last executing test programs: 3.138279302s ago: executing program 1 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pread64(r3, &(0x7f0000001600)=""/4081, 0x7, 0x12) close(r2) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3f3}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x4040) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000200), 0x0) 2.978312635s ago: executing program 1 (id=310): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2000008, &(0x7f0000000080)=ANY=[], 0x14, 0x2b4, &(0x7f00000005c0)="$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") write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) r2 = pidfd_getfd(r1, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000400), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='rpc_xdr_alignment\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) write$nci(r2, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x0, {0xe, 0xfa, "ace4d5b73c097f304eb4c27758d70cf278b94ccd56738ab08b712355d4ff5eee7a54a6bcf5c62eea34775bdd129c8b5863aa266c948e5ca6a282c3fb39442caae96037120f2564e7940a37b383224e49b3ed84d6b772018009aa51ad02c171232b6b4cb4036307081cd1159893643a06db5c6d2a658a5cf6b5e5b4db281e2e52370d3366b795d7eca27d5a93ec79929931c7255c1cfb7a3d"}}, 0x9d) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c00000085000000060000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005800500"], 0x80}}, 0x2000c888) 2.65483618s ago: executing program 1 (id=314): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) 2.540574962s ago: executing program 1 (id=316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.387565744s ago: executing program 1 (id=317): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.164197797s ago: executing program 0 (id=323): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x6, 0xf}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5000}, 0x40) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x240408c0) 2.041239009s ago: executing program 0 (id=326): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) unshare(0x2c040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa6b1, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_procfs(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={0x0, 0x500, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.508910597s ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8b, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x4e, 0x8}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x80, 0x6b, 0x8, 0x78, 0x16}, 0x35, &(0x7f0000000280)={0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1e, 0x4, 0x4, 0xf0f, 0xfffd, [0xff0170, 0x30, 0x0, 0xffc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfc, 0x5, 0xffff}]}, 0xa, [{0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="8203105e380a67fd6565af32c3fe0e9e68b946c690f972b64faaec6fb132d6c432bc7b6ab18f4be6ae34caa1763af75fd8cb085537529a0a5ff35bfb2854d336a71ae8485362be18cfdcf1521c8d96ad79df3c8f53e3e360c3383cb4df2d5f91e3d05e818a9f634a24e8e12771f278a650b6243b"]}, {0x71, &(0x7f0000001d00)=ANY=[@ANYBLOB="7103252385a1ece30b1ccec62b23dc572c4892e7b2c4614bf319f732f6db6c4d14036239e60640f385b5a332481f82433816076bb5c7a8ca36f7158bc8c28c625032c211e48aa082669f41d0bbcc48ce4b0bf9dd8a11a399358267b5f9543c36caeba169ddfc95d178560b2e6a0fa0ceab88269bf1e753775608b87638ec5bf40330cacffb7214975708a932fe31e1f78b268f0fd7e5672fd9f7f030ab88cc9ef24b39a5fc2c5f7ee4d33b775a8ef456737e86991903370c890c7e32036a05d6c92dd9f2c2ec82ad847491e19dcfa2b20e5f50a8ca195ae98fe778ed98a615875395"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0x66, &(0x7f0000000580)=@string={0x66, 0x3, "92d893b6ad26e1151431636f39eae2e931271434ae7072537065f2919c8089013b7bd87b3e0fb58c59d46d9948493a8b3e9657aa9d4e88c1134bdcdc0dda4df239afdae9261bd756b9c9661f1c7476637a0c2b6ad73879b77c88e4ddd446744b1a86fb93"}}, {0x7a, &(0x7f0000000600)=@string={0x7a, 0x3, "9c9987c27b513ed3d4495391dd93ccff098cb489f0e797aa270a6053168d7c6cf8ddae5791a58407161edbc5f9dba889c660922f91f76c8402d516d40ae6c4a85ed8111ef13c5544d0248b75ab1428242129309e14e7e21bb2c503104f48676d79bf6573cb98ed42b0dacc66f51d190320b832fd7a66962c"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x72, &(0x7f0000000700)=@string={0x72, 0x3, "d3c71e221d050031b8357406aac77ae6d510312404550cd9ec2e9383ee90eaa065eb04139acce126daff3213afbb017f3dca9f11610057a6ea8be9fe6fd245031b3f12e10f11c7ca484a9b67a6d1c013910c4a31d7fd7f14cbed2d71fd692f34aa7868f1dc13d075f87d4023046974d9"}}, {0xe8, &(0x7f0000000780)=@string={0xe8, 0x3, "de66ae4be2ec73ae2e91e116f50631011b8ba64dcb5e86ad0dba3e86d89f788cc796a080c7ace8c9b39f005e5cfa5e7680d7672132818e38c06d506a8099ddc8b79adbe2eee5b6fa0f734eadcd50dcd24af3ccf5868afd2dcba827b3854faee8c9085280ba146f72696cbb160f28f8306fd95ff265b629efd33239983f9f8c19a2baf003c44ecb4092ba08c441fa85313f6e847770df189bf39dcd43e8ca805c030c41243dea1838f3e7fd290e26398fb91db4a42226a90eb7537703b61ecd247e5781a9419e74e46a884a4e89d599efec11fb3f1f0d51b468278139e52ab34aec0d5d9bc1a0"}}, {0x1c, &(0x7f0000000880)=@string={0x1c, 0x3, "e13ce9da4ac50be455913e297c8f42c3ea579e4907f04433e432"}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0180c2000000080045000020aa27fffe7bde7885204e20000c00"/46], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0xdc7d) r6 = accept4(r5, 0x0, 0x0, 0x80800) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0xfffffffffffffca6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = add_key$user(&(0x7f0000000980), &(0x7f0000000a00)={'syz', 0x0}, &(0x7f0000000d00)="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", 0x1000, 0xfffffffffffffff9) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x4400) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f0000000bc0)={{0x9, 0x3}, 'port0\x00', 0x1, 0x5, 0x7, 0xe, 0x33c18, 0x6, 0x8, 0x0, 0x4, 0x2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000a40)='blacklist\x00', &(0x7f0000000a80)=@secondary) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300009e06030014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c000280080002"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000ac0)=""/233, 0xe9}], 0x1}, 0x1f02) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r6) 1.197231122s ago: executing program 4 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x7}, {0x2, 0x4}, {0xffffffff, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000061) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66962000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.175064002s ago: executing program 4 (id=347): r0 = semget$private(0x0, 0x4, 0x312) semtimedop(r0, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xfffd}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x3]) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x29, 0x12, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.088330263s ago: executing program 4 (id=348): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) truncate(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@loopback, @loopback, @loopback, 0x7, 0x3, 0x32, 0x100, 0x2, 0x82d90242}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) 993.219685ms ago: executing program 4 (id=349): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/221, 0xdd}], 0x1}, 0x2}, {{&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000008c0)=""/225, 0xe1}], 0x2}, 0xa3c}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000009c0)=""/247, 0xf7}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000640)=""/96, 0x60}, {&(0x7f00000006c0)=""/35, 0x23}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/208, 0xd0}], 0x8, &(0x7f0000000d40)=""/105, 0x69}, 0x6}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/170, 0xaa}, {&(0x7f0000000e80)=""/172, 0xac}, {&(0x7f0000000f40)=""/40, 0x28}], 0x3, &(0x7f0000000fc0)=""/16, 0x10}, 0xfffffffb}, {{&(0x7f0000001000)=@qipcrtr, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/122, 0x7a}, {&(0x7f0000001100)=""/82, 0x52}, {&(0x7f0000001180)=""/175, 0xaf}, {&(0x7f0000001240)=""/11, 0xb}, {&(0x7f0000001280)=""/129, 0x81}], 0x5}, 0x3}, {{&(0x7f00000013c0)=@isdn, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/193, 0xc1}, {&(0x7f0000001640)=""/60, 0x3c}, {&(0x7f0000001680)=""/127, 0x7f}, {0x0}], 0x5, &(0x7f0000001840)=""/96, 0x60}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) 985.971455ms ago: executing program 0 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x5}, {0x2, 0x4}, {0x3, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000061) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xb, 0x4007032, r2, 0x66962000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 889.837816ms ago: executing program 2 (id=353): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x3c5}], 0x1}}], 0x1, 0xc010) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000100000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 850.162957ms ago: executing program 2 (id=354): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x85f4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x46}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 800.814118ms ago: executing program 0 (id=355): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) 799.902388ms ago: executing program 2 (id=356): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, 0x0, 0x40004) 751.944469ms ago: executing program 0 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pread64(r3, &(0x7f0000001600)=""/4081, 0x7, 0x12) close(r2) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3f3}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x4040) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000200), 0x0) 751.506258ms ago: executing program 2 (id=358): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 750.631289ms ago: executing program 0 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x300, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fbfffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x27, &(0x7f0000000680)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x24}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @ringbuf_query], &(0x7f0000000080)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_io_uring_setup(0x7c8b, &(0x7f0000000300)={0x0, 0x40000, 0x20, 0x2, 0xff7ffffc}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, 0x0, &(0x7f0000000280), 