x50 [ 37.715204][ T3625] x64_sys_call+0x1f1d/0x2fb0 [ 37.715230][ T3625] do_syscall_64+0xd0/0x1a0 [ 37.715259][ T3625] ? clear_bhb_loop+0x40/0x90 [ 37.715287][ T3625] ? clear_bhb_loop+0x40/0x90 [ 37.715318][ T3625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.715344][ T3625] RIP: 0033:0x7fc8b130e969 [ 37.715357][ T3625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.715379][ T3625] RSP: 002b:00007fc8af946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 37.715408][ T3625] RAX: ffffffffffffffda RBX: 00007fc8b1536080 RCX: 00007fc8b130e969 [ 37.715424][ T3625] RDX: 0000000000000000 RSI: 0000000000000407 RDI: 0000000000000007 [ 37.715442][ T3625] RBP: 00007fc8af946090 R08: 0000000000000000 R09: 0000000000000000 [ 37.715464][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.715476][ T3625] R13: 0000000000000000 R14: 00007fc8b1536080 R15: 00007ffde3286398 [ 37.715499][ T3625] [ 37.951802][ T29] audit: type=1400 audit(1747255729.613:1587): avc: denied { firmware_load } for pid=3623 comm="syz.2.49" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 37.953818][ T3616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.005705][ T29] audit: type=1400 audit(1747255729.663:1588): avc: denied { bind } for pid=3623 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.024966][ T29] audit: type=1400 audit(1747255729.663:1589): avc: denied { name_bind } for pid=3623 comm="syz.2.49" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.046610][ T29] audit: type=1400 audit(1747255729.663:1590): avc: denied { node_bind } for pid=3623 comm="syz.2.49" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 38.126663][ T3634] Zero length message leads to an empty skb [ 38.145081][ T29] audit: type=1400 audit(1747255729.673:1591): avc: denied { write } for pid=3623 comm="syz.2.49" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.166428][ T29] audit: type=1400 audit(1747255729.673:1592): avc: denied { name_connect } for pid=3623 comm="syz.2.49" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.175162][ T3633] program syz.2.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.203395][ T3616] loop0: detected capacity change from 0 to 512 [ 38.210194][ T3616] ======================================================= [ 38.210194][ T3616] WARNING: The mand mount option has been deprecated and [ 38.210194][ T3616] and is ignored by this kernel. Remove the mand [ 38.210194][ T3616] option from the mount to silence this warning. [ 38.210194][ T3616] ======================================================= [ 38.249927][ T3616] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.258182][ T3616] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.268666][ T3633] loop2: detected capacity change from 0 to 128 [ 38.285351][ T3616] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.286004][ T3639] loop4: detected capacity change from 0 to 512 [ 38.298888][ T3616] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.318684][ T3642] IPVS: Error joining to the multicast group [ 38.326129][ T3616] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.47: Invalid block bitmap block 0 in block_group 0 [ 38.350288][ T3633] syz.2.51: attempt to access beyond end of device [ 38.350288][ T3633] loop2: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 38.364029][ T3633] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 38.376605][ C0] hrtimer: interrupt took 37558 ns [ 38.380488][ T3633] syz.2.51: attempt to access beyond end of device [ 38.380488][ T3633] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 38.386581][ T3639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.395037][ T3633] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 38.410325][ T3639] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.415977][ T3616] EXT4-fs (loop0): Remounting filesystem read-only [ 38.416252][ T3616] EXT4-fs (loop0): 1 orphan inode deleted [ 38.441280][ T3646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.447917][ T3633] syz.2.51: attempt to access beyond end of device [ 38.447917][ T3633] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 38.464978][ T3633] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 38.475545][ T3633] syz.2.51: attempt to access beyond end of device [ 38.475545][ T3633] loop2: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 38.489057][ T3633] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 38.493921][ T3616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.503794][ T3633] syz.2.51: attempt to access beyond end of device [ 38.503794][ T3633] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 38.523642][ T3633] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 38.535110][ T3633] syz.2.51: attempt to access beyond end of device [ 38.535110][ T3633] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 38.535635][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.548392][ T3633] Buffer I/O error on dev loop2, logical block 136, lost async page write [ 38.566306][ T3633] syz.2.51: attempt to access beyond end of device [ 38.566306][ T3633] loop2: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 38.579975][ T3633] syz.2.51: attempt to access beyond end of device [ 38.579975][ T3633] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 38.584201][ T3646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.593313][ T3633] syz.2.51: attempt to access beyond end of device [ 38.593313][ T3633] loop2: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 38.729458][ T3646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.763291][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.788662][ T3646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.816024][ T3650] FAULT_INJECTION: forcing a failure. [ 38.816024][ T3650] name failslab, interval 1, probability 0, space 0, times 1 [ 38.828958][ T3650] CPU: 0 UID: 0 PID: 3650 Comm: syz.0.55 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 38.829105][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 38.829123][ T3650] Call Trace: [ 38.829133][ T3650] [ 38.829218][ T3650] __dump_stack+0x1d/0x30 [ 38.829247][ T3650] dump_stack_lvl+0xe8/0x140 [ 38.829275][ T3650] dump_stack+0x15/0x1b [ 38.829298][ T3650] should_fail_ex+0x265/0x280 [ 38.829342][ T3650] ? alloc_fs_context+0x44/0x4e0 [ 38.829393][ T3650] should_failslab+0x8c/0xb0 [ 38.829471][ T3650] __kmalloc_cache_noprof+0x4c/0x320 [ 38.829503][ T3650] alloc_fs_context+0x44/0x4e0 [ 38.829537][ T3650] fs_context_for_mount+0x22/0x30 [ 38.829569][ T3650] do_new_mount+0xe9/0x680 [ 38.829606][ T3650] path_mount+0x4a4/0xb20 [ 38.829658][ T3650] ? user_path_at+0x109/0x130 [ 38.829686][ T3650] __se_sys_mount+0x28f/0x2e0 [ 38.829752][ T3650] ? fput+0x8f/0xc0 [ 38.829780][ T3650] __x64_sys_mount+0x67/0x80 [ 38.829815][ T3650] x64_sys_call+0xd36/0x2fb0 [ 38.829921][ T3650] do_syscall_64+0xd0/0x1a0 [ 38.829998][ T3650] ? clear_bhb_loop+0x40/0x90 [ 38.830026][ T3650] ? clear_bhb_loop+0x40/0x90 [ 38.830054][ T3650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.830083][ T3650] RIP: 0033:0x7f885509e969 [ 38.830103][ T3650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.830187][ T3650] RSP: 002b:00007f8853707038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.830212][ T3650] RAX: ffffffffffffffda RBX: 00007f88552c5fa0 RCX: 00007f885509e969 [ 38.830229][ T3650] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 38.830247][ T3650] RBP: 00007f8853707090 R08: 0000200000000280 R09: 0000000000000000 [ 38.830264][ T3650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.830280][ T3650] R13: 0000000000000000 R14: 00007f88552c5fa0 R15: 00007ffd5a6a6d78 [ 38.830306][ T3650] [ 39.061129][ T3652] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 39.082374][ T3655] FAULT_INJECTION: forcing a failure. [ 39.082374][ T3655] name failslab, interval 1, probability 0, space 0, times 0 [ 39.095193][ T3655] CPU: 0 UID: 0 PID: 3655 Comm: