last executing test programs: 4.623163499s ago: executing program 2 (id=421): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fedbdf250c000000400004801400078008000300000008000200b3f1ffff1300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000000"], 0x54}, 0x1, 0x0, 0x0, 0x845}, 0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0, @ANYRESOCT=r5], 0x7c}, 0x1, 0x0, 0x0, 0x8110}, 0x24000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000004008ad9f2345280f8ef76ca7ea200000000000000000085000000500000008500000055b031a73b1adfe9abf4e3420d98645efa88c167f3ffc0ce49f3ca97b8097b5b2c5488602600af2e324e3646f8be685d3c4ed5e545c4f1f60b1c1e39d983ecb187bd8c2772fabff128eb80a1a0016b74285e55420f728bddc0df34c27dd61f"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000004000), &(0x7f0000004040)=r12}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000780)='afs_cm_no_server_u\x00', r14}, 0xffffffffffffff63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r13}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) r16 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000000240)={{0x80, 0xfc}, 'port1\x00', 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000007c0)={0x8, @dev={0xac, 0x14, 0x14, 0xf6}, 0x4e22, 0x0, 'none\x00', 0x0, 0x6, 0x4b}, 0x2c) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) 4.332016494s ago: executing program 2 (id=426): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) 2.347307844s ago: executing program 1 (id=456): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.97989427s ago: executing program 0 (id=460): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200b7b333041700f8ffffffb703000008000000b70400000000000085080000030000373c7e2509000061f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x57, &(0x7f00000004c0), 0x1}, 0x804) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x40012023) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) io_uring_setup(0x2987, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000300), &(0x7f00000004c0), 0x2, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa596ef253a2f24fc}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="0700000086f892e1520c98", @ANYRES16=r11, @ANYBLOB="00012cbd7000fbdbdf257c00000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x400c001) r13 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r13, 0x40044590, 0x0) 1.879482911s ago: executing program 0 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000b100"/29], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@deltaction={0x198, 0x31, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x198}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xaa8, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 1.854778441s ago: executing program 0 (id=463): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4, @ANYBLOB="ddec3260eed90962127b714578382d5b5471a8a3887ef700804cf53a97f017baf2747820397b0cf5a7f82c032ea3db566a84751b3012dd08c53d1c58b16ffd9f178d5d163a6cf0989f45fac701b2f1d7fe72b008b1036de21d43bfd9e525bf060c7a1f710cb2e4ed61f24c5b30788417e6e508f0672b29f7c3ad89f3811f2a81397948ed0d2bac028a4d156ecc9bb9c58d6419ca2a2f0f99d542ae9cb9e74fc8390c523c093c8b422fd51c4c59220d8322fd8fa7ab320379"], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4, 0x4, 0x2, 0x80, {0x9, 0x1, '/'}, 0x1}}, 0xb) 1.532765366s ago: executing program 3 (id=467): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) lseek(r4, 0x8000, 0x3) ustat(0x4, &(0x7f0000000140)) (fail_nth: 3) r5 = inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x40, 0x2b, 0x0, 0x0, 0x0, 0xc17a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_NAME(0xf, 0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r5, r6) 1.485706847s ago: executing program 1 (id=468): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) 1.438288188s ago: executing program 3 (id=469): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x81, 0x0, 0x0, 0xffffffff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x1320, 0xffffffff, 0x3, 0x5, 0x6, 0x1088f109, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_io_uring_setup(0xb92, &(0x7f00000005c0)={0x0, 0x44b6, 0x0, 0x3, 0x2b7}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1d69, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000200000000000f1ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02db8e34", @ANYRES16=r10, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000200)={'veth1_to_batadv\x00', {0x2, 0x0, @multicast2}}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30001200000800410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.381087739s ago: executing program 1 (id=470): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x48200, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@discard}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffff7}]}}]}, 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000780)={0x2000000, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x35}, &(0x7f00000005c0)=""/227, 0xe3, &(0x7f00000006c0)=""/76, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r5}}, 0x58) ptrace$setregs(0xd, r9, 0x1, &(0x7f0000000800)="e069ca92c32660db232ee3471cd80a3cac849097fd305990cd988bd04c78") 1.340859119s ago: executing program 2 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0) close_range(r4, r4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xcf, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180), 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000640)={[&(0x7f0000000540)=')\x00', &(0x7f0000000600)='\x00']}, &(0x7f00000008c0)={[&(0x7f0000000680)='\x00', &(0x7f00000006c0)='!