0x808008, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', 0xffffffffffffffff, 0x0, 0x77}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r9, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r10, 0x4, 0x40, 0x4, 0x0, 0x10, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x80, 0x8}}) 732.079089ms ago: executing program 2 (id=360): r0 = semget$private(0x0, 0x4, 0x312) semtimedop(r0, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xfffd}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x3]) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x29, 0x12, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 644.75372ms ago: executing program 2 (id=361): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) unshare(0x2c040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa6b1, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_procfs(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={0x0, 0x500, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 458.612453ms ago: executing program 3 (id=363): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x130, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x11c, 0x1, [@m_mirred={0x118, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0xcb, 0xa, "8441aa6b8d9e80cd007952e34f32459f51ca7edfcc6b9db3817a1dd813c3ba951e57c7c3f4565eaa2f7d8c3f7b11a673a9166bbff420afe82ea51fe86f7daeb7737dbf4a1ec6b7037e6e10707fff033611a0ad0553f6b37a414c41aeda80d9a8aecadb5ec6a3b390895e00519e753b0547197dc4d864cd03695fa5e757272daa6cdb3f9a703ab57d508283b8ebf5dda0ebc59715b5ddfe5ed47376e1e08c719d95475bc534e31ca216dde1e3e269c592d3903dcb156cd99f9cec6196703cf7d3224d5821ed9979"}, {0xc}, {0xc}}}]}]}, 0x130}}, 0x2000a804) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x7, 0x804f, 0x4, 0x4a10, {{0x2f, 0x4, 0x2, 0x9, 0xbc, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @empty, {[@rr={0x7, 0xb, 0x4, [@empty, @broadcast]}, @rr={0x7, 0xb, 0xbf, [@multicast1, @dev={0xac, 0x14, 0x14, 0x16}]}, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x9, [{@multicast2, 0x200}, {@broadcast, 0x6}, {@private=0xa010100, 0x5}]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x9, [{@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x7}, {@multicast1, 0x7}, {@local, 0x40}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x8}, {@empty, 0x9}, {@broadcast, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xf, 0x1, 0x8, [{@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4}, {@local, 0x6}, {@remote, 0x10}]}, @generic={0x94, 0x12, "32b8c07765fc90bc4eb5d99bb57a3f35"}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 375.512824ms ago: executing program 3 (id=364): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = eventfd2(0x0, 0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r1, &(0x7f0000000280)=0x9, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x18) getitimer(0x2, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES8], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0xb, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000340)=""/177, 0x2c, 0xb1, 0x1, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000001500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001b80)={0x318, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x679}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6cd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x611}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ae}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffb83}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff6d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x828}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3df4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x49}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x802}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_PUBL={0x4}]}, 0x318}, 0x1, 0x0, 0x0, 0x84}, 0x4c001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b3300000000000000000500000008"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 272.469666ms ago: executing program 3 (id=365): socket$inet6(0xa, 0x80002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) io_uring_setup(0x1ddd, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r1, &(0x7f0000000480)='2', 0x1, 0x8080c64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x167) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x0, 0x0, 0x9, 0x3}) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x1b020ba487bfd163, 0x0, 0x25dfdbfb, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {@in6=@private1, 0x0, 0x33}, @in=@remote, {0x1, 0x0, 0x0, 0x2, 0xb, 0x0, 0x82}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 161.081237ms ago: executing program 3 (id=366): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x8000}], 0x1, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}, 0x40000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) fcntl$notify(r3, 0x402, 0x848234f1c7d17d24) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYRES64=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x24000810) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000009c0)=""/102, 0x66, 0x0, &(0x7f0000000cc0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r12}, 0x18) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='dmode=0x0000000000000050,dmode=0x0000000000000003,map=normal,map=acorn,session=0x000000000000003f,overriderockperm,map=off,dmode=0x0000000000000081,unhide,nojoliet,session=0x0000000000000009,map=off,iocharset=cp857,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fs\b\x00gic=0x0000000004000003,,'], 0x3, 0x9ea, &(0x7f0000004100)="$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") fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f00000008c0), 0x2, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x463, &(0x7f0000000340)="$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") 33.711809ms ago: executing program 3 (id=367): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) 32.901829ms ago: executing program 4 (id=368): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x85f4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x46}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 1.28857ms ago: executing program 3 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pread64(r3, &(0x7f0000001600)=""/4081, 0x7, 0x12) close(r2) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3f3}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x4040) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000200), 0x0) 0s ago: executing program 4 (id=370): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x20000801) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe27, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6952}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x21f, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 32.226169][ T29] audit: type=1400 audit(1751191255.973:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.227257][ T3295] cgroup: Unknown subsys name 'net' [ 32.249048][ T29] audit: type=1400 audit(1751191255.973:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.276446][ T29] audit: type=1400 audit(1751191256.013:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.451106][ T3295] cgroup: Unknown subsys name 'cpuset' [ 32.457402][ T3295] cgroup: Unknown subsys name 'rlimit' [ 32.568431][ T29] audit: type=1400 audit(1751191256.313:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.591776][ T29] audit: type=1400 audit(1751191256.313:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.612284][ T29] audit: type=1400 audit(1751191256.313:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.622420][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.632699][ T29] audit: type=1400 audit(1751191256.313:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.661708][ T29] audit: type=1400 audit(1751191256.313:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.686579][ T29] audit: type=1400 audit(1751191256.313:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.709992][ T29] audit: type=1400 audit(1751191256.403:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.737597][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.737719][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 34.813035][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 34.834705][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.842003][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.849159][ T3305] bridge_slave_0: entered allmulticast mode [ 34.855735][ T3305] bridge_slave_0: entered promiscuous mode [ 34.878014][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.885265][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.892464][ T3305] bridge_slave_1: entered allmulticast mode [ 34.898896][ T3305] bridge_slave_1: entered promiscuous mode [ 34.927890][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 34.936583][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 34.957264][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.982188][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.015382][ T3305] team0: Port device team_slave_0 added [ 35.021184][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.039636][ T3305] team0: Port device team_slave_1 added [ 35.077067][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.084249][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.091469][ T3307] bridge_slave_0: entered allmulticast mode [ 35.097832][ T3307] bridge_slave_0: entered promiscuous mode [ 35.104319][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.111447][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.118655][ T3307] bridge_slave_1: entered allmulticast mode [ 35.125034][ T3307] bridge_slave_1: entered promiscuous mode [ 35.135809][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.142857][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.168885][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.197120][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.204116][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.230057][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.245110][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.252224][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.259363][ T3313] bridge_slave_0: entered allmulticast mode [ 35.265982][ T3313] bridge_slave_0: entered promiscuous mode [ 35.272682][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.279759][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.286944][ T3313] bridge_slave_1: entered allmulticast mode [ 35.293428][ T3313] bridge_slave_1: entered promiscuous mode [ 35.308949][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.316044][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.323186][ T3310] bridge_slave_0: entered allmulticast mode [ 35.329752][ T3310] bridge_slave_0: entered promiscuous mode [ 35.342513][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.359276][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.366415][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.373580][ T3310] bridge_slave_1: entered allmulticast mode [ 35.380060][ T3310] bridge_slave_1: entered promiscuous mode [ 35.392255][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.410867][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.417959][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.425336][ T3314] bridge_slave_0: entered allmulticast mode [ 35.431732][ T3314] bridge_slave_0: entered promiscuous mode [ 35.438530][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.445647][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.452964][ T3314] bridge_slave_1: entered allmulticast mode [ 35.459354][ T3314] bridge_slave_1: entered promiscuous mode [ 35.472721][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.505636][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.515437][ T3307] team0: Port device team_slave_0 added [ 35.523442][ T3305] hsr_slave_0: entered promiscuous mode [ 35.529470][ T3305] hsr_slave_1: entered promiscuous mode [ 35.548553][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.559027][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.573879][ T3307] team0: Port device team_slave_1 added [ 35.580590][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.591120][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.634671][ T3313] team0: Port device team_slave_0 added [ 35.647944][ T3310] team0: Port device team_slave_0 added [ 35.654046][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.661047][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.687007][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.698541][ T3313] team0: Port device team_slave_1 added [ 35.712290][ T3314] team0: Port device team_slave_0 added [ 35.720652][ T3310] team0: Port device team_slave_1 added [ 35.731913][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.738940][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.764909][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.780944][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.787959][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.813914][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.829965][ T3314] team0: Port device team_slave_1 added [ 35.850772][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.857743][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.883814][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.917620][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.924643][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.950650][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.961968][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.968912][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.994899][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.018778][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.025794][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.051789][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.062720][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.069691][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.095865][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.111399][ T3307] hsr_slave_0: entered promiscuous mode [ 36.117423][ T3307] hsr_slave_1: entered promiscuous mode [ 36.123452][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.131039][ T3307] Cannot create hsr debugfs directory [ 36.149009][ T3313] hsr_slave_0: entered promiscuous mode [ 36.154855][ T3313] hsr_slave_1: entered promiscuous mode [ 36.160708][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.168268][ T3313] Cannot create hsr debugfs directory [ 36.238920][ T3314] hsr_slave_0: entered promiscuous mode [ 36.245153][ T3314] hsr_slave_1: entered promiscuous mode [ 36.251176][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.258755][ T3314] Cannot create hsr debugfs directory [ 36.266327][ T3310] hsr_slave_0: entered promiscuous mode [ 36.272359][ T3310] hsr_slave_1: entered promiscuous mode [ 36.278151][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.285758][ T3310] Cannot create hsr debugfs directory [ 36.333613][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.360942][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.381343][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.408163][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.458601][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.467318][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.492256][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.507218][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.531974][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.547101][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.560054][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.572920][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.614529][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.623914][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.633227][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.650569][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.679564][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.694924][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.703752][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.713135][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.722147][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.731203][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.743107][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.762992][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770076][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.795076][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.812041][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.829608][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.837930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.845082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.855421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.862499][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.871238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.878285][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.901268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.908358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.923765][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.930875][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.944439][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.973517][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.983533][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.004345][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.034268][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.044779][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.061019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.068194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.076937][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.084009][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.103933][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.123324][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.133920][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.148693][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.155850][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.184640][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.196959][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.204117][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.277422][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.287316][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.296661][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.371878][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.442302][ T3307] veth0_vlan: entered promiscuous mode [ 37.450121][ T3307] veth1_vlan: entered promiscuous mode [ 37.493672][ T3307] veth0_macvtap: entered promiscuous mode [ 37.515637][ T3310] veth0_vlan: entered promiscuous mode [ 37.529688][ T3307] veth1_macvtap: entered promiscuous mode [ 37.562787][ T3305] veth0_vlan: entered promiscuous mode [ 37.573337][ T3314] veth0_vlan: entered promiscuous mode [ 37.579602][ T3310] veth1_vlan: entered promiscuous mode [ 37.587265][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.599956][ T3314] veth1_vlan: entered promiscuous mode [ 37.606233][ T3313] veth0_vlan: entered promiscuous mode [ 37.614770][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.623995][ T3313] veth1_vlan: entered promiscuous mode [ 37.631566][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.640284][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.649108][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.657948][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.676506][ T3314] veth0_macvtap: entered promiscuous mode [ 37.685889][ T3305] veth1_vlan: entered promiscuous mode [ 37.697279][ T3314] veth1_macvtap: entered promiscuous mode [ 37.707763][ T3313] veth0_macvtap: entered promiscuous mode [ 37.717860][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.725713][ T3313] veth1_macvtap: entered promiscuous mode [ 37.746880][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.754575][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 37.754590][ T29] audit: type=1400 audit(1751191261.503:81): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.ZxOXGQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.774506][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.785683][ T29] audit: type=1400 audit(1751191261.503:82): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.794378][ T3310] veth0_macvtap: entered promiscuous mode [ 37.814178][ T29] audit: type=1400 audit(1751191261.503:83): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.ZxOXGQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.831899][ T3310] veth1_macvtap: entered promiscuous mode [ 37.845088][ T29] audit: type=1400 audit(1751191261.503:84): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.859748][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.872489][ T29] audit: type=1400 audit(1751191261.503:85): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.ZxOXGQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.872519][ T29] audit: type=1400 audit(1751191261.503:86): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.ZxOXGQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.901168][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.906284][ T29] audit: type=1400 audit(1751191261.503:87): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.933618][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.943491][ T29] audit: type=1400 audit(1751191261.573:88): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.961789][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.970439][ T29] audit: type=1400 audit(1751191261.573:89): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=4565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.993151][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.036058][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.049847][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.064093][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.073331][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.082141][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.090887][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.107687][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.109335][ T29] audit: type=1400 audit(1751191261.853:90): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.155412][ T3305] veth0_macvtap: entered promiscuous mode [ 38.164406][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.173313][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.182207][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.191195][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.213038][ T3305] veth1_macvtap: entered promiscuous mode [ 38.254762][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.303358][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.315202][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.324156][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.333037][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.341837][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.349576][ T3489] Zero length message leads to an empty skb [ 38.424425][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 38.441694][ T3494] bond0: (slave bond_slave_0): Releasing backup interface [ 38.584224][ C1] hrtimer: interrupt took 32341 ns [ 38.644900][ T3510] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12'. [ 38.665382][ T3514] netlink: 180 bytes leftover after parsing attributes in process `syz.3.13'. [ 38.928116][ T3517] loop2: detected capacity change from 0 to 128 [ 39.184334][ T3508] syz.1.11 (3508) used greatest stack depth: 9992 bytes left [ 39.294456][ T3519] loop1: detected capacity change from 0 to 1024 [ 39.312508][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.665057][ T3547] SELinux: Context Ü is not valid (left unmapped). [ 39.675795][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 39.694762][ T3536] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.703663][ T3536] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.712517][ T3536] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.721305][ T3536] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.736538][ T3536] vxlan0: entered promiscuous mode [ 39.743332][ T3553] loop0: detected capacity change from 0 to 512 [ 39.756795][ T3553] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 39.765235][ T3553] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 39.783701][ T3553] EXT4-fs (loop0): 1 truncate cleaned up [ 39.790925][ T3553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.818471][ T3553] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 39.832527][ T3560] netlink: 180 bytes leftover after parsing attributes in process `syz.2.22'. [ 39.849390][ T3553] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 39.869376][ T3553] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 39.884970][ T3553] EXT4-fs (loop0): Remounting filesystem read-only [ 39.973162][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.015636][ T3569] loop4: detected capacity change from 0 to 1024 [ 40.032527][ T3569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.135578][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.162606][ T3583] loop0: detected capacity change from 0 to 512 [ 40.169348][ T3583] EXT4-fs: Ignoring removed i_version option [ 40.176056][ T3583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.189186][ T3583] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.202040][ T3583] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.216275][ T3583] EXT4-fs (loop0): 1 truncate cleaned up [ 40.222615][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.814401][ T3682] loop2: detected capacity change from 0 to 2048 [ 40.824870][ T3682] EXT4-fs: Invalid want_extra_isize 11 [ 40.850129][ T3682] SELinux: policydb magic number 0xf9a3ff8c does not match expected magic number 0xf97cff8c [ 40.887421][ T3682] SELinux: failed to load policy [ 40.899137][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.006418][ T3682] loop2: detected capacity change from 0 to 1764 [ 41.092848][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.130801][ T3695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 41.180871][ T3693] Restarting kernel threads ... [ 41.189793][ T3693] Done restarting kernel threads. [ 41.207267][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 41.262090][ T3705] tmpfs: Bad value for 'nr_inodes' [ 41.301932][ T3702] FAULT_INJECTION: forcing a failure. [ 41.301932][ T3702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.315223][ T3702] CPU: 1 UID: 0 PID: 3702 Comm: syz.2.48 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 41.315290][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.315305][ T3702] Call Trace: [ 41.315312][ T3702] [ 41.315321][ T3702] __dump_stack+0x1d/0x30 [ 41.315347][ T3702] dump_stack_lvl+0xe8/0x140 [ 41.315370][ T3702] dump_stack+0x15/0x1b [ 41.315386][ T3702] should_fail_ex+0x265/0x280 [ 41.315496][ T3702] should_fail+0xb/0x20 [ 41.315529][ T3702] should_fail_usercopy+0x1a/0x20 [ 41.315563][ T3702] _copy_to_user+0x20/0xa0 [ 41.315665][ T3702] simple_read_from_buffer+0xb5/0x130 [ 41.315696][ T3702] proc_fail_nth_read+0x100/0x140 [ 41.315737][ T3702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.315854][ T3702] vfs_read+0x19d/0x6f0 [ 41.315883][ T3702] ? __rcu_read_unlock+0x4f/0x70 [ 41.315903][ T3702] ? __fget_files+0x184/0x1c0 [ 41.315940][ T3702] ksys_read+0xda/0x1a0 [ 41.315981][ T3702] __x64_sys_read+0x40/0x50 [ 41.316011][ T3702] x64_sys_call+0x2d77/0x2fb0 [ 41.316072][ T3702] do_syscall_64+0xd2/0x200 [ 41.316090][ T3702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.316122][ T3702] ? clear_bhb_loop+0x40/0x90 [ 41.316145][ T3702] ? clear_bhb_loop+0x40/0x90 [ 41.316209][ T3702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.316303][ T3702] RIP: 0033:0x7f3130b0d33c [ 41.316321][ T3702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.316337][ T3702] RSP: 002b:00007f312f177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.316360][ T3702] RAX: ffffffffffffffda RBX: 00007f3130d35fa0 RCX: 00007f3130b0d33c [ 41.316375][ T3702] RDX: 000000000000000f RSI: 00007f312f1770a0 RDI: 0000000000000007 [ 41.316390][ T3702] RBP: 00007f312f177090 R08: 0000000000000000 R09: 0000000000000000 [ 41.316404][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.316491][ T3702] R13: 0000000000000000 R14: 00007f3130d35fa0 R15: 00007ffe30af7e58 [ 41.316514][ T3702] [ 41.671605][ T3711] loop4: detected capacity change from 0 to 1024 [ 41.723826][ T3711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.845083][ T3722] loop1: detected capacity change from 0 to 512 [ 41.855076][ T3722] EXT4-fs: Ignoring removed i_version option [ 41.861472][ T3724] loop2: detected capacity change from 0 to 512 [ 41.867832][ T3722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.879621][ T3724] vfat: Unknown parameter '' [ 41.911465][ T3722] EXT4-fs (loop1): 1 truncate cleaned up [ 41.919339][ T3722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.976754][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 42.113542][ T3740] loop0: detected capacity change from 0 to 2048 [ 42.143470][ T3483] loop0: p1 < > p3 [ 42.149595][ T3483] loop0: p3 size 134217728 extends beyond EOD, truncated [ 42.161656][ T3740] loop0: p1 < > p3 [ 42.166308][ T3740] loop0: p3 size 134217728 extends beyond EOD, truncated [ 42.176185][ T3746] loop3: detected capacity change from 0 to 512 [ 42.184907][ T3746] vfat: Unknown parameter '' [ 42.259587][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 42.355094][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.423134][ T3757] loop2: detected capacity change from 0 to 1024 [ 42.429841][ T3757] ======================================================= [ 42.429841][ T3757] WARNING: The mand mount option has been deprecated and [ 42.429841][ T3757] and is ignored by this kernel. Remove the mand [ 42.429841][ T3757] option from the mount to silence this warning. [ 42.429841][ T3757] ======================================================= [ 42.467320][ T3757] EXT4-fs: inline encryption not supported [ 42.473326][ T3757] EXT4-fs: Ignoring removed bh option [ 42.497635][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.548204][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.558853][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.637326][ T3773] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET) [ 42.665509][ T3781] loop4: detected capacity change from 0 to 512 [ 42.673271][ T3781] vfat: Unknown parameter '' [ 42.693292][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.704641][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 42.791170][ T3788] vhci_hcd: invalid port number 96 [ 42.796332][ T3788] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 42.804875][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 42.804890][ T29] audit: type=1400 audit(1751191266.553:541): avc: denied { write } for pid=3787 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.838654][ T3796] FAULT_INJECTION: forcing a failure. [ 42.838654][ T3796] name failslab, interval 1, probability 0, space 0, times 0 [ 42.848598][ T3794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3794 comm=syz.2.80 [ 42.851857][ T3796] CPU: 0 UID: 0 PID: 3796 Comm: syz.3.82 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 42.851895][ T3796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.851912][ T3796] Call Trace: [ 42.851919][ T3796] [ 42.851930][ T3796] __dump_stack+0x1d/0x30 [ 42.852023][ T3796] dump_stack_lvl+0xe8/0x140 [ 42.852088][ T3796] dump_stack+0x15/0x1b [ 42.852189][ T3796] should_fail_ex+0x265/0x280 [ 42.852231][ T3796] ? tcf_block_get_ext+0x3dc/0xb30 [ 42.852339][ T3796] should_failslab+0x8c/0xb0 [ 42.852424][ T3796] __kmalloc_cache_noprof+0x4c/0x320 [ 42.852522][ T3796] tcf_block_get_ext+0x3dc/0xb30 [ 42.852562][ T3796] ? ____sys_sendmsg+0x31e/0x4e0 [ 42.852609][ T3796] ? ___sys_sendmsg+0x17b/0x1d0 [ 42.852652][ T3796] ? x64_sys_call+0x2999/0x2fb0 [ 42.852683][ T3796] ? __pfx_sfb_init+0x10/0x10 [ 42.852715][ T3796] tcf_block_get+0x67/0xa0 [ 42.852824][ T3796] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 42.852861][ T3796] sfb_init+0x31/0x90 [ 42.852911][ T3796] qdisc_create+0x591/0x9e0 [ 42.852946][ T3796] tc_modify_qdisc+0xe2c/0x1380 [ 42.853105][ T3796] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 42.853173][ T3796] rtnetlink_rcv_msg+0x657/0x6d0 [ 42.853234][ T3796] netlink_rcv_skb+0x123/0x220 [ 42.853290][ T3796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 42.853368][ T3796] rtnetlink_rcv+0x1c/0x30 [ 42.853393][ T3796] netlink_unicast+0x59e/0x670 [ 42.853433][ T3796] netlink_sendmsg+0x58b/0x6b0 [ 42.853460][ T3796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.853529][ T3796] __sock_sendmsg+0x145/0x180 [ 42.853560][ T3796] ____sys_sendmsg+0x31e/0x4e0 [ 42.853639][ T3796] ___sys_sendmsg+0x17b/0x1d0 [ 42.853768][ T3796] __x64_sys_sendmsg+0xd4/0x160 [ 42.853815][ T3796] x64_sys_call+0x2999/0x2fb0 [ 42.853903][ T3796] do_syscall_64+0xd2/0x200 [ 42.853925][ T3796] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.853958][ T3796] ? clear_bhb_loop+0x40/0x90 [ 42.853984][ T3796] ? clear_bhb_loop+0x40/0x90 [ 42.854015][ T3796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.854116][ T3796] RIP: 0033:0x7fcf194ae929 [ 42.854134][ T3796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.854236][ T3796] RSP: 002b:00007fcf17b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.854303][ T3796] RAX: ffffffffffffffda RBX: 00007fcf196d5fa0 RCX: 00007fcf194ae929 [ 42.854319][ T3796] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000005 [ 42.854402][ T3796] RBP: 00007fcf17b17090 R08: 0000000000000000 R09: 0000000000000000 [ 42.854418][ T3796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.854434][ T3796] R13: 0000000000000000 R14: 00007fcf196d5fa0 R15: 00007fff2db3fb58 [ 42.854460][ T3796] [ 42.973086][ T3799] loop3: detected capacity change from 0 to 1024 [ 42.975184][ T3794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3794 comm=syz.2.80 [ 43.055754][ T3800] xt_connbytes: Forcing CT accounting to be enabled [ 43.125958][ T3799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.160103][ T3800] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 43.203300][ T3800] xt_bpf: check failed: parse error [ 43.258074][ T29] audit: type=1326 audit(1751191267.003:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.340580][ T29] audit: type=1326 audit(1751191267.003:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.363779][ T29] audit: type=1326 audit(1751191267.003:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.387061][ T29] audit: type=1326 audit(1751191267.003:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.410985][ T29] audit: type=1326 audit(1751191267.003:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.434803][ T29] audit: type=1326 audit(1751191267.003:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.458025][ T29] audit: type=1326 audit(1751191267.003:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.481812][ T29] audit: type=1326 audit(1751191267.003:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.505145][ T29] audit: type=1326 audit(1751191267.003:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf194ae929 code=0x7ffc0000 [ 43.535933][ T3823] __nla_validate_parse: 1 callbacks suppressed [ 43.535948][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.90'. [ 43.586252][ T3829] lo speed is unknown, defaulting to 1000 [ 43.592527][ T3829] lo speed is unknown, defaulting to 1000 [ 43.598482][ T3829] lo speed is unknown, defaulting to 1000 [ 43.605559][ T3829] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.615088][ T3829] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.720209][ T3835] loop1: detected capacity change from 0 to 2048 [ 43.729151][ T3829] lo speed is unknown, defaulting to 1000 [ 43.765404][ T3829] lo speed is unknown, defaulting to 1000 [ 43.772890][ T3829] lo speed is unknown, defaulting to 1000 [ 43.779126][ T3829] lo speed is unknown, defaulting to 1000 [ 43.786553][ T3835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 43.833303][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.848498][ T3841] FAULT_INJECTION: forcing a failure. [ 43.848498][ T3841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.861879][ T3841] CPU: 0 UID: 0 PID: 3841 Comm: syz.4.95 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 43.861912][ T3841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.861927][ T3841] Call Trace: [ 43.861943][ T3841] [ 43.861953][ T3841] __dump_stack+0x1d/0x30 [ 43.861979][ T3841] dump_stack_lvl+0xe8/0x140 [ 43.862077][ T3841] dump_stack+0x15/0x1b [ 43.862093][ T3841] should_fail_ex+0x265/0x280 [ 43.862188][ T3841] should_fail+0xb/0x20 [ 43.862223][ T3841] should_fail_usercopy+0x1a/0x20 [ 43.862264][ T3841] _copy_to_user+0x20/0xa0 [ 43.862364][ T3841] simple_read_from_buffer+0xb5/0x130 [ 43.862403][ T3841] proc_fail_nth_read+0x100/0x140 [ 43.862446][ T3841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.862541][ T3841] vfs_read+0x19d/0x6f0 [ 43.862570][ T3841] ? __rcu_read_unlock+0x4f/0x70 [ 43.862594][ T3841] ? __fget_files+0x184/0x1c0 [ 43.862622][ T3841] ksys_read+0xda/0x1a0 [ 43.862668][ T3841] __x64_sys_read+0x40/0x50 [ 43.862708][ T3841] x64_sys_call+0x2d77/0x2fb0 [ 43.862733][ T3841] do_syscall_64+0xd2/0x200 [ 43.862754][ T3841] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.862788][ T3841] ? clear_bhb_loop+0x40/0x90 [ 43.862814][ T3841] ? clear_bhb_loop+0x40/0x90 [ 43.862839][ T3841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.862859][ T3841] RIP: 0033:0x7f447703d33c [ 43.862890][ T3841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.862957][ T3841] RSP: 002b:00007f4475665030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.862975][ T3841] RAX: ffffffffffffffda RBX: 00007f4477266160 RCX: 00007f447703d33c [ 43.863000][ T3841] RDX: 000000000000000f RSI: 00007f44756650a0 RDI: 0000000000000009 [ 43.863015][ T3841] RBP: 00007f4475665090 R08: 0000000000000000 R09: 0000000000000000 [ 43.863029][ T3841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.863045][ T3841] R13: 0000000000000000 R14: 00007f4477266160 R15: 00007ffed8fe15f8 [ 43.863183][ T3841] [ 44.030859][ T3829] lo speed is unknown, defaulting to 1000 [ 44.173634][ T3851] FAULT_INJECTION: forcing a failure. [ 44.173634][ T3851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.186751][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.2.100 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 44.186821][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.186836][ T3851] Call Trace: [ 44.186844][ T3851] [ 44.186852][ T3851] __dump_stack+0x1d/0x30 [ 44.186930][ T3851] dump_stack_lvl+0xe8/0x140 [ 44.186949][ T3851] dump_stack+0x15/0x1b [ 44.186965][ T3851] should_fail_ex+0x265/0x280 [ 44.186994][ T3851] should_fail+0xb/0x20 [ 44.187073][ T3851] should_fail_usercopy+0x1a/0x20 [ 44.187114][ T3851] _copy_from_iter+0xcf/0xe40 [ 44.187208][ T3851] ? __build_skb_around+0x1a0/0x200 [ 44.187299][ T3851] ? __alloc_skb+0x223/0x320 [ 44.187338][ T3851] netlink_sendmsg+0x471/0x6b0 [ 44.187366][ T3851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.187405][ T3851] __sock_sendmsg+0x145/0x180 [ 44.187437][ T3851] ____sys_sendmsg+0x31e/0x4e0 [ 44.187473][ T3851] ___sys_sendmsg+0x17b/0x1d0 [ 44.187604][ T3851] __x64_sys_sendmsg+0xd4/0x160 [ 44.187759][ T3851] x64_sys_call+0x2999/0x2fb0 [ 44.187781][ T3851] do_syscall_64+0xd2/0x200 [ 44.187803][ T3851] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.187837][ T3851] ? clear_bhb_loop+0x40/0x90 [ 44.187864][ T3851] ? clear_bhb_loop+0x40/0x90 [ 44.187949][ T3851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.187972][ T3851] RIP: 0033:0x7f3130b0e929 [ 44.187987][ T3851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.188004][ T3851] RSP: 002b:00007f312f177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.188024][ T3851] RAX: ffffffffffffffda RBX: 00007f3130d35fa0 RCX: 00007f3130b0e929 [ 44.188039][ T3851] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 44.188055][ T3851] RBP: 00007f312f177090 R08: 0000000000000000 R09: 0000000000000000 [ 44.188070][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.188085][ T3851] R13: 0000000000000000 R14: 00007f3130d35fa0 R15: 00007ffe30af7e58 [ 44.188109][ T3851] [ 44.431979][ T3856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.102'. [ 44.441275][ T3854] Restarting kernel threads ... [ 44.446302][ T3854] Done restarting kernel threads. [ 44.467435][ T3856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.102'. [ 44.540762][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 44.571824][ T3860] SELinux: failed to load policy [ 44.607968][ T3865] loop3: detected capacity change from 0 to 1024 [ 44.632515][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.720260][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 44.739545][ T3871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.765999][ T3871] batadv_slave_0: entered promiscuous mode [ 44.781990][ T3870] batadv_slave_0: left promiscuous mode [ 44.919720][ T3882] netlink: 180 bytes leftover after parsing attributes in process `syz.0.111'. [ 45.201399][ T3886] loop4: detected capacity change from 0 to 8192 [ 45.365876][ T3898] loop1: detected capacity change from 0 to 512 [ 45.372896][ T3898] vfat: Unknown parameter '' [ 45.383144][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 45.465264][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.487412][ T3905] loop4: detected capacity change from 0 to 1024 [ 45.502880][ T3908] Restarting kernel threads ... [ 45.515097][ T3908] Done restarting kernel threads. [ 45.528656][ T3905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.574944][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.646428][ T3921] loop3: detected capacity change from 0 to 512 [ 45.728478][ T3921] vfat: Unknown parameter '' [ 45.750156][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 45.834396][ T3927] FAULT_INJECTION: forcing a failure. [ 45.834396][ T3927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.847565][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: syz.3.130 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 45.847615][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.847631][ T3927] Call Trace: [ 45.847639][ T3927] [ 45.847647][ T3927] __dump_stack+0x1d/0x30 [ 45.847667][ T3927] dump_stack_lvl+0xe8/0x140 [ 45.847737][ T3927] dump_stack+0x15/0x1b [ 45.847758][ T3927] should_fail_ex+0x265/0x280 [ 45.847955][ T3927] should_fail+0xb/0x20 [ 45.847982][ T3927] should_fail_usercopy+0x1a/0x20 [ 45.848024][ T3927] _copy_from_user+0x1c/0xb0 [ 45.848119][ T3927] ___sys_sendmsg+0xc1/0x1d0 [ 45.848187][ T3927] __x64_sys_sendmsg+0xd4/0x160 [ 45.848236][ T3927] x64_sys_call+0x2999/0x2fb0 [ 45.848265][ T3927] do_syscall_64+0xd2/0x200 [ 45.848289][ T3927] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.848464][ T3927] ? clear_bhb_loop+0x40/0x90 [ 45.848488][ T3927] ? clear_bhb_loop+0x40/0x90 [ 45.848518][ T3927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.848545][ T3927] RIP: 0033:0x7fcf194ae929 [ 45.848564][ T3927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.848614][ T3927] RSP: 002b:00007fcf17b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.848632][ T3927] RAX: ffffffffffffffda RBX: 00007fcf196d5fa0 RCX: 00007fcf194ae929 [ 45.848644][ T3927] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 45.848655][ T3927] RBP: 00007fcf17b17090 R08: 0000000000000000 R09: 0000000000000000 [ 45.848666][ T3927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.848678][ T3927] R13: 0000000000000000 R14: 00007fcf196d5fa0 R15: 00007fff2db3fb58 [ 45.848702][ T3927] [ 46.168587][ T3932] SELinux: failed to load policy [ 46.273367][ T3938] loop1: detected capacity change from 0 to 1024 [ 46.302249][ T3947] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 46.311829][ T3938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.326017][ T3943] Restarting kernel threads ... [ 46.337229][ T3947] batman_adv: batadv0: Adding interface: team0 [ 46.340824][ T3943] Done restarting kernel threads. [ 46.343467][ T3947] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.373705][ T3947] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 46.436757][ T3956] netlink: 180 bytes leftover after parsing attributes in process `syz.0.140'. [ 46.474852][ T3962] siw: device registration error -23 [ 46.743146][ T3974] netlink: 'syz.2.146': attribute type 10 has an invalid length. [ 47.002813][ T3978] loop4: detected capacity change from 0 to 1024 [ 47.031069][ T3978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.057888][ T2996] udevd[2996]: worker [3483] terminated by signal 33 (Unknown signal 33) [ 47.073104][ T2996] udevd[2996]: worker [3483] failed while handling '/devices/virtual/block/loop4' [ 47.085098][ T3978] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.111497][ T2996] udevd[2996]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 47.120789][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.129842][ T2996] udevd[2996]: worker [3296] failed while handling '/devices/virtual/block/loop3' [ 47.140782][ T3992] Restarting kernel threads ... [ 47.147117][ T3992] Done restarting kernel threads. [ 47.171593][ T3978] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.148: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.204113][ T3978] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 47.216709][ T3978] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.216709][ T3978] [ 47.226485][ T3984] xt_hashlimit: size too large, truncated to 1048576 [ 47.272956][ T4010] netlink: 14 bytes leftover after parsing attributes in process `syz.2.162'. [ 47.334664][ T4014] SELinux: failed to load policy [ 47.398127][ T4016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 47.422621][ T4016] batadv_slave_0: entered promiscuous mode [ 47.438671][ T4027] siw: device registration error -23 [ 47.444154][ T4015] batadv_slave_0: left promiscuous mode [ 47.488338][ T3632] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:48: lblock 4 mapped to illegal pblock 4 (length 5) [ 47.525206][ T3632] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 5 with error 117 [ 47.537619][ T3632] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.537619][ T3632] [ 47.553278][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.651749][ T4046] loop3: detected capacity change from 0 to 512 [ 47.658412][ T4046] EXT4-fs: Ignoring removed nobh option [ 47.689034][ T4046] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 47.699941][ T4046] System zones: 0-2, 18-18, 34-34 [ 47.706360][ T4046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.719989][ T4046] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.734168][ T4046] FAULT_INJECTION: forcing a failure. [ 47.734168][ T4046] name failslab, interval 1, probability 0, space 0, times 0 [ 47.746978][ T4046] CPU: 1 UID: 0 PID: 4046 Comm: syz.3.176 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 47.747010][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.747024][ T4046] Call Trace: [ 47.747032][ T4046] [ 47.747041][ T4046] __dump_stack+0x1d/0x30 [ 47.747063][ T4046] dump_stack_lvl+0xe8/0x140 [ 47.747089][ T4046] dump_stack+0x15/0x1b [ 47.747105][ T4046] should_fail_ex+0x265/0x280 [ 47.747141][ T4046] should_failslab+0x8c/0xb0 [ 47.747169][ T4046] kmem_cache_alloc_noprof+0x50/0x310 [ 47.747212][ T4046] ? getname_flags+0x80/0x3b0 [ 47.747304][ T4046] getname_flags+0x80/0x3b0 [ 47.747329][ T4046] __x64_sys_rename+0x40/0x70 [ 47.747354][ T4046] x64_sys_call+0x2aee/0x2fb0 [ 47.747380][ T4046] do_syscall_64+0xd2/0x200 [ 47.747403][ T4046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.747448][ T4046] ? clear_bhb_loop+0x40/0x90 [ 47.747564][ T4046] ? clear_bhb_loop+0x40/0x90 [ 47.747594][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.747666][ T4046] RIP: 0033:0x7fcf194ae929 [ 47.747685][ T4046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.747708][ T4046] RSP: 002b:00007fcf17b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 47.747730][ T4046] RAX: ffffffffffffffda RBX: 00007fcf196d5fa0 RCX: 00007fcf194ae929 [ 47.747744][ T4046] RDX: 0000000000000000 RSI: 0000200000001900 RDI: 0000200000000140 [ 47.747758][ T4046] RBP: 00007fcf17b17090 R08: 0000000000000000 R09: 0000000000000000 [ 47.747833][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.747847][ T4046] R13: 0000000000000000 R14: 00007fcf196d5fa0 R15: 00007fff2db3fb58 [ 47.747868][ T4046] [ 47.748225][ T4052] Restarting kernel threads ... [ 47.767940][ T4056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.777729][ T4052] Done restarting kernel threads. [ 47.785805][ T4056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.966380][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 47.966394][ T29] audit: type=1400 audit(1751191271.713:1222): avc: denied { name_bind } for pid=4055 comm="syz.4.178" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 48.001130][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.046686][ T29] audit: type=1326 audit(1751191271.793:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.073590][ T29] audit: type=1326 audit(1751191271.793:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.097107][ T29] audit: type=1326 audit(1751191271.793:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.120639][ T29] audit: type=1326 audit(1751191271.793:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.144015][ T29] audit: type=1326 audit(1751191271.793:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.167472][ T29] audit: type=1326 audit(1751191271.793:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.190922][ T29] audit: type=1326 audit(1751191271.793:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.214421][ T29] audit: type=1326 audit(1751191271.793:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.237845][ T29] audit: type=1326 audit(1751191271.793:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9edc54e929 code=0x7ffc0000 [ 48.347073][ T4077] siw: device registration error -23 [ 48.460976][ T4086] lo speed is unknown, defaulting to 1000 [ 48.470770][ T4084] Restarting kernel threads ... [ 48.484268][ T4084] Done restarting kernel threads. [ 48.530286][ T4086] loop3: detected capacity change from 0 to 1024 [ 48.562645][ T4086] EXT4-fs: Ignoring removed orlov option [ 48.568437][ T4086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.596218][ T4096] loop2: detected capacity change from 0 to 128 [ 48.609065][ T4098] loop4: detected capacity change from 0 to 512 [ 48.619946][ T4098] vfat: Unknown parameter '' [ 48.634999][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.666046][ T4098] __nla_validate_parse: 4 callbacks suppressed [ 