syz.2.58 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 39.095300][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.095320][ T3655] Call Trace: [ 39.095325][ T3655] [ 39.095332][ T3655] __dump_stack+0x1d/0x30 [ 39.095363][ T3655] dump_stack_lvl+0xe8/0x140 [ 39.095386][ T3655] dump_stack+0x15/0x1b [ 39.095429][ T3655] should_fail_ex+0x265/0x280 [ 39.095470][ T3655] should_failslab+0x8c/0xb0 [ 39.095507][ T3655] kmem_cache_alloc_node_noprof+0x57/0x320 [ 39.095527][ T3655] ? __alloc_skb+0x101/0x320 [ 39.095598][ T3655] __alloc_skb+0x101/0x320 [ 39.095630][ T3655] netlink_alloc_large_skb+0xba/0xf0 [ 39.095678][ T3655] netlink_sendmsg+0x3cf/0x6b0 [ 39.095705][ T3655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.095731][ T3655] __sock_sendmsg+0x142/0x180 [ 39.095765][ T3655] ____sys_sendmsg+0x31e/0x4e0 [ 39.095837][ T3655] ___sys_sendmsg+0x17b/0x1d0 [ 39.095883][ T3655] __x64_sys_sendmsg+0xd4/0x160 [ 39.095916][ T3655] x64_sys_call+0x2999/0x2fb0 [ 39.095938][ T3655] do_syscall_64+0xd0/0x1a0 [ 39.096023][ T3655] ? clear_bhb_loop+0x40/0x90 [ 39.096050][ T3655] ? clear_bhb_loop+0x40/0x90 [ 39.096077][ T3655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.096103][ T3655] RIP: 0033:0x7f1c20a8e969 [ 39.096146][ T3655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.096164][ T3655] RSP: 002b:00007f1c1f0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.096186][ T3655] RAX: ffffffffffffffda RBX: 00007f1c20cb5fa0 RCX: 00007f1c20a8e969 [ 39.096202][ T3655] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 39.096216][ T3655] RBP: 00007f1c1f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.096228][ T3655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.096242][ T3655] R13: 0000000000000000 R14: 00007f1c20cb5fa0 R15: 00007ffd60cddb88 [ 39.096267][ T3655] [ 39.096393][ T3652] team0: Device hsr_slave_0 failed to register rx_handler [ 39.333516][ T3646] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.347873][ T3646] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.374853][ T3646] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.397452][ T3646] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517811][ T3662] loop3: detected capacity change from 0 to 512 [ 39.562969][ T3662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.570090][ T3662] ext4: Unknown parameter 'smackfsdef' [ 39.654361][ T3681] xt_hashlimit: max too large, truncated to 1048576 [ 39.973110][ T3685] __nla_validate_parse: 7 callbacks suppressed [ 39.973127][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.085568][ T3688] loop4: detected capacity change from 0 to 128 [ 40.180444][ T3689] syz.4.70: attempt to access beyond end of device [ 40.180444][ T3689] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 40.324835][ T3681] Cannot find set identified by id 0 to match [ 40.377567][ T3659] syz.3.59 (3659) used greatest stack depth: 6944 bytes left [ 40.423918][ T3693] FAULT_INJECTION: forcing a failure. [ 40.423918][ T3693] name failslab, interval 1, probability 0, space 0, times 0 [ 40.436610][ T3693] CPU: 1 UID: 0 PID: 3693 Comm: syz.0.72 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 40.436717][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.436732][ T3693] Call Trace: [ 40.436739][ T3693] [ 40.436749][ T3693] __dump_stack+0x1d/0x30 [ 40.436774][ T3693] dump_stack_lvl+0xe8/0x140 [ 40.436864][ T3693] dump_stack+0x15/0x1b [ 40.436879][ T3693] should_fail_ex+0x265/0x280 [ 40.436915][ T3693] should_failslab+0x8c/0xb0 [ 40.436952][ T3693] kmem_cache_alloc_noprof+0x50/0x310 [ 40.436975][ T3693] ? alloc_empty_file+0x76/0x200 [ 40.437000][ T3693] alloc_empty_file+0x76/0x200 [ 40.437026][ T3693] alloc_file_pseudo+0xc6/0x160 [ 40.437054][ T3693] __shmem_file_setup+0x1b9/0x1f0 [ 40.437088][ T3693] shmem_file_setup+0x3b/0x50 [ 40.437120][ T3693] __se_sys_memfd_create+0x2c3/0x590 [ 40.437224][ T3693] __x64_sys_memfd_create+0x31/0x40 [ 40.437255][ T3693] x64_sys_call+0x122f/0x2fb0 [ 40.437282][ T3693] do_syscall_64+0xd0/0x1a0 [ 40.437353][ T3693] ? clear_bhb_loop+0x40/0x90 [ 40.437375][ T3693] ? clear_bhb_loop+0x40/0x90 [ 40.437478][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.437501][ T3693] RIP: 0033:0x7f885509e969 [ 40.437591][ T3693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.437668][ T3693] RSP: 002b:00007f8853706e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 40.437690][ T3693] RAX: ffffffffffffffda RBX: 0000000000000443 RCX: 00007f885509e969 [ 40.437703][ T3693] RDX: 00007f8853706ef0 RSI: 0000000000000000 RDI: 00007f8855121444 [ 40.437714][ T3693] RBP: 0000200000001040 R08: 00007f8853706bb7 R09: 00007f8853706e40 [ 40.437726][ T3693] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 40.437742][ T3693] R13: 00007f8853706ef0 R14: 00007f8853706eb0 R15: 0000200000000380 [ 40.437788][ T3693] [ 40.440655][ T3691] loop3: detected capacity change from 0 to 128 [ 40.641587][ T3691] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 40.657882][ T3696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 40.667585][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 40.736734][ T3705] FAULT_INJECTION: forcing a failure. [ 40.736734][ T3705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.749951][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: syz.2.76 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 40.749993][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.750010][ T3705] Call Trace: [ 40.750018][ T3705] [ 40.750027][ T3705] __dump_stack+0x1d/0x30 [ 40.750053][ T3705] dump_stack_lvl+0xe8/0x140 [ 40.750078][ T3705] dump_stack+0x15/0x1b [ 40.750135][ T3705] should_fail_ex+0x265/0x280 [ 40.750178][ T3705] should_fail+0xb/0x20 [ 40.750257][ T3705] should_fail_usercopy+0x1a/0x20 [ 40.750281][ T3705] _copy_from_user+0x1c/0xb0 [ 40.750309][ T3705] copy_from_bpfptr+0x5c/0x90 [ 40.750456][ T3705] bpf_prog_load+0x74a/0x1070 [ 40.750506][ T3705] ? security_bpf+0x2b/0x90 [ 40.750539][ T3705] __sys_bpf+0x51d/0x790 [ 40.750640][ T3705] __x64_sys_bpf+0x41/0x50 [ 40.750672][ T3705] x64_sys_call+0x2478/0x2fb0 [ 40.750698][ T3705] do_syscall_64+0xd0/0x1a0 [ 40.750727][ T3705] ? clear_bhb_loop+0x40/0x90 [ 40.750825][ T3705] ? clear_bhb_loop+0x40/0x90 [ 40.750852][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.750873][ T3705] RIP: 0033:0x7f1c20a8e969 [ 40.750887][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.750903][ T3705] RSP: 002b:00007f1c1f0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.750977][ T3705] RAX: ffffffffffffffda RBX: 00007f1c20cb5fa0 RCX: 00007f1c20a8e969 [ 40.750991][ T3705] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 40.751006][ T3705] RBP: 00007f1c1f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.751018][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.751029][ T3705] R13: 0000000000000000 R14: 00007f1c20cb5fa0 R15: 00007ffd60cddb88 [ 40.751104][ T3705] [ 40.949502][ T3708] FAULT_INJECTION: forcing a failure. [ 40.949502][ T3708] name failslab, interval 1, probability 0, space 0, times 0 [ 40.962307][ T3708] CPU: 1 UID: 0 PID: 3708 Comm: syz.0.78 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 40.962341][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.962357][ T3708] Call Trace: [ 40.962364][ T3708] [ 40.962373][ T3708] __dump_stack+0x1d/0x30 [ 40.962472][ T3708] dump_stack_lvl+0xe8/0x140 [ 40.962497][ T3708] dump_stack+0x15/0x1b [ 40.962518][ T3708] should_fail_ex+0x265/0x280 [ 40.962566][ T3708] should_failslab+0x8c/0xb0 [ 40.962604][ T3708] __kmalloc_node_noprof+0xa9/0x410 [ 40.962718][ T3708] ? alloc_slab_obj_exts+0x31/0x80 [ 40.962743][ T3708] alloc_slab_obj_exts+0x31/0x80 [ 40.962799][ T3708] __memcg_slab_post_alloc_hook+0x279/0x5a0 [ 40.962832][ T3708] kmem_cache_alloc_node_noprof+0x22c/0x320 [ 40.962938][ T3708] ? __alloc_skb+0x101/0x320 [ 40.962980][ T3708] __alloc_skb+0x101/0x320 [ 40.963021][ T3708] alloc_skb_with_frags+0x7d/0x470 [ 