-\xe6+\\%+#@*-\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='@@\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='/dev/vcs\x00', &(0x7f0000000800)='GPL\x00', &(0x7f0000000840)='syzkaller\x00', &(0x7f0000000880)='+}**\x00']}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000c104bf"], 0x850001) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000d0003006c6973743a7365740000000005001aac10e85e5e0a40da838bb15d37ed11050000000000050001000700000005000400000000000900020073797a32000000000c0007800800084000000000"], 0x54}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40), 0x20081, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000a80)={0x0, 0x2, 0x7, 0xfffffffffffffffc}) 910.144866ms ago: executing program 3 (id=473): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200b7b333041700f8ffffffb703000008000000b70400000000000085080000030000373c7e2509000061f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x57, &(0x7f00000004c0), 0x1}, 0x804) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x40012023) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) io_uring_setup(0x2987, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000300), &(0x7f00000004c0), 0x2, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa596ef253a2f24fc}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="0700000086f892e1520c98", @ANYRES16=r11, @ANYBLOB="00012cbd7000fbdbdf257c00000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x400c001) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) 871.577197ms ago: executing program 0 (id=474): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 698.966409ms ago: executing program 4 (id=475): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x10804, &(0x7f00000004c0)={[{@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'msize'}}]}, 0xfc, 0x576, &(0x7f00000013c0)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x0, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x53b, 0x6d91fb6102d8910c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x4000801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 594.447071ms ago: executing program 0 (id=476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r2) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x362680e8afaaddb7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_clone3(&(0x7f0000000640)={0x1207280, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/183, 0xb7, &(0x7f00000005c0)=""/91, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000009d41f9bc2a35080a0cba6c45d99a9ed29efae2a6be63d47cd66a6394e722632e6e8548d43ec44e15b4825fb27260893fb125df4664a9652397d944653f7d5b1a0241e81837acb3bf77d23f67567ecf3dadcbf0960d152c2e5f59f791936480354172b9a307e52430a32f4ace04b1efa898061d42c616eca92c7be1b45659f385b397c0afc5aff13958351fd38e0eca3acad0bab27a4f354a37582abbda8b13681f48a8873f031de4", @ANYRES16=r6, @ANYBLOB="00022bbd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r7, @ANYBLOB], 0x38}}, 0x400c0d5) r8 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES8=r1, @ANYRES8=r6], 0x15) r11 = dup(r10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r13, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) creat(&(0x7f0000000300)='./file0\x00', 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$inet6(r8, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000000)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f", 0x25}, {&(0x7f0000001480)="1c7b53", 0x3}, {&(0x7f0000000780)="5b698a071ade955713882178ea869038023009ad69407661f1443d506da20775fa8622ea194ee0d2a4be4dfbd721ba73ac0c44279e090d94bdc3400bd40f8c82524b0b9fb9ce9db5e48fbad66981fdc5fc0881db9bb42e05eea4a855504a741b4520493e9e353d9cc276db3501c48734e303304f19811c69a46245c857", 0x7d}], 0x3}, 0x800) 589.641101ms ago: executing program 3 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x48) r5 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@llc={0x4, {@snap={0x1, 0xab, "01e7", "f277cb", 0x8906}}}}}, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, &(0x7f0000000500)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x1, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 488.112022ms ago: executing program 0 (id=478): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 487.064722ms ago: executing program 4 (id=479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000e80)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '@', 0x3a, '', 0x3a, './bus', 0x3a, [0x46]}, 0x27) 477.507842ms ago: executing program 3 (id=480): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) 476.909082ms ago: executing program 1 (id=481): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3}, 0x18) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 410.198093ms ago: executing program 2 (id=482): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000b100"/29], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@deltaction={0x198, 0x31, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x198}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xaa8, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 409.591753ms ago: executing program 2 (id=483): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x81, 0x0, 0x0, 0xffffffff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x1320, 0xffffffff, 0x3, 0x5, 0x6, 0x1088f109, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_io_uring_setup(0xb92, &(0x7f00000005c0)={0x0, 0x44b6, 0x0, 0x3, 0x2b7}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1d69, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000200000000000f1ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02db8e34", @ANYRES16=r10, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000200)={'veth1_to_batadv\x00', {0x2, 0x0, @multicast2}}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30001200000800410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 390.313884ms ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) shutdown(r2, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r5, 0x1, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x401, r4, 0x0}]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000002f40)=""/4090, 0xffa}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8) setrlimit(0x6, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r11 = getpid() sched_rr_get_interval(r11, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x20, r10, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}}, 0x20}}, 0x0) 389.969324ms ago: executing program 4 (id=485): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x2c14042, &(0x7f0000000300)=ANY=[], 0x0, 0x738, &(0x7f0000001180)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000028000100280000000200000000000000000000010500000010000000000000210100008500000000000000000100000000000011000088c3cd84d8096d0fd82b70731b46ed688f0aa2986296d8409e1beb1fcca8f6db8cde25daabe97622fe1d02490caa519580e9c0c83a55c30b88a60930768b9813356d3a7001f01624037a6c1b6e4b862e4afb697f736ba7cda1471a6552b7a45bd5756d815388a7f9b195e36ab1ef8baf182e01aaba1ec52051141054"], 