48.666062][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 48.744057][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.762964][ T4106] loop2: detected capacity change from 0 to 512 [ 48.771054][ T4106] vfat: Unknown parameter '' [ 48.781464][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 48.910774][ T4116] siw: device registration error -23 [ 48.962342][ T4115] Restarting kernel threads ... [ 48.979716][ T4115] Done restarting kernel threads. [ 49.032222][ T4122] process 'syz.2.206' launched './file0' with NULL argv: empty string added [ 49.046429][ T4122] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 49.061067][ T4124] SELinux: failed to load policy [ 49.104767][ T4127] loop2: detected capacity change from 0 to 512 [ 49.172516][ T4127] vfat: Unknown parameter '' [ 49.201894][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 49.333094][ T4145] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 49.438438][ T4157] SELinux: failed to load policy [ 49.509323][ T4155] Restarting kernel threads ... [ 49.514637][ T4155] Done restarting kernel threads. [ 49.529703][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.538337][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.600964][ T4169] lo speed is unknown, defaulting to 1000 [ 49.695739][ T4169] loop1: detected capacity change from 0 to 1024 [ 49.704485][ T4169] EXT4-fs: Ignoring removed orlov option [ 49.710425][ T4169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.717226][ T4176] Restarting kernel threads ... [ 49.728546][ T4176] Done restarting kernel threads. [ 49.742703][ T4178] loop3: detected capacity change from 0 to 512 [ 49.750208][ T4169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.768380][ T4178] vfat: Unknown parameter '' [ 49.811607][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 49.842037][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.911388][ T4194] loop3: detected capacity change from 0 to 512 [ 49.959496][ T4199] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.968672][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.984812][ T4194] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.997269][ T4193] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.007005][ T4194] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.113339][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 50.157717][ T4217] netlink: 180 bytes leftover after parsing attributes in process `syz.2.242'. [ 50.170771][ T4215] Restarting kernel threads ... [ 50.175874][ T4215] Done restarting kernel threads. [ 50.222565][ T4192] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.233: bg 0: block 217: padding at end of block bitmap is not set [ 50.348512][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.400585][ T4222] loop3: detected capacity change from 0 to 512 [ 50.407639][ T4222] vfat: Unknown parameter '' [ 50.426881][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 50.598149][ T4231] FAULT_INJECTION: forcing a failure. [ 50.598149][ T4231] name failslab, interval 1, probability 0, space 0, times 0 [ 50.610964][ T4231] CPU: 0 UID: 0 PID: 4231 Comm: syz.3.248 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 50.610997][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.611012][ T4231] Call Trace: [ 50.611020][ T4231] [ 50.611029][ T4231] __dump_stack+0x1d/0x30 [ 50.611049][ T4231] dump_stack_lvl+0xe8/0x140 [ 50.611140][ T4231] dump_stack+0x15/0x1b [ 50.611188][ T4231] should_fail_ex+0x265/0x280 [ 50.611218][ T4231] should_failslab+0x8c/0xb0 [ 50.611296][ T4231] kmem_cache_alloc_node_noprof+0x57/0x320 [ 50.611332][ T4231] ? __alloc_skb+0x101/0x320 [ 50.611366][ T4231] __alloc_skb+0x101/0x320 [ 50.611424][ T4231] ? audit_log_start+0x365/0x6c0 [ 50.611457][ T4231] audit_log_start+0x380/0x6c0 [ 50.611550][ T4231] audit_seccomp+0x48/0x100 [ 50.611580][ T4231] ? __seccomp_filter+0x68c/0x10d0 [ 50.611668][ T4231] __seccomp_filter+0x69d/0x10d0 [ 50.611727][ T4231] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.611778][ T4231] ? vfs_write+0x75e/0x8e0 [ 50.611808][ T4231] ? __rcu_read_unlock+0x4f/0x70 [ 50.611828][ T4231] ? __fget_files+0x184/0x1c0 [ 50.611933][ T4231] __secure_computing+0x82/0x150 [ 50.611962][ T4231] syscall_trace_enter+0xcf/0x1e0 [ 50.611993][ T4231] do_syscall_64+0xac/0x200 [ 50.612062][ T4231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.612096][ T4231] ? clear_bhb_loop+0x40/0x90 [ 50.612117][ T4231] ? clear_bhb_loop+0x40/0x90 [ 50.612145][ T4231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.612172][ T4231] RIP: 0033:0x7fcf194ae929 [ 50.612211][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.612305][ T4231] RSP: 002b:00007fcf17b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 50.612329][ T4231] RAX: ffffffffffffffda RBX: 00007fcf196d5fa0 RCX: 00007fcf194ae929 [ 50.612344][ T4231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.612358][ T4231] RBP: 00007fcf17b17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.612372][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.612383][ T4231] R13: 0000000000000000 R14: 00007fcf196d5fa0 R15: 00007fff2db3fb58 [ 50.612401][ T4231] [ 50.869464][ T4235] loop3: detected capacity change from 0 to 512 [ 50.884833][ T4237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.897204][ T4233] Restarting kernel threads ... [ 50.944502][ T4235] vfat: Unknown parameter '' [ 50.960588][ T4233] Done restarting kernel threads. [ 50.971836][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 51.069111][ T4243] loop2: detected capacity change from 0 to 512 [ 51.076491][ T4244] loop1: detected capacity change from 0 to 128 [ 51.087876][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 51.101810][ T4243] vfat: Unknown parameter '' [ 51.113669][ T4246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4246 comm=syz.4.255 [ 51.253635][ T4257] bridge: RTM_NEWNEIGH with invalid ether address [ 51.420760][ T4272] Restarting kernel threads ... [ 51.425851][ T4272] Done restarting kernel threads. [ 51.441818][ T4275] sd 0:0:1:0: device reset [ 51.743059][ T4289] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 51.752694][ T4289] SELinux: failed to load policy [ 51.758344][ T4289] SELinux: policydb version 0 does not match my version range 15-34 [ 51.766590][ T4289] SELinux: failed to load policy [ 51.928157][ T4299] openvswitch: netlink: Message has 6 unknown bytes. [ 52.056926][ T4306] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.105342][ T4309] netem: change failed [ 52.113982][ T4306] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.163839][ T4306] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.216594][ T4306] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.227507][ T4316] loop1: detected capacity change from 0 to 512 [ 52.235751][ T4316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.268210][ T4316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.284950][ T4316] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.325567][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.329187][ T4323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4323 comm=syz.3.281 [ 52.351216][ T4306] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.363188][ T4306] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396151][ T4306] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.416071][ T4306] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.429765][ T4329] netlink: 'syz.0.284': attribute type 2 has an invalid length. [ 52.437657][ T4329] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 52.457167][ T4331] ªªªªª»: renamed from vlan1 (while UP) [ 52.462986][ T4331] FAULT_INJECTION: forcing a failure. [ 52.462986][ T4331] name failslab, interval 1, probability 0, space 0, times 0 [ 52.475673][ T4331] CPU: 0 UID: 0 PID: 4331 Comm: syz.3.285 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 52.475703][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.475715][ T4331] Call Trace: [ 52.475720][ T4331] [ 52.475726][ T4331] __dump_stack+0x1d/0x30 [ 52.475820][ T4331] dump_stack_lvl+0xe8/0x140 [ 52.475838][ T4331] dump_stack+0x15/0x1b [ 52.475853][ T4331] should_fail_ex+0x265/0x280 [ 52.475882][ T4331] should_failslab+0x8c/0xb0 [ 52.475904][ T4331] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 52.475965][ T4331] ? kstrdup_const+0x3e/0x50 [ 52.475988][ T4331] kstrdup+0x3e/0xd0 [ 52.476008][ T4331] kstrdup_const+0x3e/0x50 [ 52.476028][ T4331] kernfs_rename_ns+0x22c/0x410 [ 52.476124][ T4331] sysfs_rename_dir_ns+0x4d/0x70 [ 52.476151][ T4331] kobject_rename+0x28b/0x350 [ 52.476173][ T4331] ? sysfs_rename_link_ns+0x106/0x120 [ 52.476202][ T4331] device_rename+0x11f/0x180 [ 52.476245][ T4331] netif_change_name+0x1eb/0x6b0 [ 52.476273][ T4331] dev_change_name+0xc0/0x170 [ 52.476297][ T4331] dev_ifsioc+0x302/0xaa0 [ 52.476316][ T4331] dev_ioctl+0x4a7/0x960 [ 52.476333][ T4331] sock_do_ioctl+0x197/0x220 [ 52.476438][ T4331] sock_ioctl+0x41b/0x610 [ 52.476459][ T4331] ? __pfx_sock_ioctl+0x10/0x10 [ 52.476479][ T4331] __se_sys_ioctl+0xcb/0x140 [ 52.476521][ T4331] __x64_sys_ioctl+0x43/0x50 [ 52.476547][ T4331] x64_sys_call+0x19a8/0x2fb0 [ 52.476566][ T4331] do_syscall_64+0xd2/0x200 [ 52.476582][ T4331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.476606][ T4331] ? clear_bhb_loop+0x40/0x90 [ 52.476654][ T4331] ? clear_bhb_loop+0x40/0x90 [ 52.476733][ T4331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.476754][ T4331] RIP: 0033:0x7fcf194ae929 [ 52.476767][ T4331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.476783][ T4331] RSP: 002b:00007fcf17b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.476840][ T4331] RAX: ffffffffffffffda RBX: 00007fcf196d5fa0 RCX: 00007fcf194ae929 [ 52.476851][ T4331] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000006 [ 52.476862][ T4331] RBP: 00007fcf17b17090 R08: 0000000000000000 R09: 0000000000000000 [ 52.476872][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.476953][ T4331] R13: 0000000000000000 R14: 00007fcf196d5fa0 R15: 00007fff2db3fb58 [ 52.476971][ T4331] [ 52.900873][ T4348] Restarting kernel threads ... [ 52.910186][ T4348] Done restarting kernel threads. [ 52.977401][ T4358] FAULT_INJECTION: forcing a failure. [ 52.977401][ T4358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.990598][ T4358] CPU: 0 UID: 0 PID: 4358 Comm: syz.1.295 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 52.990630][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.990646][ T4358] Call Trace: [ 52.990667][ T4358] [ 52.990676][ T4358] __dump_stack+0x1d/0x30 [ 52.990699][ T4358] dump_stack_lvl+0xe8/0x140 [ 52.990796][ T4358] dump_stack+0x15/0x1b [ 52.990818][ T4358] should_fail_ex+0x265/0x280 [ 52.990858][ T4358] should_fail+0xb/0x20 [ 52.990901][ T4358] should_fail_usercopy+0x1a/0x20 [ 52.990938][ T4358] _copy_from_user+0x1c/0xb0 [ 52.990963][ T4358] ___sys_sendmsg+0xc1/0x1d0 [ 52.991034][ T4358] __x64_sys_sendmsg+0xd4/0x160 [ 52.991143][ T4358] x64_sys_call+0x2999/0x2fb0 [ 52.991171][ T4358] do_syscall_64+0xd2/0x200 [ 52.991194][ T4358] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.991276][ T4358] ? clear_bhb_loop+0x40/0x90 [ 52.991299][ T4358] ? clear_bhb_loop+0x40/0x90 [ 52.991327][ T4358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.991351][ T4358] RIP: 0033:0x7f9edc54e929 [ 52.991369][ T4358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.991391][ T4358] RSP: 002b:00007f9edabb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.991449][ T4358] RAX: ffffffffffffffda RBX: 00007f9edc775fa0 RCX: 00007f9edc54e929 [ 52.991464][ T4358] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 52.991479][ T4358] RBP: 00007f9edabb7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.991493][ T4358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.991507][ T4358] R13: 0000000000000000 R14: 00007f9edc775fa0 R15: 00007ffe8d414f18 [ 52.991528][ T4358] [ 53.184034][ T4356] loop2: detected capacity change from 0 to 128 [ 53.221055][ T4362] Restarting kernel threads ... [ 53.226194][ T4362] Done restarting kernel threads. [ 53.246935][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 53.246951][ T29] audit: type=1400 audit(1751191276.993:2214): avc: denied { name_bind } for pid=4365 comm="syz.1.300" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.306406][ T4368] siw: device registration error -23 [ 53.333648][ T29] audit: type=1326 audit(1751191277.053:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.357064][ T29] audit: type=1326 audit(1751191277.053:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.380492][ T29] audit: type=1326 audit(1751191277.053:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.403939][ T29] audit: type=1326 audit(1751191277.053:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.427317][ T29] audit: type=1326 audit(1751191277.053:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.450801][ T29] audit: type=1326 audit(1751191277.053:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f447703d290 code=0x7ffc0000 [ 53.474165][ T29] audit: type=1326 audit(1751191277.053:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f447703d290 code=0x7ffc0000 [ 53.497595][ T29] audit: type=1326 audit(1751191277.053:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.521051][ T29] audit: type=1326 audit(1751191277.053:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f447703e929 code=0x7ffc0000 [ 53.640604][ T4378] random: crng reseeded on system resumption [ 53.748589][ T4386] siw: device registration error -23 [ 53.809477][ T4391] loop1: detected capacity change from 0 to 512 [ 53.835665][ T4391] vfat: Unknown parameter '' [ 53.928695][ T4391] __nla_validate_parse: 62 callbacks suppressed [ 53.928723][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 54.160123][ T4401] loop4: detected capacity change from 0 to 512 [ 54.205895][ T4401] vfat: Unknown parameter '' [ 54.316501][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 54.520829][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 54.638879][ T4424] FAULT_INJECTION: forcing a failure. [ 54.638879][ T4424] name failslab, interval 1, probability 0, space 0, times 0 [ 54.651712][ T4424] CPU: 0 UID: 0 PID: 4424 Comm: syz.2.324 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 54.651745][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.651761][ T4424] Call Trace: [ 54.651769][ T4424] [ 54.651779][ T4424] __dump_stack+0x1d/0x30 [ 54.651807][ T4424] dump_stack_lvl+0xe8/0x140 [ 54.651880][ T4424] dump_stack+0x15/0x1b [ 54.651899][ T4424] should_fail_ex+0x265/0x280 [ 54.651969][ T4424] should_failslab+0x8c/0xb0 [ 54.651999][ T4424] __kmalloc_noprof+0xa5/0x3e0 [ 54.652033][ T4424] ? sock_kmalloc+0x85/0xc0 [ 54.652057][ T4424] ? iovec_from_user+0x5e/0x210 [ 54.652108][ T4424] sock_kmalloc+0x85/0xc0 [ 54.652129][ T4424] ____sys_sendmsg+0xf8/0x4e0 [ 54.652164][ T4424] ___sys_sendmsg+0x17b/0x1d0 [ 54.652294][ T4424] __sys_sendmmsg+0x178/0x300 [ 54.652343][ T4424] __x64_sys_sendmmsg+0x57/0x70 [ 54.652367][ T4424] x64_sys_call+0x2f2f/0x2fb0 [ 54.652394][ T4424] do_syscall_64+0xd2/0x200 [ 54.652416][ T4424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.652462][ T4424] ? clear_bhb_loop+0x40/0x90 [ 54.652482][ T4424] ? clear_bhb_loop+0x40/0x90 [ 54.652519][ T4424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.652545][ T4424] RIP: 0033:0x7f3130b0e929 [ 54.652563][ T4424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.652585][ T4424] RSP: 002b:00007f312f177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.652608][ T4424] RAX: ffffffffffffffda RBX: 00007f3130d35fa0 RCX: 00007f3130b0e929 [ 54.652620][ T4424] RDX: 0000000000000001 RSI: 0000200000004c00 RDI: 0000000000000003 [ 54.652631][ T4424] RBP: 00007f312f177090 R08: 0000000000000000 R09: 0000000000000000 [ 54.652676][ T4424] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 54.652714][ T4424] R13: 0000000000000000 R14: 00007f3130d35fa0 R15: 00007ffe30af7e58 [ 54.652738][ T4424] [ 55.054402][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 55.098423][ T4448] loop4: detected capacity change from 0 to 512 [ 55.105390][ T4448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.121116][ T4451] Restarting kernel threads ... [ 55.126272][ T4451] Done restarting kernel threads. [ 55.127258][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.174637][ T4448] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.263895][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.272792][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.281905][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.292928][ T4463] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 55.315737][ T4466] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 55.370828][ T4468] Restarting kernel threads ... [ 55.376066][ T4468] Done restarting kernel threads. [ 55.517070][ T4479] netlink: 'syz.4.346': attribute type 2 has an invalid length. [ 55.524838][ T4479] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 55.532634][ T4479] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.346'. [ 55.627455][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 55.710614][ T4484] Restarting kernel threads ... [ 55.715838][ T4484] Done restarting kernel threads. [ 55.769705][ T4490] netlink: 'syz.0.351': attribute type 2 has an invalid length. [ 55.777512][ T4490] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 55.785258][ T4490] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.351'. [ 56.066767][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 56.119502][ T4512] loop2: detected capacity change from 0 to 512 [ 56.139815][ T4513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 56.157735][ T4512] EXT4-fs: Ignoring removed i_version option [ 56.169271][ T4512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.190071][ T4512] EXT4-fs (loop2): 1 truncate cleaned up [ 56.196327][ T4512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.271031][ T4520] team0 (unregistering): Port device team_slave_0 removed [ 56.281390][ T4520] team0 (unregistering): Port device team_slave_1 removed [ 56.443126][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 56.492615][ T4526] loop3: detected capacity change from 0 to 512 [ 56.499686][ T4526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.516540][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.536608][ T4526] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.579164][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.636139][ T4530] loop3: detected capacity change from 0 to 1764 [ 56.750865][ T4538] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 56.766053][ T4540] loop4: detected capacity change from 0 to 128 [ 56.773646][ T4540] ================================================================== [ 56.781772][ T4540] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 56.790626][ T4540] [ 56.792969][ T4540] write to 0xffff88810461ff94 of 4 bytes by task 4198 on cpu 0: [ 56.800629][ T4540] fsnotify_detach_mark+0xba/0x160 [ 56.805776][ T4540] fsnotify_destroy_mark+0x70/0x150 [ 56.810991][ T4540] __se_sys_inotify_rm_watch+0xe8/0x170 [ 56.816555][ T4540] __x64_sys_inotify_rm_watch+0x31/0x40 [ 56.822117][ T4540] x64_sys_call+0x1fe9/0x2fb0 [ 56.826802][ T4540] do_syscall_64+0xd2/0x200 [ 56.831336][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.831361][ T4540] [ 56.831367][ T4540] read to 0xffff88810461ff94 of 4 bytes by task 4540 on cpu 1: [ 56.831381][ T4540] inotify_handle_inode_event+0x34e/0x3d0 [ 56.852888][ T4540] fsnotify_handle_inode_event+0x1c0/0x220 [ 56.858723][ T4540] fsnotify+0x13c9/0x14b0 [ 56.863085][ T4540] __fsnotify_parent+0x2ed/0x330 [ 56.868043][ T4540] __fput+0x1de/0x650 [ 56.872043][ T4540] fput_close_sync+0x6e/0x120 [ 56.876741][ T4540] __x64_sys_close+0x56/0xf0 [ 56.881357][ T4540] x64_sys_call+0x2747/0x2fb0 [ 56.886056][ T4540] do_syscall_64+0xd2/0x200 [ 56.890573][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.896483][ T4540] [ 56.898814][ T4540] value changed: 0x00000003 -> 0x00000000 [ 56.904536][ T4540] [ 56.906865][ T4540] Reported by Kernel Concurrency Sanitizer on: [ 56.913025][ T4540] CPU: 1 UID: 0 PID: 4540 Comm: syz.4.370 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 56.925361][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.935425][ T4540] ================================================================== [ 56.976172][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.976502][ T4540] SELinux: ebitmap: truncated map [ 56.996361][ T4540] SELinux: failed to load policy