40.963075][ T3708] ? __memcg_slab_post_alloc_hook+0x464/0x5a0 [ 40.963110][ T3708] sock_alloc_send_pskb+0x43a/0x4f0 [ 40.963142][ T3708] ? __scm_send+0x8f6/0xae0 [ 40.963173][ T3708] queue_oob+0x77/0x510 [ 40.963267][ T3708] unix_stream_sendmsg+0x7c4/0x840 [ 40.963306][ T3708] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 40.963338][ T3708] __sock_sendmsg+0x142/0x180 [ 40.963374][ T3708] ____sys_sendmsg+0x31e/0x4e0 [ 40.963445][ T3708] ___sys_sendmsg+0x17b/0x1d0 [ 40.963481][ T3708] __x64_sys_sendmsg+0xd4/0x160 [ 40.963506][ T3708] x64_sys_call+0x2999/0x2fb0 [ 40.963529][ T3708] do_syscall_64+0xd0/0x1a0 [ 40.963558][ T3708] ? clear_bhb_loop+0x40/0x90 [ 40.963605][ T3708] ? clear_bhb_loop+0x40/0x90 [ 40.963628][ T3708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.963742][ T3708] RIP: 0033:0x7f885509e969 [ 40.963761][ T3708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.963780][ T3708] RSP: 002b:00007f8853707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.963798][ T3708] RAX: ffffffffffffffda RBX: 00007f88552c5fa0 RCX: 00007f885509e969 [ 40.963814][ T3708] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000004 [ 40.963828][ T3708] RBP: 00007f8853707090 R08: 0000000000000000 R09: 0000000000000000 [ 40.963891][ T3708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.963907][ T3708] R13: 0000000000000000 R14: 00007f88552c5fa0 R15: 00007ffd5a6a6d78 [ 40.963931][ T3708] [ 40.976160][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 40.998600][ T3712] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET) [ 41.027452][ T3714] netlink: 164 bytes leftover after parsing attributes in process `syz.0.80'. [ 41.232886][ T3714] netlink: 164 bytes leftover after parsing attributes in process `syz.0.80'. [ 41.241795][ T3714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 41.427235][ T3732] vhci_hcd: invalid port number 65 [ 41.432400][ T3732] vhci_hcd: invalid port number 65 [ 41.535616][ T3743] loop3: detected capacity change from 0 to 128 [ 41.552430][ T3743] FAT-fs (loop3): Directory bread(block 162) failed [ 41.566619][ T3743] FAT-fs (loop3): Directory bread(block 163) failed [ 41.573268][ T3743] FAT-fs (loop3): Directory bread(block 164) failed [ 41.596479][ T3743] FAT-fs (loop3): Directory bread(block 165) failed [ 41.603187][ T3743] FAT-fs (loop3): Directory bread(block 166) failed [ 41.622963][ T3743] FAT-fs (loop3): Directory bread(block 167) failed [ 41.635619][ T3743] FAT-fs (loop3): Directory bread(block 168) failed [ 41.642301][ T3743] FAT-fs (loop3): Directory bread(block 169) failed [ 41.668138][ T3743] FAT-fs (loop3): Directory bread(block 162) failed [ 41.674952][ T3743] FAT-fs (loop3): Directory bread(block 163) failed [ 41.774889][ T3749] loop3: detected capacity change from 0 to 128 [ 41.798795][ T3753] loop4: detected capacity change from 0 to 512 [ 41.808639][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 41.846536][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.875423][ T3749] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 41.924724][ T3753] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.943058][ T3761] FAULT_INJECTION: forcing a failure. [ 41.943058][ T3761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.956247][ T3761] CPU: 0 UID: 0 PID: 3761 Comm: syz.1.95 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 41.956329][ T3761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.956345][ T3761] Call Trace: [ 41.956352][ T3761] [ 41.956366][ T3761] __dump_stack+0x1d/0x30 [ 41.956391][ T3761] dump_stack_lvl+0xe8/0x140 [ 41.956410][ T3761] dump_stack+0x15/0x1b [ 41.956443][ T3761] should_fail_ex+0x265/0x280 [ 41.956480][ T3761] should_fail+0xb/0x20 [ 41.956515][ T3761] should_fail_usercopy+0x1a/0x20 [ 41.956557][ T3761] _copy_to_user+0x20/0xa0 [ 41.956585][ T3761] simple_read_from_buffer+0xb5/0x130 [ 41.956618][ T3761] proc_fail_nth_read+0x100/0x140 [ 41.956673][ T3761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.956704][ T3761] vfs_read+0x19d/0x6f0 [ 41.956841][ T3761] ? __rcu_read_unlock+0x4f/0x70 [ 41.956868][ T3761] ? __fget_files+0x184/0x1c0 [ 41.956976][ T3761] ksys_read+0xda/0x1a0 [ 41.957009][ T3761] __x64_sys_read+0x40/0x50 [ 41.957067][ T3761] x64_sys_call+0x2d77/0x2fb0 [ 41.957100][ T3761] do_syscall_64+0xd0/0x1a0 [ 41.957195][ T3761] ? clear_bhb_loop+0x40/0x90 [ 41.957220][ T3761] ? clear_bhb_loop+0x40/0x90 [ 41.957245][ T3761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.957272][ T3761] RIP: 0033:0x7faeae2fd37c [ 41.957290][ T3761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.957333][ T3761] RSP: 002b:00007faeac967030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.957356][ T3761] RAX: ffffffffffffffda RBX: 00007faeae525fa0 RCX: 00007faeae2fd37c [ 41.957371][ T3761] RDX: 000000000000000f RSI: 00007faeac9670a0 RDI: 0000000000000005 [ 41.957386][ T3761] RBP: 00007faeac967090 R08: 0000000000000000 R09: 0000000000000000 [ 41.957401][ T3761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.957412][ T3761] R13: 0000000000000000 R14: 00007faeae525fa0 R15: 00007fffac47a5a8 [ 41.957436][ T3761] [ 42.164625][ T3753] FAULT_INJECTION: forcing a failure. [ 42.164625][ T3753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.177801][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.4.93 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 42.177884][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.177898][ T3753] Call Trace: [ 42.177905][ T3753] [ 42.177913][ T3753] __dump_stack+0x1d/0x30 [ 42.177940][ T3753] dump_stack_lvl+0xe8/0x140 [ 42.177963][ T3753] dump_stack+0x15/0x1b [ 42.178048][ T3753] should_fail_ex+0x265/0x280 [ 42.178108][ T3753] should_fail+0xb/0x20 [ 42.178142][ T3753] should_fail_usercopy+0x1a/0x20 [ 42.178165][ T3753] _copy_from_user+0x1c/0xb0 [ 42.178192][ T3753] __se_sys_mount+0x10d/0x2e0 [ 42.178372][ T3753] ? do_mkdirat+0x3ac/0x3f0 [ 42.178401][ T3753] __x64_sys_mount+0x67/0x80 [ 42.178487][ T3753] x64_sys_call+0xd36/0x2fb0 [ 42.178507][ T3753] do_syscall_64+0xd0/0x1a0 [ 42.178529][ T3753] ? clear_bhb_loop+0x40/0x90 [ 42.178551][ T3753] ? clear_bhb_loop+0x40/0x90 [ 42.178614][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.178642][ T3753] RIP: 0033:0x7f2dc95f010a [ 42.178659][ T3753] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.178679][ T3753] RSP: 002b:00007f2dc7c56e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.178700][ T3753] RAX: ffffffffffffffda RBX: 00007f2dc7c56ef0 RCX: 00007f2dc95f010a [ 42.178713][ T3753] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 42.178725][ T3753] RBP: 0000200000000f40 R08: 00007f2dc7c56ef0 R09: 000000000124a439 [ 42.178738][ T3753] R10: 000000000124a439 R11: 0000000000000246 R12: 0000200000000f00 [ 42.178752][ T3753] R13: 00007f2dc7c56eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 42.178837][ T3753] [ 42.369393][ T3767] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 42.377344][ T3765] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 42.400350][ T3765] team0: Device veth0_macvtap failed to register rx_handler [ 42.446939][ T3767] team0: Device veth0_macvtap failed to register rx_handler [ 42.467088][ T3753] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.500728][ T3769] FAULT_INJECTION: forcing a failure. [ 42.500728][ T3769] name failslab, interval 1, probability 0, space 0, times 0 [ 42.513630][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.0.98 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 42.513658][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.513671][ T3769] Call Trace: [ 42.513676][ T3769] [ 42.513684][ T3769] __dump_stack+0x1d/0x30 [ 42.513707][ T3769] dump_stack_lvl+0xe8/0x140 [ 42.513802][ T3769] dump_stack+0x15/0x1b [ 42.513819][ T3769] should_fail_ex+0x265/0x280 [ 42.513919][ T3769] should_failslab+0x8c/0xb0 [ 42.513990][ T3769] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 42.514018][ T3769] ? kasprintf+0x83/0xb0 [ 42.514079][ T3769] kvasprintf+0x8a/0x110 [ 42.514104][ T3769] kasprintf+0x83/0xb0 [ 42.514144][ T3769] alloc_bprm+0x133/0x660 [ 42.514166][ T3769] ? should_fail+0xb/0x20 [ 42.514306][ T3769] do_execveat_common+0x12e/0x750 [ 42.514333][ T3769] ? getname_flags+0x154/0x3b0 [ 42.514365][ T3769] __x64_sys_execveat+0x73/0x90 [ 42.514423][ T3769] x64_sys_call+0x2dae/0x2fb0 [ 42.514444][ T3769] do_syscall_64+0xd0/0x1a0 [ 42.514469][ T3769] ? clear_bhb_loop+0x40/0x90 [ 42.514491][ T3769] ? clear_bhb_loop+0x40/0x90 [ 42.514521][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.514596][ T3769] RIP: 0033:0x7f885509e969 [ 42.514631][ T3769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.514715][ T3769] RSP: 002b:00007f8853707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 42.514734][ T3769] RAX: ffffffffffffffda RBX: 00007f88552c5fa0 RCX: 00007f885509e969 [ 42.514749][ T3769] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 42.514763][ T3769] RBP: 00007f8853707090 R08: 0000000000001000 R09: 0000000000000000 [ 42.514777][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.514791][ T3769] R13: 0000000000000000 R14: 00007f88552c5fa0 R15: 00007ffd5a6a6d78 [ 42.514809][ T3769] [ 42.735625][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.802740][ T3777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 42.811608][ T3777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 42.820950][ T3775] FAULT_INJECTION: forcing a failure. [ 42.820950][ T3775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.834119][ T3775] CPU: 0 UID: 0 PID: 3775 Comm: syz.2.102 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 42.834148][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.834169][ T3775] Call Trace: [ 42.834176][ T3775] [ 42.834184][ T3775] __dump_stack+0x1d/0x30 [ 42.834205][ T3775] dump_stack_lvl+0xe8/0x140 [ 42.834224][ T3775] dump_stack+0x15/0x1b [ 42.834304][ T3775] should_fail_ex+0x265/0x280 [ 42.834341][ T3775] ? __pfx_perf_ioctl+0x10/0x10 [ 42.834369][ T3775] should_fail+0xb/0x20 [ 42.834410][ T3775] should_fail_usercopy+0x1a/0x20 [ 42.834434][ T3775] _copy_from_user+0x1c/0xb0 [ 42.834462][ T3775] memdup_user+0x5e/0xd0 [ 42.834482][ T3775] strndup_user+0x68/0xb0 [ 42.834500][ T3775] perf_ioctl+0x505/0x1530 [ 42.834548][ T3775] ? ioctl_has_perm+0x2bb/0x2e0 [ 42.834587][ T3775] ? do_vfs_ioctl+0x993/0x15b0 [ 42.834617][ T3775] ? selinux_file_ioctl+0x2e3/0x370 [ 42.834730][ T3775] ? __fget_files+0x184/0x1c0 [ 42.834757][ T3775] ? __pfx_perf_ioctl+0x10/0x10 [ 42.834783][ T3775] __se_sys_ioctl+0xcb/0x140 [ 42.834805][ T3775] __x64_sys_ioctl+0x43/0x50 [ 42.834898][ T3775] x64_sys_call+0x19a8/0x2fb0 [ 42.834983][ T3775] do_syscall_64+0xd0/0x1a0 [ 42.835036][ T3775] ? clear_bhb_loop+0x40/0x90 [ 42.835062][ T3775] ? clear_bhb_loop+0x40/0x90 [ 42.835087][ T3775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.835107][ T3775] RIP: 0033:0x7f1c20a8e969 [ 42.835202][ T3775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.835221][ T3775] RSP: 002b:00007f1c1f0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.835247][ T3775] RAX: ffffffffffffffda RBX: 00007f1c20cb5fa0 RCX: 00007f1c20a8e969 [ 42.835352][ T3775] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000005 [ 42.835364][ T3775] RBP: 00007f1c1f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.835378][ T3775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.835392][ T3775] R13: 0000000000000000 R14: 00007f1c20cb5fa0 R15: 00007ffd60cddb88 [ 42.835410][ T3775] [ 43.051665][ T3780] FAULT_INJECTION: forcing a failure. [ 43.051665][ T3780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.064977][ T3780] CPU: 1 UID: 0 PID: 3780 Comm: syz.0.103 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 43.065005][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.065041][ T3780] Call Trace: [ 43.065049][ T3780] [ 43.065064][ T3780] __dump_stack+0x1d/0x30 [ 43.065089][ T3780] dump_stack_lvl+0xe8/0x140 [ 43.065107][ T3780] dump_stack+0x15/0x1b [ 43.065122][ T3780] should_fail_ex+0x265/0x280 [ 43.065181][ T3780] should_fail+0xb/0x20 [ 43.065232][ T3780] should_fail_usercopy+0x1a/0x20 [ 43.065311][ T3780] _copy_from_user+0x1c/0xb0 [ 43.065341][ T3780] copy_from_bpfptr+0x5c/0x90 [ 43.065381][ T3780] bpf_prog_load+0x74a/0x1070 [ 43.065430][ T3780] ? security_bpf+0x2b/0x90 [ 43.065547][ T3780] __sys_bpf+0x51d/0x790 [ 43.065592][ T3780] __x64_sys_bpf+0x41/0x50 [ 43.065704][ T3780] x64_sys_call+0x2478/0x2fb0 [ 43.065732][ T3780] do_syscall_64+0xd0/0x1a0 [ 43.065772][ T3780] ? clear_bhb_loop+0x40/0x90 [ 43.065873][ T3780] ? clear_bhb_loop+0x40/0x90 [ 43.065898][ T3780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.065923][ T3780] RIP: 0033:0x7f885509e969 [ 43.065942][ T3780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.065962][ T3780] RSP: 002b:00007f8853707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.066009][ T3780] RAX: ffffffffffffffda RBX: 00007f88552c5fa0 RCX: 00007f885509e969 [ 43.066025][ T3780] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 43.066040][ T3780] RBP: 00007f8853707090 R08: 0000000000000000 R09: 0000000000000000 [ 43.066055][ T3780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.066070][ T3780] R13: 0000000000000000 R14: 00007f88552c5fa0 R15: 00007ffd5a6a6d78 [ 43.066094][ T3780] [ 43.340990][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 43.341064][ T29] audit: type=1400 audit(1747255735.003:2020): avc: denied { create } for pid=3790 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.381131][ T3799] loop2: detected capacity change from 0 to 512 [ 43.389095][ T29] audit: type=1400 audit(1747255735.003:2021): avc: denied { read } for pid=3790 comm="syz.4.107" path="socket:[5093]" dev="sockfs" ino=5093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.412030][ T29] audit: type=1326 audit(1747255735.033:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b130e969 code=0x7ffc0000 [ 43.435483][ T29] audit: type=1326 audit(1747255735.033:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b130e969 code=0x7ffc0000 [ 43.458954][ T29] audit: type=1326 audit(1747255735.033:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc8b130e969 code=0x7ffc0000 [ 43.482406][ T29] audit: type=1326 audit(1747255735.053:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b130e969 code=0x7ffc0000 [ 43.505865][ T29] audit: type=1326 audit(1747255735.053:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b130e969 code=0x7ffc0000 [ 43.529252][ T29] audit: type=1326 audit(1747255735.053:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8b1341225 code=0x7ffc0000 [ 43.561761][ T29] audit: type=1326 audit(1747255735.213:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc8b130e969 code=0x7ffc0000 [ 43.588291][ T3807] FAULT_INJECTION: forcing a failure. [ 43.588291][ T3807] name failslab, interval 1, probability 0, space 0, times 0 [ 43.601054][ T3807] CPU: 1 UID: 0 PID: 3807 Comm: syz.3.112 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 43.601084][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.601099][ T3807] Call Trace: [ 43.601106][ T3807] [ 43.601149][ T3807] __dump_stack+0x1d/0x30 [ 43.601183][ T3807] dump_stack_lvl+0xe8/0x140 [ 43.601231][ T3807] dump_stack+0x15/0x1b [ 43.601252][ T3807] should_fail_ex+0x265/0x280 [ 43.601294][ T3807] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 43.601389][ T3807] should_failslab+0x8c/0xb0 [ 43.601595][ T3807] __kmalloc_cache_noprof+0x4c/0x320 [ 43.601618][ T3807] bpf_prog_alloc_no_stats+0xc4/0x390 [ 43.601721][ T3807] bpf_prog_alloc+0x3c/0x150 [ 43.601757][ T3807] bpf_prog_load+0x514/0x1070 [ 43.601807][ T3807] ? security_bpf+0x2b/0x90 [ 43.601945][ T3807] __sys_bpf+0x51d/0x790 [ 43.601986][ T3807] __x64_sys_bpf+0x41/0x50 [ 43.602017][ T3807] x64_sys_call+0x2478/0x2fb0 [ 43.602037][ T3807] do_syscall_64+0xd0/0x1a0 [ 43.602109][ T3807] ? clear_bhb_loop+0x40/0x90 [ 