0x0, 0x42}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000d6, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r6, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180abf4c0000000000000000020000000900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 387.524924ms ago: executing program 1 (id=486): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000780)={0x2000000, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000500), {0x35}, &(0x7f00000005c0)=""/227, 0xe3, &(0x7f00000006c0)=""/76, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) 291.505696ms ago: executing program 4 (id=487): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200b7b333041700f8ffffffb703000008000000b70400000000000085080000030000373c7e2509000061f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x57, &(0x7f00000004c0), 0x1}, 0x804) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x40012023) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) io_uring_setup(0x2987, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000300), &(0x7f00000004c0), 0x2, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa596ef253a2f24fc}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="0700000086f892e1520c98", @ANYRES16=r11, @ANYBLOB="00012cbd7000fbdbdf257c00000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x400c001) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) 251.131386ms ago: executing program 3 (id=488): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x10804, &(0x7f00000004c0)={[{@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'msize'}}]}, 0xfc, 0x576, &(0x7f00000013c0)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x0, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x53b, 0x6d91fb6102d8910c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x4000801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 117.915968ms ago: executing program 4 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r4, 0x5, 0x9, &(0x7f0000000180)="f3b2362d6ec323d3bc174f4e997453dfc494fd1045e2a12fa69bc2e3522e0d610a5722a11d921e9f9673a8a21195b52e02d497c3c3320ee90b6f910c142e71cadcffa6946718a155fff96a23aaad777a3684a30c171a6c00649876f80dfad0ed2a368322feb0d1fdb8ab68b86873ea6b64ad5a581a40f3815f0df1d70ac2", 0x7e) sendfile(r4, r3, 0x0, 0x7ffff088) readlinkat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/126, 0x7e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 634.33µs ago: executing program 1 (id=490): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x2c14042, &(0x7f0000000300)=ANY=[], 0x0, 0x738, &(0x7f0000001180)="$eJzs3V1vG1kZB/D/sR3bSSEbAapWVbc5TVkpFcUdO9tUUUBiGB87A7bHmplAIiGtCk1WVZ0utEWivmlzw4u0fAC42xsuuOAjrMQFV/st4AqkFQgJsQKhQXNmxq8zTrxJt9vt/1ftejznmXPOnHHn6STjMyAiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIIq24YVYGW3dndk9msuuu0kzd5TJVHtS3gerRwfVabC2G7gAj/Q7mM16PVr39lGHIx/N8aLkfvLqMcvpTRv3BxZfvLhVyy/YwOfxKYt8JHT/r37/R6Bw9PEZuHrl5g7lZeCOROEdRUHdtz7LbZVNL2HLm1uWnc3Gl4smG3lLfv+aotLVflfMeV69Z1Wd3a2pCqsu/sdpp1s6WSlbe/XjOMTfmdUnSgAVQ8a8dutexOU8eExWHMbfneD6IAZbalPLzXO9gY6c/TtMENg6opnc+NBodBtZN2t2bUatVqrVbdvLV167ZhFKZWGCFhDGAq4tw/tPSSOd8TONEZ5Kz6f40/C6CFMjrYxR5k6h8Ldbhw0M4ojyX5/82bama7o/k/yfILw+JL0Pn/SvTuSpgWCin5P6MvElLnkbQSkbF+vj8LOlFJPMIT9HEfd9BDDwd4eA51S8jVM9dQNOKRPHtvMKOmJhQ6sOHBgY02TDTxRch4jcQWNrEJA29jBw14kGjARgsKHvbhwYcKP1HFsH4FEz4cuJBYh4XrkKhiC1t4DRIKFezDwS46aKIOE/8OguAQ9/S4b8T9eZbSVyRB1YwdLKGQ7OMBajNGIiv///BptHWc/w3m/1dV9DkoRS8fzooh+gwI4uv/Oa0+n94QERERERER0fMg9E/fhf6t/BsAAjTsljJGyjP9IffpdJGIiIiIiIiIzkggKOFyeJmv7757A2L8+p+IiIiIiIiIXn5Cf8dOAFjSN/WL4delTvNDgPyn0EUiIiIiIiIiOiN9f/+VIhDoSStWIea6/iciIiIiIiKil8AvR+bYL+TjOfaD5Nf6OQCrfymJD/5egrsgjrt7XxVHZlhiHsUxU3cA+I1LYjmeqFe/FAHod5ZaTFqTwL9GZxf46DB9rv9nQUQI4U50oJjPmJ5gtAMibHmzEL/De7gabXI1nmf+bj8HXRLNKLzUsFuqYjmt7SpMcznnqz3/pw/u/QxwB/t5eK93UPnRu727ui/H4arjo7DSp2PdyaUPxrAvj/V8C/o7F2lPN1hEI2nyV532ktDtGsn+52Ee5UYbyjwAv1nZ3lwEor38OdaiY7YWRLFL/cGM+wJY1ZM/VCv6kI3tvbsghr2oTu552oHI2POy7sW1KOba+rXoJRmTsJ6cKH8tD9Qq08dgrBe10V6cPBbiHxPjP7sXEOVwLDbCXvwxrGiiF9//INp4o7sXz/Y6uxfBa9Hi5KeAiOhFORxmIT2J+dQc+0l6SE5qp807F1dQAOKzXEZ2H7YSxPkjye6PfxtEGSoPFOLfTaS3kuQVhGf0daHrKUYTuhcupZzRjcrHQRCYy2WMntH/FwTJDhlzZLfjIAgmz+i/Hz4DKe72VC/+EwTBdlVnkl9PZNX3ww3ez2zXa9XyKKOEx0c/1hPgh945eOfgQa22sWm8ZRi3aljQ/1SIX/LI/BcIERG9usafsZP2jD0dkZsRId7C1aiOq3f/9ma0NJbxvhTfUqDdBHp6qoH4EQKr47XGT1LBEg7xzX9GtyHciK5agbWluLAvL65sh1e10VV7WL8o6Ce83Mi8qtO5NIrVtzfUBrHJc4cmrwCHsRvP7wAQERG9AGsZeRgYy/8Yz//lsfx/A+tRxPql1OvupZFbCm8kV8eDS/r+hePU2OrJnf/WOQ8GERHRK0K5H4kl/xfCde3u29Wtrarp7yjpOtZ3pWvXm0raHV+51o7ZaSrZdR3fsZyW7Loo2YvKk95ut+u4vmw4ruw6nr2nn/wu40e/e6ptdnzb8rotZXpKWk7HNy1f1m3Pkt3db7dsb0e5emOvqyy7YVumbzsd6Tm7rqUqUnpKjQTaddXx7YYdLnZk17Xbprsvv+e0dttK1pVnuXbXd6IKk7bsTsNx27raCoK5H3RIRET0efToSf/+nV7v4OHkwmJ4aR6tOcZIUTkteLBQTKkwDwScJ4iIiOgzZJiu59io/Bw7REREREREREREREREREREREREREREREREUzK/yfdJFxaQUgQM1vxkOV6DZxh+xXCqHoF5Wy9jfM3H7p/0xH5pwUUAsyrMPXpSXgZO33rylYj+/Q9nBC8O1iTDPxpzPM84YwWYHfNudtFfvwBc0GsQrSmc4wdg+vuj51Jh+YSYbxxGI5oVowtTi0qDY1E4/78O4cKD300XiXDkgyAIZm9eGh/D4owdnFgoAHhYnHEIFk/4/Jx05pia/5uIXjL/DwAA//9dpzbb") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000028000100280000000200000000000000000000010500000010000000000000210100008500000000000000000100000000000011000088c3cd84d8096d0fd82b70731b46ed688f0aa2986296d8409e1beb1fcca8f6db8cde25daabe97622fe1d02490caa519580e9c0c83a55c30b88a60930768b9813356d3a7001f01624037a6c1b6e4b862e4afb697f736ba7cda1471a6552b7a45bd5756d815388a7f9b195e36ab1ef8baf182e01aaba1ec52051141054"], 0x0, 0x42}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000d6, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180abf4c0000000000000000020000000900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 4 (id=491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x29}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) utime(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x77359400}, 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x627, 0xc1040000, 0x20, 0x0, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1804}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xd59, 0x5, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 27.359001][ T29] audit: type=1400 audit(1751899252.870:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.360137][ T3291] cgroup: Unknown subsys name 'net' [ 27.381749][ T29] audit: type=1400 audit(1751899252.870:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.409245][ T29] audit: type=1400 audit(1751899252.910:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.543367][ T3291] cgroup: Unknown subsys name 'cpuset' [ 27.549629][ T3291] cgroup: Unknown subsys name 'rlimit' [ 27.700496][ T29] audit: type=1400 audit(1751899253.210:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.724000][ T29] audit: type=1400 audit(1751899253.210:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.744737][ T29] audit: type=1400 audit(1751899253.210:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.765185][ T29] audit: type=1400 audit(1751899253.210:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.774150][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.785491][ T29] audit: type=1400 audit(1751899253.220:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.818984][ T29] audit: type=1400 audit(1751899253.220:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.842313][ T29] audit: type=1400 audit(1751899253.310:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.877329][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.171056][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.225779][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.259993][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.284464][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.291713][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.298977][ T3313] bridge_slave_0: entered allmulticast mode [ 29.305654][ T3313] bridge_slave_0: entered promiscuous mode [ 29.329934][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.337076][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.344336][ T3313] bridge_slave_1: entered allmulticast mode [ 29.350771][ T3313] bridge_slave_1: entered promiscuous mode [ 29.362321][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.414117][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.427503][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.439323][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.446419][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.453603][ T3304] bridge_slave_0: entered allmulticast mode [ 29.460019][ T3304] bridge_slave_0: entered promiscuous mode [ 29.466524][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.498599][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.505759][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.512914][ T3304] bridge_slave_1: entered allmulticast mode [ 29.519441][ T3304] bridge_slave_1: entered promiscuous mode [ 29.529317][ T3313] team0: Port device team_slave_0 added [ 29.542762][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.549881][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.557329][ T3305] bridge_slave_0: entered allmulticast mode [ 29.563920][ T3305] bridge_slave_0: entered promiscuous mode [ 29.578212][ T3313] team0: Port device team_slave_1 added [ 29.591484][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.598742][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.606017][ T3305] bridge_slave_1: entered allmulticast mode [ 29.612422][ T3305] bridge_slave_1: entered promiscuous mode [ 29.641440][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.662939][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.670072][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.677409][ T3312] bridge_slave_0: entered allmulticast mode [ 29.684032][ T3312] bridge_slave_0: entered promiscuous mode [ 29.696882][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.707533][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.717052][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.724052][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.750078][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.763364][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.770474][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.777763][ T3312] bridge_slave_1: entered allmulticast mode [ 29.784341][ T3312] bridge_slave_1: entered promiscuous mode [ 29.796998][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.811462][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.818473][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.844509][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.878330][ T3305] team0: Port device team_slave_0 added [ 29.889580][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.896769][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.904029][ T3308] bridge_slave_0: entered allmulticast mode [ 29.910357][ T3308] bridge_slave_0: entered promiscuous mode [ 29.923168][ T3304] team0: Port device team_slave_0 added [ 29.930451][ T3305] team0: Port device team_slave_1 added [ 29.936487][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.943684][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.950811][ T3308] bridge_slave_1: entered allmulticast mode [ 29.957358][ T3308] bridge_slave_1: entered promiscuous mode [ 29.969871][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.979668][ T3304] team0: Port device team_slave_1 added [ 29.996973][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.007332][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.036546][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.062972][ T3313] hsr_slave_0: entered promiscuous mode [ 30.069105][ T3313] hsr_slave_1: entered promiscuous mode [ 30.075598][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.082690][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.108813][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.124992][ T3312] team0: Port device team_slave_0 added [ 30.136110][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.143213][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.169627][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.180938][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.188024][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.214079][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.225215][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.232209][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.258263][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.269813][ T3312] team0: Port device team_slave_1 added [ 30.281299][ T3308] team0: Port device team_slave_0 added [ 30.287881][ T3308] team0: Port device team_slave_1 added [ 30.340711][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.347780][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.373900][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.385590][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.392688][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.418722][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.431946][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.439006][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.465059][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.480854][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.487853][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.513850][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.540495][ T3304] hsr_slave_0: entered promiscuous mode [ 30.546688][ T3304] hsr_slave_1: entered promiscuous mode [ 30.552771][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.560346][ T3304] Cannot create hsr debugfs directory [ 30.567969][ T3305] hsr_slave_0: entered promiscuous mode [ 30.573914][ T3305] hsr_slave_1: entered promiscuous mode [ 30.579697][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.587301][ T3305] Cannot create hsr debugfs directory [ 30.634814][ T3308] hsr_slave_0: entered promiscuous mode [ 30.640978][ T3308] hsr_slave_1: entered promiscuous mode [ 30.647013][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.654671][ T3308] Cannot create hsr debugfs directory [ 30.681594][ T3312] hsr_slave_0: entered promiscuous mode [ 30.687791][ T3312] hsr_slave_1: entered promiscuous mode [ 30.693688][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.701293][ T3312] Cannot create hsr debugfs directory [ 30.833520][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.862125][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.878453][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.887383][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.917777][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.928672][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.937752][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.946581][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.992952][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.007103][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.017902][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.031368][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.040652][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.049740][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.065853][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.087561][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.097732][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.112785][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.121621][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.137978][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.151438][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.177903][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.192348][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.199615][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.224127][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.233485][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.240718][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.258935][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.274785][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.281968][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.301340][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.308546][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.338123][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.348628][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.384126][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.397295][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.417105][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.434610][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.441716][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.463847][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.473336][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.480446][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.498855][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.515943][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.523190][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.535439][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.542556][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.555345][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.566229][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.581053][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.588183][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.601722][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.610866][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.617974][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.674452][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.684972][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.711321][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.749290][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.846243][ T3313] veth0_vlan: entered promiscuous mode [ 31.857839][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.871779][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.884897][ T3313] veth1_vlan: entered promiscuous mode [ 31.915981][ T3304] veth0_vlan: entered promiscuous mode [ 31.943328][ T3313] veth0_macvtap: entered promiscuous mode [ 31.959777][ T3304] veth1_vlan: entered promiscuous mode [ 31.984117][ T3313] veth1_macvtap: entered promiscuous mode [ 31.994835][ T3305] veth0_vlan: entered promiscuous mode [ 32.008296][ T3304] veth0_macvtap: entered promiscuous mode [ 32.023127][ T3305] veth1_vlan: entered promiscuous mode [ 32.034485][ T3304] veth1_macvtap: entered promiscuous mode [ 