43.602135][ T3807] ? clear_bhb_loop+0x40/0x90 [ 43.602156][ T3807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.602185][ T3807] RIP: 0033:0x7fc8b130e969 [ 43.602204][ T3807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.602278][ T3807] RSP: 002b:00007fc8af977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.602301][ T3807] RAX: ffffffffffffffda RBX: 00007fc8b1535fa0 RCX: 00007fc8b130e969 [ 43.602388][ T3807] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 43.602399][ T3807] RBP: 00007fc8af977090 R08: 0000000000000000 R09: 0000000000000000 [ 43.602410][ T3807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.602454][ T3807] R13: 0000000000000000 R14: 00007fc8b1535fa0 R15: 00007ffde3286398 [ 43.602478][ T3807] [ 43.604880][ T3799] EXT4-fs (loop2): 1 orphan inode deleted [ 43.644924][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 43.665984][ T3799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.667136][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 43.686576][ T3799] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.947270][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.976561][ T3824] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.994600][ T3825] loop0: detected capacity change from 0 to 512 [ 44.055306][ T3825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.129564][ T3825] EXT4-fs (loop0): 1 truncate cleaned up [ 44.176259][ T3825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.233190][ T3837] process 'syz.2.124' launched '/dev/fd/5' with NULL argv: empty string added [ 44.294471][ T3839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.325300][ T3845] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 44.345428][ T3845] EXT4-fs (loop0): Remounting filesystem read-only [ 44.356772][ T3845] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -30) [ 44.427789][ T3853] loop1: detected capacity change from 0 to 512 [ 44.440019][ T3853] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.453092][ T3853] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.464877][ T3853] EXT4-fs (loop1): 1 truncate cleaned up [ 44.472222][ T3853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.481415][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.492199][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.562626][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.570137][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.618866][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.192221][ T3876] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.231398][ T3878] loop3: detected capacity change from 0 to 1024 [ 45.239260][ T3878] EXT4-fs: Ignoring removed oldalloc option [ 45.245205][ T3878] EXT4-fs: Ignoring removed orlov option [ 45.252411][ T3878] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 45.255398][ T3882] loop0: detected capacity change from 0 to 2048 [ 45.280099][ T3882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.292684][ T3878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.307379][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.335813][ T3878] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 45.363230][ T3878] EXT4-fs (loop3): Remounting filesystem read-only [ 45.459185][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.470118][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.505114][ T3898] loop1: detected capacity change from 0 to 512 [ 45.512211][ T3898] EXT4-fs: inline encryption not supported [ 45.521932][ T3898] EXT4-fs: Ignoring removed nobh option [ 45.538374][ T3898] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 45.547256][ T3898] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.145: attempt to clear invalid blocks 2 len 1 [ 45.564134][ T3898] EXT4-fs (loop1): Remounting filesystem read-only [ 45.575404][ T3898] EXT4-fs (loop1): 1 truncate cleaned up [ 45.581581][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.623857][ T3907] loop3: detected capacity change from 0 to 512 [ 45.668610][ T3907] EXT4-fs: inline encryption not supported [ 45.674637][ T3907] EXT4-fs: Ignoring removed nobh option [ 45.700352][ T3909] xt_hashlimit: max too large, truncated to 1048576 [ 45.716755][ T3907] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 45.737699][ T3907] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.146: attempt to clear invalid blocks 2 len 1 [ 45.760554][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.845712][ T3907] EXT4-fs (loop3): Remounting filesystem read-only [ 45.869981][ T3902] mmap: syz.0.144 (3902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.903260][ T3907] EXT4-fs (loop3): 1 truncate cleaned up [ 45.920339][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.933350][ T3912] FAULT_INJECTION: forcing a failure. [ 45.933350][ T3912] name failslab, interval 1, probability 0, space 0, times 0 [ 45.946113][ T3912] CPU: 0 UID: 0 PID: 3912 Comm: syz.1.147 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 45.946148][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.946164][ T3912] Call Trace: [ 45.946172][ T3912] [ 45.946234][ T3912] __dump_stack+0x1d/0x30 [ 45.946256][ T3912] dump_stack_lvl+0xe8/0x140 [ 45.946278][ T3912] dump_stack+0x15/0x1b [ 45.946298][ T3912] should_fail_ex+0x265/0x280 [ 45.946337][ T3912] should_failslab+0x8c/0xb0 [ 45.946385][ T3912] kmem_cache_alloc_noprof+0x50/0x310 [ 45.946408][ T3912] ? getname_flags+0x80/0x3b0 [ 45.946449][ T3912] getname_flags+0x80/0x3b0 [ 45.946545][ T3912] __x64_sys_link+0x33/0x70 [ 45.946570][ T3912] x64_sys_call+0x2af9/0x2fb0 [ 45.946644][ T3912] do_syscall_64+0xd0/0x1a0 [ 45.946667][ T3912] ? clear_bhb_loop+0x40/0x90 [ 45.946687][ T3912] ? clear_bhb_loop+0x40/0x90 [ 45.946712][ T3912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.946809][ T3912] RIP: 0033:0x7faeae2fe969 [ 45.946823][ T3912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.946839][ T3912] RSP: 002b:00007faeac967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 45.946925][ T3912] RAX: ffffffffffffffda RBX: 00007faeae525fa0 RCX: 00007faeae2fe969 [ 45.946940][ T3912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 45.946956][ T3912] RBP: 00007faeac967090 R08: 0000000000000000 R09: 0000000000000000 [ 45.946969][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.946980][ T3912] R13: 0000000000000000 R14: 00007faeae525fa0 R15: 00007fffac47a5a8 [ 45.946998][ T3912] [ 46.149711][ T3917] FAULT_INJECTION: forcing a failure. [ 46.149711][ T3917] name failslab, interval 1, probability 0, space 0, times 0 [ 46.162608][ T3917] CPU: 1 UID: 0 PID: 3917 Comm: syz.2.150 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 46.162698][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.162845][ T3917] Call Trace: [ 46.162850][ T3917] [ 46.162893][ T3917] __dump_stack+0x1d/0x30 [ 46.162919][ T3917] dump_stack_lvl+0xe8/0x140 [ 46.162944][ T3917] dump_stack+0x15/0x1b [ 46.163035][ T3917] should_fail_ex+0x265/0x280 [ 46.163077][ T3917] should_failslab+0x8c/0xb0 [ 46.163194][ T3917] kmem_cache_alloc_noprof+0x50/0x310 [ 46.163216][ T3917] ? security_file_alloc+0x32/0x100 [ 46.163245][ T3917] security_file_alloc+0x32/0x100 [ 46.163273][ T3917] init_file+0x5c/0x1d0 [ 46.163368][ T3917] alloc_empty_file+0x8b/0x200 [ 46.163386][ T3917] alloc_file_pseudo+0xc6/0x160 [ 46.163414][ T3917] __shmem_file_setup+0x1b9/0x1f0 [ 46.163515][ T3917] shmem_file_setup+0x3b/0x50 [ 46.163547][ T3917] __se_sys_memfd_create+0x2c3/0x590 [ 46.163581][ T3917] __x64_sys_memfd_create+0x31/0x40 [ 46.163607][ T3917] x64_sys_call+0x122f/0x2fb0 [ 46.163682][ T3917] do_syscall_64+0xd0/0x1a0 [ 46.163707][ T3917] ? clear_bhb_loop+0x40/0x90 [ 46.163734][ T3917] ? clear_bhb_loop+0x40/0x90 [ 46.163823][ T3917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.163849][ T3917] RIP: 0033:0x7f1c20a8e969 [ 46.163867][ T3917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.163950][ T3917] RSP: 002b:00007f1c1f0f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 46.163974][ T3917] RAX: ffffffffffffffda RBX: 000000000000050d RCX: 00007f1c20a8e969 [ 46.163989][ T3917] RDX: 00007f1c1f0f6ef0 RSI: 0000000000000000 RDI: 00007f1c20b11444 [ 46.164005][ T3917] RBP: 0000200000000200 R08: 00007f1c1f0f6bb7 R09: 00007f1c1f0f6e40 [ 46.164020][ T3917] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 46.164035][ T3917] R13: 00007f1c1f0f6ef0 R14: 00007f1c1f0f6eb0 R15: 0000200000000800 [ 46.164056][ T3917] [ 46.438870][ T3929] FAULT_INJECTION: forcing a failure. [ 46.438870][ T3929] name failslab, interval 1, probability 0, space 0, times 0 [ 46.453251][ T3929] CPU: 0 UID: 0 PID: 3929 Comm: syz.1.155 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 46.453280][ T3929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.453325][ T3929] Call Trace: [ 46.453330][ T3929] [ 46.453414][ T3929] __dump_stack+0x1d/0x30 [ 46.453436][ T3929] dump_stack_lvl+0xe8/0x140 [ 46.453484][ T3929] dump_stack+0x15/0x1b [ 46.453501][ T3929] should_fail_ex+0x265/0x280 [ 46.453539][ T3929] should_failslab+0x8c/0xb0 [ 46.453623][ T3929] kmem_cache_alloc_noprof+0x50/0x310 [ 46.453719][ T3929] ? dst_alloc+0xbd/0x100 [ 46.453743][ T3929] dst_alloc+0xbd/0x100 [ 46.453786][ T3929] ip_route_output_key_hash_rcu+0xebb/0x13d0 [ 46.453857][ T3929] ip_route_output_flow+0x7b/0x130 [ 46.453881][ T3929] udp_sendmsg+0x118b/0x13a0 [ 46.453912][ T3929] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 46.453943][ T3929] ? __rcu_read_unlock+0x4f/0x70 [ 46.453966][ T3929] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 46.454099][ T3929] ? __pfx_udp_sendmsg+0x10/0x10 [ 46.454125][ T3929] inet_sendmsg+0xac/0xd0 [ 46.454234][ T3929] __sock_sendmsg+0x102/0x180 [ 46.454262][ T3929] ____sys_sendmsg+0x345/0x4e0 [ 46.454293][ T3929] ___sys_sendmsg+0x17b/0x1d0 [ 46.454339][ T3929] __sys_sendmmsg+0x178/0x300 [ 46.454386][ T3929] __x64_sys_sendmmsg+0x57/0x70 [ 46.454430][ T3929] x64_sys_call+0x2f2f/0x2fb0 [ 46.454452][ T3929] do_syscall_64+0xd0/0x1a0 [ 46.454481][ T3929] ? clear_bhb_loop+0x40/0x90 [ 46.454507][ T3929] ? clear_bhb_loop+0x40/0x90 [ 46.454550][ T3929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.454661][ T3929] RIP: 0033:0x7faeae2fe969 [ 46.454676][ T3929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.454693][ T3929] RSP: 002b:00007faeac967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.454710][ T3929] RAX: ffffffffffffffda RBX: 00007faeae525fa0 RCX: 00007faeae2fe969 [ 46.454786][ T3929] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 46.454798][ T3929] RBP: 00007faeac967090 R08: 0000000000000000 R09: 0000000000000000 [ 46.454809][ T3929] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 46.454820][ T3929] R13: 0000000000000000 R14: 00007faeae525fa0 R15: 00007fffac47a5a8 [ 46.454839][ T3929] [ 46.816451][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.842431][ T3937] loop2: detected capacity change from 0 to 512 [ 46.873660][ T3937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.887627][ T3937] ext4: Unknown parameter 'smackfsdef' [ 47.169511][ T3944] lo speed is unknown, defaulting to 1000 [ 47.189668][ T3944] lo speed is unknown, defaulting to 1000 [ 47.198857][ T3944] lo speed is unknown, defaulting to 1000 [ 47.259448][ T3944] infiniband syz0: set active [ 47.264209][ T3944] infiniband syz0: added lo [ 47.268944][ T3390] lo speed is unknown, defaulting to 1000 [ 47.320004][ T3944] RDS/IB: syz0: added [ 47.344177][ T3944] smc: adding ib device syz0 with port count 1 [ 47.350525][ T3944] smc: ib device syz0 port 1 has pnetid [ 47.356687][ T3390] lo speed is unknown, defaulting to 1000 [ 47.473805][ T3944] lo speed is unknown, defaulting to 1000 [ 47.548773][ T3944] lo speed is unknown, defaulting to 1000 [ 47.658432][ T3944] lo speed is unknown, defaulting to 1000 [ 47.728482][ T3944] lo speed is unknown, defaulting to 1000 [ 47.769849][ T3944] lo speed is unknown, defaulting to 1000 [ 47.791575][ T3962] loop3: detected capacity change from 0 to 512 [ 47.822067][ T3962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.838264][ T3962] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.842021][ T3932] syz.2.154 (3932) used greatest stack depth: 6016 bytes left [ 47.875087][ T3962] xt_connbytes: Forcing CT accounting to be enabled [ 47.881854][ T3962] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 47.906438][ T3962] __nla_validate_parse: 11 callbacks suppressed [ 47.906456][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 47.921839][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 47.958560][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.993517][ T3974] loop0: detected capacity change from 0 to 512 [ 48.049664][ T3974] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.059092][ T3974] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.171: bg 0: block 248: padding at end of block bitmap is not set [ 48.081977][ T3974] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.171: Failed to acquire dquot type 1 [ 48.094007][ T3974] EXT4-fs (loop0): 1 truncate cleaned up [ 48.101316][ T3974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.117416][ T3974] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.127295][ T3983] netlink: 180 bytes leftover after parsing attributes in process `syz.4.172'. [ 48.143544][ T3974] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.152469][ T3983] loop4: detected capacity change from 0 to 512 [ 48.155003][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 48.178620][ T3983] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.193628][ T3983] EXT4-fs (loop4): mount failed [ 48.202108][ T3992] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.213560][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.234937][ T3994] loop2: detected capacity change from 0 to 128 [ 48.244295][ T3994] FAT-fs (loop2): Directory bread(block 162) failed [ 48.251617][ T3994] FAT-fs (loop2): Directory bread(block 163) failed [ 48.278912][ T3994] FAT-fs (loop2): Directory bread(block 164) failed [ 48.287275][ T3994] FAT-fs (loop2): Directory bread(block 165) failed [ 48.294286][ T3994] FAT-fs (loop2): Directory bread(block 166) failed [ 48.301240][ T3994] FAT-fs (loop2): Directory bread(block 167) failed [ 48.308077][ T3994] FAT-fs (loop2): Directory bread(block 168) failed [ 48.337104][ T3994] FAT-fs (loop2): Directory bread(block 169) failed [ 48.370610][ T3994] FAT-fs (loop2): Directory bread(block 162) failed [ 48.387759][ T3994] FAT-fs (loop2): Directory bread(block 163) failed [ 48.400771][ T4006] loop3: detected capacity change from 0 to 512 [ 48.405881][ T3994] bio_check_eod: 2 callbacks suppressed [ 48.405900][ T3994] syz.2.178: attempt to access beyond end of device [ 48.405900][ T3994] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 48.429433][ T4006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.444365][ T4006] ext4: Unknown parameter 'smackfsdef' [ 48.475756][ T3994] syz.2.178: attempt to access beyond end of device [ 48.475756][ T3994] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 48.759200][ T29] kauditd_printk_skb: 1458 callbacks suppressed [ 48.759223][ T29] audit: type=1326 audit(1747255740.413:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.788880][ T29] audit: type=1326 audit(1747255740.413:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.812270][ T29] audit: type=1326 audit(1747255740.413:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.835699][ T29] audit: type=1326 audit(1747255740.413:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.859064][ T29] audit: type=1326 audit(1747255740.413:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.882464][ T29] audit: type=1326 audit(1747255740.413:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.905838][ T29] audit: type=1326 audit(1747255740.413:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.929370][ T29] audit: type=1326 audit(1747255740.413:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.952862][ T29] audit: type=1326 audit(1747255740.413:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 48.976187][ T29] audit: type=1326 audit(1747255740.413:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885509e969 code=0x7ffc0000 [ 49.154217][ T4025] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.210478][ T4025] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.225764][ T4036] lo speed is unknown, defaulting to 1000 [ 49.311287][ T4025] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.378682][ T4025] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.462894][ T4025] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.474561][ T4025] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.486638][ T4025] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.498544][ T4025] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.499458][ T4045] FAULT_INJECTION: forcing a failure. [ 49.499458][ T4045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.520135][ T4045] CPU: 0 UID: 0 PID: 4045 Comm: syz.1.192 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 49.520167][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.520182][ T4045] Call Trace: [ 49.520190][ T4045] [ 49.520199][ T4045] __dump_stack+0x1d/0x30 [ 49.520224][ T4045] dump_stack_lvl+0xe8/0x140 [ 49.520302][ T4045] dump_stack+0x15/0x1b [ 49.520325][ T4045] should_fail_ex+0x265/0x280 [ 49.520365][ T4045] should_fail+0xb/0x20 [ 49.520443][ T4045] should_fail_usercopy+0x1a/0x20 [ 49.520467][ T4045] _copy_to_user+0x20/0xa0 [ 49.520495][ T4045] simple_read_from_buffer+0xb5/0x130 [ 49.520590][ T4045] proc_fail_nth_read+0x100/0x140 [ 49.520627][ T4045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.520699][ T4045] vfs_read+0x19d/0x6f0 [ 49.520725][ T4045] ? __rcu_read_unlock+0x4f/0x70 [ 49.520776][ T4045] ? __fget_files+0x184/0x1c0 [ 49.520808][ T4045] ksys_read+0xda/0x1a0 [ 49.520835][ T4045] __x64_sys_read+0x40/0x50 [ 49.520872][ T4045] x64_sys_call+0x2d77/0x2fb0 [ 49.520894][ T4045] do_syscall_64+0xd0/0x1a0 [ 49.520919][ T4045] ? clear_bhb_loop+0x40/0x90 [ 49.520941][ T4045] ? clear_bhb_loop+0x40/0x90 [ 49.520971][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.520993][ T4045] RIP: 0033:0x7faeae2fd37c [ 49.521008][ T4045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.521027][ T4045] RSP: 002b:00007faeac967030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.521085][ T4045] RAX: ffffffffffffffda RBX: 00007faeae525fa0 RCX: 00007faeae2fd37c [ 49.521117][ T4045] RDX: 000000000000000f RSI: 00007faeac9670a0 RDI: 0000000000000005 [ 49.521132][ T4045] RBP: 00007faeac967090 R08: 0000000000000000 R09: 0000000000000000 [ 49.521145][ T4045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.521157][ T4045] R13: 0000000000000000 R14: 00007faeae525fa0 R15: 00007fffac47a5a8 [ 49.521176][ T4045] [ 49.522993][ T4054] netlink: 'syz.2.195': attribute type 39 has an invalid length. [ 49.603798][ T4056] loop2: detected capacity change from 0 to 512 [ 49.745813][ T4062] loop1: detected capacity change from 0 to 512 [ 49.753390][ T4056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.761732][ T4056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.772918][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.786488][ T4062] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.802340][ T4061] loop3: detected capacity change from 0 to 128 [ 49.809556][ T4061] vfat: Unknown parameter '˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙' [ 49.819941][ T4061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'. [ 49.840664][ T4056] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.864918][ T4062] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 49.886813][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 49.895763][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 49.905019][ T4056] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.195: Failed to acquire dquot type 1 [ 49.923419][ T4071] syz.3.199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.934960][ T4056] EXT4-fs (loop2): 1 truncate cleaned up [ 49.949404][ T4071] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 49.949404][ T4071] program syz.3.199 not setting count and/or reply_len properly [ 49.949662][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.979422][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.990237][ T4056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.041667][ T4075] loop1: detected capacity change from 0 to 512 [ 50.058867][ T4075] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.066457][ T4075] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.201: bad orphan inode 13 [ 50.086767][ T4075] ext4_test_bit(bit=12, block=18) = 1 [ 50.092215][ T4075] is_bad_inode(inode)=0 [ 50.096489][ T4075] NEXT_ORPHAN(inode)=2130706432 [ 50.101377][ T4075] max_ino=32 [ 50.104648][ T4075] i_nlink=1 [ 50.136856][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.160947][ T4090] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 50.201563][ T4085] loop4: detected capacity change from 0 to 512 [ 50.209874][ T4092] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.201: deleted inode referenced: 12 [ 50.231224][ T4085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.238177][ T4085] ext4: Unknown parameter 'smackfsdef' [ 50.301938][ T4095] loop2: detected capacity change from 0 to 512 [ 50.308775][ T4095] EXT4-fs: Ignoring removed orlov option [ 50.314537][ T4095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.321195][ T4095] EXT4-fs: Ignoring removed orlov option [ 50.328815][ T4095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 50.336945][ T4095] System zones: 1-12 [ 50.341042][ T4095] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.207: inode #0: comm syz.2.207: iget: illegal inode # [ 50.354901][ T4095] EXT4-fs (loop2): get orphan inode failed [ 50.360923][ T4095] EXT4-fs (loop2): mount failed [ 50.814943][ T4111] loop2: detected capacity change from 0 to 512 [ 50.840472][ T4111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.863902][ T4111] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.893016][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.939025][ T4114] xt_connbytes: Forcing CT accounting to be enabled [ 50.949626][ T4114] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 50.975513][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 50.984324][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 51.039872][ T4119] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 51.356083][ T4141] rdma_rxe: rxe_newlink: failed to add lo [ 51.433385][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 51.760915][ T4072] syz.4.202 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 51.771896][ T4072] CPU: 0 UID: 0 PID: 4072 Comm: syz.4.202 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 51.771923][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.771935][ T4072] Call Trace: [ 51.771941][ T4072] [ 51.771949][ T4072] __dump_stack+0x1d/0x30 [ 51.772021][ T4072] dump_stack_lvl+0xe8/0x140 [ 51.772039][ T4072] dump_stack+0x15/0x1b [ 51.772054][ T4072] dump_header+0x81/0x220 [ 51.772094][ T4072] oom_kill_process+0x334/0x3f0 [ 51.772157][ T4072] out_of_memory+0x979/0xb80 [ 51.772181][ T4072] ? css_next_descendant_pre+0x138/0x160 [ 51.772202][ T4072] mem_cgroup_out_of_memory+0x13d/0x190 [ 51.772242][ T4072] try_charge_memcg+0x5e2/0x870 [ 51.772328][ T4072] charge_memcg+0x51/0xc0 [ 51.772358][ T4072] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 51.772448][ T4072] __read_swap_cache_async+0x1df/0x350 [ 51.772480][ T4072] swap_cluster_readahead+0x277/0x3e0 [ 51.772518][ T4072] swapin_readahead+0xde/0x6f0 [ 51.772586][ T4072] ? __filemap_get_folio+0x49f/0x650 [ 51.772624][ T4072] ? swap_cache_get_folio+0x77/0x200 [ 51.772680][ T4072] do_swap_page+0x301/0x2460 [ 51.772707][ T4072] ? save_fpregs_to_fpstate+0x100/0x160 [ 51.772735][ T4072] ? _raw_spin_unlock+0x26/0x50 [ 51.772804][ T4072] ? finish_task_switch+0xad/0x2b0 [ 51.772867][ T4072] ? __pfx_default_wake_function+0x10/0x10 [ 51.772893][ T4072] handle_mm_fault+0xb60/0x2ae0 [ 51.772927][ T4072] ? mas_walk+0xf2/0x120 [ 51.772952][ T4072] do_user_addr_fault+0x636/0x1090 [ 51.773034][ T4072] ? switch_fpu_return+0xe/0x20 [ 51.773061][ T4072] exc_page_fault+0x54/0xc0 [ 51.773079][ T4072] asm_exc_page_fault+0x26/0x30 [ 51.773102][ T4072] RIP: 0033:0x7f2dc9621228 [ 51.773119][ T4072] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 51.773214][ T4072] RSP: 002b:00007ffc5369a010 EFLAGS: 00010293 [ 51.773229][ T4072] RAX: 0000000000000000 RBX: 00007f2dc9815fa0 RCX: 00007f2dc9621225 [ 51.773400][ T4072] RDX: 00007ffc5369a050 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.773412][ T4072] RBP: 00007f2dc9817ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 51.773423][ T4072] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000c664 [ 51.773434][ T4072] R13: 00007ffc5369a170 R14: ffffffffffffffff R15: 00007ffc5369a190 [ 51.773453][ T4072] [ 51.773460][ T4072] memory: usage 307200kB, limit 307200kB, failcnt 180 [ 52.017834][ T4072] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 52.025744][ T4072] kmem: usage 305424kB, limit 9007199254740988kB, failcnt 0 [ 52.033070][ T4072] Memory cgroup stats for /syz4: [ 52.054149][ T4072] cache 0 [ 52.062137][ T4072] rss 1818624 [ 52.065526][ T4072] shmem 0 [ 52.068575][ T4072] mapped_file 0 [ 52.072041][ T4072] dirty 0 [ 52.074986][ T4072] writeback 0 [ 52.078387][ T4072] workingset_refault_anon 48 [ 52.083075][ T4072] workingset_refault_file 64 [ 52.087714][ T4072] swap 208896 [ 52.091012][ T4072] swapcached 0 [ 52.094394][ T4072] pgpgin 21514 [ 52.097813][ T4072] pgpgout 21070 [ 52.101283][ T4072] pgfault 23771 [ 52.104827][ T4072] pgmajfault 41 [ 52.108312][ T4072] inactive_anon 0 [ 52.111988][ T4072] active_anon 0 [ 52.115484][ T4072] inactive_file 1818624 [ 52.119643][ T4072] active_file 0 [ 52.123119][ T4072] unevictable 0 [ 52.126615][ T4072] hierarchical_memory_limit 314572800 [ 52.131995][ T4072] hierarchical_memsw_limit 9223372036854771712 [ 52.138218][ T4072] total_cache 0 [ 52.141738][ T4072] total_rss 1818624 [ 52.145584][ T4072] total_shmem 0 [ 52.149054][ T4072] total_mapped_file 0 [ 52.153048][ T4072] total_dirty 0 [ 52.156620][ T4072] total_writeback 0 [ 52.160431][ T4072] total_workingset_refault_anon 48 [ 52.165635][ T4072] total_workingset_refault_file 64 [ 52.170753][ T4072] total_swap 208896 [ 52.174562][ T4072] total_swapcached 0 [ 52.178568][ T4072] total_pgpgin 21514 [ 52.182462][ T4072] total_pgpgout 21070 [ 52.186543][ T4072] total_pgfault 23771 [ 52.190532][ T4072] total_pgmajfault 41 [ 52.194550][ T4072] total_inactive_anon 0 [ 52.198766][ T4072] total_active_anon 0 [ 52.202781][ T4072] total_inactive_file 1818624 [ 52.207503][ T4072] total_active_file 0 [ 52.211751][ T4072] total_unevictable 0 [ 52.215790][ T4072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.202,pid=4072,uid=0 [ 52.230412][ T4072] Memory cgroup out of memory: Killed process 4072 (syz.4.202) total-vm:93880kB, anon-rss:2856kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 52.417022][ T4162] FAULT_INJECTION: forcing a failure. [ 52.417022][ T4162] name failslab, interval 1, probability 0, space 0, times 0 [ 52.429829][ T4162] CPU: 0 UID: 0 PID: 4162 Comm: syz.0.229 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 52.429909][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 52.429924][ T4162] Call Trace: [ 52.429932][ T4162] [ 52.429942][ T4162] __dump_stack+0x1d/0x30 [ 52.429967][ T4162] dump_stack_lvl+0xe8/0x140 [ 52.429992][ T4162] dump_stack+0x15/0x1b [ 52.430009][ T4162] should_fail_ex+0x265/0x280 [ 52.430104][ T4162] ? rtnl_newlink+0x5c/0x12d0 [ 52.430134][ T4162] should_failslab+0x8c/0xb0 [ 52.430248][ T4162] __kmalloc_cache_noprof+0x4c/0x320 [ 52.430278][ T4162] rtnl_newlink+0x5c/0x12d0 [ 52.430315][ T4162] ? xas_load+0x413/0x430 [ 52.430343][ T4162] ? xas_load+0x413/0x430 [ 52.430424][ T4162] ? strlen+0x19/0x40 [ 52.430454][ T4162] ? perf_trace_kmem_cache_free+0x55/0x160 [ 52.430521][ T4162] ? __memcg_slab_free_hook+0xb7/0x1c0 [ 52.430546][ T4162] ? __kfree_skb+0x109/0x150 [ 52.430568][ T4162] ? __rcu_read_unlock+0x4f/0x70 [ 52.430592][ T4162] ? avc_has_perm_noaudit+0x1b1/0x200 [ 52.430612][ T4162] ? selinux_capable+0x1f9/0x270 [ 52.430714][ T4162] ? security_capable+0x83/0x90 [ 52.430754][ T4162] ? ns_capable+0x7d/0xb0 [ 52.430773][ T4162] ? __pfx_rtnl_newlink+0x10/0x10 [ 52.430875][ T4162] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 52.430908][ T4162] netlink_rcv_skb+0x120/0x220 [ 52.430951][ T4162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.430980][ T4162] rtnetlink_rcv+0x1c/0x30 [ 52.431001][ T4162] netlink_unicast+0x5a1/0x670 [ 52.431037][ T4162] netlink_sendmsg+0x58b/0x6b0 [ 52.431144][ T4162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.431170][ T4162] __sock_sendmsg+0x142/0x180 [ 52.431201][ T4162] ____sys_sendmsg+0x31e/0x4e0 [ 52.431224][ T4162] ___sys_sendmsg+0x17b/0x1d0 [ 52.431264][ T4162] __x64_sys_sendmsg+0xd4/0x160 [ 52.431315][ T4162] x64_sys_call+0x2999/0x2fb0 [ 52.431344][ T4162] do_syscall_64+0xd0/0x1a0 [ 52.431423][ T4162] ? clear_bhb_loop+0x40/0x90 [ 52.431443][ T4162] ? clear_bhb_loop+0x40/0x90 [ 52.431467][ T4162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.431493][ T4162] RIP: 0033:0x7f885509e969 [ 52.431511][ T4162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.431610][ T4162] RSP: 002b:00007f8853707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.431651][ T4162] RAX: ffffffffffffffda RBX: 00007f88552c5fa0 RCX: 00007f885509e969 [ 52.431667][ T4162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 52.431678][ T4162] RBP: 00007f8853707090 R08: 0000000000000000 R09: 0000000000000000 [ 52.431689][ T4162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.431699][ T4162] R13: 0000000000000000 R14: 00007f88552c5fa0 R15: 00007ffd5a6a6d78 [ 52.431717][ T4162] [ 52.776079][ T4165] ================================================================== [ 52.784215][ T4165] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 52.792653][ T4165] [ 52.794985][ T4165] read-write to 0xffff8881007701b8 of 4 bytes by task 51 on cpu 1: [ 52.802884][ T4165] __writeback_single_inode+0x1e3/0x7c0 [ 52.808442][ T4165] writeback_sb_inodes+0x480/0xa20 [ 52.813585][ T4165] __writeback_inodes_wb+0x94/0x1a0 [ 52.818801][ T4165] wb_writeback+0x266/0x5c0 [ 52.823413][ T4165] wb_workfn+0x4c9/0x910 [ 52.827685][ T4165] process_scheduled_works+0x4ce/0x9d0 [ 52.833167][ T4165] worker_thread+0x582/0x770 [ 52.837783][ T4165] kthread+0x489/0x510 [ 52.841862][ T4165] ret_from_fork+0x4b/0x60 [ 52.846295][ T4165] ret_from_fork_asm+0x1a/0x30 [ 52.851091][ T4165] [ 52.853443][ T4165] read to 0xffff8881007701b8 of 4 bytes by task 4165 on cpu 0: [ 52.861013][ T4165] __mark_inode_dirty+0x52/0x760 [ 52.865989][ T4165] file_update_time+0x288/0x2b0 [ 52.870883][ T4165] ext4_page_mkwrite+0x18b/0xba0 [ 52.875868][ T4165] do_wp_page+0xe2d/0x23e0 [ 52.880304][ T4165] handle_mm_fault+0x6dc/0x2ae0 [ 52.885185][ T4165] do_user_addr_fault+0x636/0x1090 [ 52.890330][ T4165] exc_page_fault+0x54/0xc0 [ 52.894851][ T4165] asm_exc_page_fault+0x26/0x30 [ 52.899718][ T4165] [ 52.902055][ T4165] value changed: 0x0001002a -> 0x00000000 [ 52.907782][ T4165] [ 52.910113][ T4165] Reported by Kernel Concurrency Sanitizer on: [ 52.916271][ T4165] CPU: 0 UID: 0 PID: 4165 Comm: syz.0.231 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 52.928711][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 52.938778][ T4165] ================================================================== [ 53.721380][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.