32.048464][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.064610][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.074682][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.083533][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.092728][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101471][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121305][ T3305] veth0_macvtap: entered promiscuous mode [ 32.130033][ T3305] veth1_macvtap: entered promiscuous mode [ 32.137253][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.156196][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.166840][ T3308] veth0_vlan: entered promiscuous mode [ 32.173754][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.182647][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191426][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.200207][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.210055][ T3312] veth0_vlan: entered promiscuous mode [ 32.224524][ T3312] veth1_vlan: entered promiscuous mode [ 32.246945][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.256586][ T3308] veth1_vlan: entered promiscuous mode [ 32.264728][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.291018][ T3312] veth0_macvtap: entered promiscuous mode [ 32.306582][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.323912][ T3312] veth1_macvtap: entered promiscuous mode [ 32.337480][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.347037][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.356018][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.364871][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.373720][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.382588][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 32.382631][ T29] audit: type=1400 audit(1751899257.890:93): avc: denied { prog_load } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.389260][ T3308] veth0_macvtap: entered promiscuous mode [ 32.407515][ T29] audit: type=1400 audit(1751899257.890:94): avc: denied { bpf } for pid=3473 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.423403][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.433302][ T29] audit: type=1400 audit(1751899257.890:95): avc: denied { perfmon } for pid=3473 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.444009][ T3308] veth1_macvtap: entered promiscuous mode [ 32.460952][ T29] audit: type=1400 audit(1751899257.890:96): avc: denied { open } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.478685][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.485547][ T29] audit: type=1400 audit(1751899257.890:97): avc: denied { kernel } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.498969][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.530303][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.534825][ T29] audit: type=1400 audit(1751899258.010:98): avc: denied { create } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.539240][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.558101][ T29] audit: type=1400 audit(1751899258.010:99): avc: denied { write } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.566884][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.585802][ T29] audit: type=1400 audit(1751899258.010:100): avc: denied { read } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.585832][ T29] audit: type=1400 audit(1751899258.040:101): avc: denied { map_create } for pid=3473 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.594433][ C1] hrtimer: interrupt took 42551 ns [ 32.594684][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.665306][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.674197][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.682971][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691787][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.708069][ T3482] loop1: detected capacity change from 0 to 128 [ 32.710377][ T29] audit: type=1400 audit(1751899258.160:102): avc: denied { prog_run } for pid=3477 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.878873][ T3497] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure [ 32.909587][ T3500] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.937984][ T3500] netlink: zone id is out of range [ 32.971741][ T3500] netlink: zone id is out of range [ 32.979706][ T3500] netlink: zone id is out of range [ 32.985670][ T3500] netlink: zone id is out of range [ 32.999995][ T3500] netlink: zone id is out of range [ 33.005403][ T3500] netlink: zone id is out of range [ 33.010612][ T3500] netlink: zone id is out of range [ 33.015950][ T3500] netlink: del zone limit has 8 unknown bytes [ 33.110683][ T3512] loop3: detected capacity change from 0 to 512 [ 33.134710][ T3512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.147854][ T3512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.158616][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.158616][ T12] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 33.185417][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.185417][ T12] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 33.200884][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.200884][ T12] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 33.214988][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.214988][ T12] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 33.230768][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.230768][ T12] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 33.245773][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.245773][ T12] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 33.261619][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.261619][ T12] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 33.286335][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.286335][ T12] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 33.291685][ T3512] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.301976][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.301976][ T12] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 33.314799][ T3512] EXT4-fs (loop3): 1 truncate cleaned up [ 33.333930][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.334051][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 33.369175][ T3529] loop2: detected capacity change from 0 to 512 [ 33.376834][ T12] kworker/u8:0: attempt to access beyond end of device [ 33.376834][ T12] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 33.444683][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.457372][ T3529] EXT4-fs (loop2): 1 orphan inode deleted [ 33.472768][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 33.486261][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.517973][ T3529] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.537973][ T3544] loop0: detected capacity change from 0 to 512 [ 33.551208][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.564552][ T3544] EXT4-fs (loop0): 1 orphan inode deleted [ 33.570787][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.584176][ T2248] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 33.604474][ T3544] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.633519][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.105133][ T3571] loop0: detected capacity change from 0 to 128 [ 34.237936][ T3578] loop4: detected capacity change from 0 to 512 [ 34.321478][ T3578] EXT4-fs (loop4): 1 orphan inode deleted [ 34.343018][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.355551][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 34.373857][ T3578] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.421125][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.457061][ T3574] loop3: detected capacity change from 0 to 1024 [ 34.475497][ T3574] EXT4-fs: Ignoring removed orlov option [ 34.506029][ T3589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.527035][ T3574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.655580][ T3591] loop0: detected capacity change from 0 to 128 [ 34.669755][ T3594] loop4: detected capacity change from 0 to 512 [ 34.951002][ T3594] EXT4-fs (loop4): 1 orphan inode deleted [ 34.971497][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.985576][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 35.104281][ T3594] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.183524][ T3603] lo speed is unknown, defaulting to 1000 [ 35.189606][ T3603] lo speed is unknown, defaulting to 1000 [ 35.195747][ T3603] lo speed is unknown, defaulting to 1000 [ 35.202240][ T3603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.202709][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.210895][ T3603] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.246005][ T3603] lo speed is unknown, defaulting to 1000 [ 35.262875][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.291191][ T3603] lo speed is unknown, defaulting to 1000 [ 35.302949][ T3603] lo speed is unknown, defaulting to 1000 [ 35.309430][ T3603] lo speed is unknown, defaulting to 1000 [ 35.315823][ T3603] lo speed is unknown, defaulting to 1000 [ 35.341094][ T3603] syz.2.38 (3603) used greatest stack depth: 10712 bytes left [ 35.474565][ T3623] loop3: detected capacity change from 0 to 512 [ 35.497191][ T3623] EXT4-fs (loop3): 1 orphan inode deleted [ 35.512149][ T3623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.526276][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 35.577138][ T3623] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.622779][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.640697][ T3633] loop2: detected capacity change from 0 to 128 [ 35.649570][ T3629] lo speed is unknown, defaulting to 1000 [ 35.671883][ T3629] lo speed is unknown, defaulting to 1000 [ 35.691979][ T3629] lo speed is unknown, defaulting to 1000 [ 35.706577][ T3629] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.739634][ T3640] lo speed is unknown, defaulting to 1000 [ 35.755566][ T3639] loop1: detected capacity change from 0 to 1764 [ 35.769608][ T3640] lo speed is unknown, defaulting to 1000 [ 35.886727][ T3629] lo speed is unknown, defaulting to 1000 [ 35.948210][ T3654] usb usb8: usbfs: process 3654 (syz.2.53) did not claim interface 0 before use [ 35.952705][ T3629] lo speed is unknown, defaulting to 1000 [ 35.977900][ T3629] lo speed is unknown, defaulting to 1000 [ 35.996312][ T3629] lo speed is unknown, defaulting to 1000 [ 36.008451][ T3629] lo speed is unknown, defaulting to 1000 [ 36.040643][ T3629] syz.0.57 (3629) used greatest stack depth: 10248 bytes left [ 36.060133][ T3648] loop4: detected capacity change from 0 to 1024 [ 36.147512][ T3648] EXT4-fs: Ignoring removed orlov option [ 36.211936][ T3648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.409473][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.644013][ T3675] netlink: 332 bytes leftover after parsing attributes in process `syz.0.60'. [ 36.685550][ T3674] loop4: detected capacity change from 0 to 1024 [ 36.710008][ T3674] EXT4-fs: Ignoring removed orlov option [ 36.749425][ T3674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.119745][ T3692] siw: device registration error -23 [ 37.209155][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.418597][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 37.418615][ T29] audit: type=1326 audit(1751899262.930:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.483137][ T29] audit: type=1326 audit(1751899262.930:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.506455][ T29] audit: type=1326 audit(1751899262.930:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.529941][ T29] audit: type=1326 audit(1751899262.930:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.553205][ T29] audit: type=1326 audit(1751899262.930:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.576567][ T29] audit: type=1326 audit(1751899262.930:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.599804][ T29] audit: type=1326 audit(1751899262.930:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.623472][ T29] audit: type=1326 audit(1751899262.930:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.646706][ T29] audit: type=1326 audit(1751899262.930:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.670106][ T29] audit: type=1326 audit(1751899262.930:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 37.700522][ T3709] loop4: detected capacity change from 0 to 1024 [ 37.709643][ T3709] EXT4-fs: Ignoring removed orlov option [ 37.777767][ T3709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.800109][ T3708] siw: device registration error -23 [ 37.829047][ T3718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.77'. [ 37.881900][ T3722] loop1: detected capacity change from 0 to 512 [ 37.922949][ T3722] ======================================================= [ 37.922949][ T3722] WARNING: The mand mount option has been deprecated and [ 37.922949][ T3722] and is ignored by this kernel. Remove the mand [ 37.922949][ T3722] option from the mount to silence this warning. [ 37.922949][ T3722] ======================================================= [ 38.013011][ T3713] loop3: detected capacity change from 0 to 1024 [ 38.176779][ T3713] EXT4-fs: Ignoring removed orlov option [ 38.192255][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.249415][ T3724] loop2: detected capacity change from 0 to 1024 [ 38.301099][ T3713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.383500][ T3724] EXT4-fs: Ignoring removed orlov option [ 38.429840][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.491395][ T3724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.520985][ T3747] siw: device registration error -23 [ 38.925166][ T3733] Set syz1 is full, maxelem 65536 reached [ 38.946731][ T3754] siw: device registration error -23 [ 39.172943][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.273054][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 39.319730][ T3778] loop3: detected capacity change from 0 to 512 [ 39.327745][ T3778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.345395][ T3778] EXT4-fs (loop3): 1 truncate cleaned up [ 39.367109][ T3778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.450738][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.474633][ T3788] loop3: detected capacity change from 0 to 512 [ 39.496115][ T3788] EXT4-fs (loop3): 1 orphan inode deleted [ 39.513277][ T360] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 39.514262][ T3788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.537513][ T3788] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.569840][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.680319][ T3799] loop3: detected capacity change from 0 to 512 [ 39.688560][ T3799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.700474][ T3799] EXT4-fs (loop3): 1 truncate cleaned up [ 39.706781][ T3799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.914303][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.237697][ T3820] netlink: 'syz.1.110': attribute type 27 has an invalid length. [ 40.311268][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.318624][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.505651][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.515911][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.560710][ T3820] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.570163][ T3820] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.579327][ T3820] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.581660][ T3838] loop4: detected capacity change from 0 to 512 [ 40.588387][ T3820] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.607696][ T3825] loop3: detected capacity change from 0 to 1024 [ 40.678822][ T3824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.694686][ T3838] EXT4-fs (loop4): 1 orphan inode deleted [ 40.713164][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 40.725354][ T2248] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 40.736232][ T3824] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.745984][ T3825] EXT4-fs: Ignoring removed orlov option [ 40.754626][ T3838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.773375][ T3824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.800872][ T3838] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.846157][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.852068][ T3850] loop1: detected capacity change from 0 to 512 [ 40.860282][ T3825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.877015][ T3850] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.917790][ T3850] EXT4-fs (loop1): 1 truncate cleaned up [ 40.931544][ T3850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.061047][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.071418][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.118969][ T3870] syz.3.120 uses obsolete (PF_INET,SOCK_PACKET) [ 41.181027][ T3875] lo speed is unknown, defaulting to 1000 [ 41.187237][ T3875] lo speed is unknown, defaulting to 1000 [ 41.210873][ T3876] siw: device registration error -23 [ 41.533686][ T3886] mmap: syz.4.127 (3886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.555330][ T3884] siw: device registration error -23 [ 41.847668][ T3899] loop1: detected capacity change from 0 to 1024 [ 41.856607][ T3910] FAULT_INJECTION: forcing a failure. [ 41.856607][ T3910] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.869735][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.2.134 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 41.869761][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.869777][ T3910] Call Trace: [ 41.869786][ T3910] [ 41.869795][ T3910] __dump_stack+0x1d/0x30 [ 41.869872][ T3910] dump_stack_lvl+0xe8/0x140 [ 41.869891][ T3910] dump_stack+0x15/0x1b [ 41.869908][ T3910] should_fail_ex+0x265/0x280 [ 41.869985][ T3910] should_fail+0xb/0x20 [ 41.870015][ T3910] should_fail_usercopy+0x1a/0x20 [ 41.870054][ T3910] _copy_to_user+0x20/0xa0 [ 41.870112][ T3910] simple_read_from_buffer+0xb5/0x130 [ 41.870148][ T3910] proc_fail_nth_read+0x100/0x140 [ 41.870263][ T3910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.870307][ T3910] vfs_read+0x19d/0x6f0 [ 41.870341][ T3910] ? __rcu_read_unlock+0x4f/0x70 [ 41.870377][ T3910] ? __fget_files+0x184/0x1c0 [ 41.870414][ T3910] ? up_write+0x18/0x60 [ 41.870449][ T3910] ksys_read+0xda/0x1a0 [ 41.870489][ T3910] __x64_sys_read+0x40/0x50 [ 41.870523][ T3910] x64_sys_call+0x2d77/0x2fb0 [ 41.870547][ T3910] do_syscall_64+0xd2/0x200 [ 41.870582][ T3910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.870609][ T3910] ? clear_bhb_loop+0x40/0x90 [ 41.870632][ T3910] ? clear_bhb_loop+0x40/0x90 [ 41.870662][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.870716][ T3910] RIP: 0033:0x7efc3a19d33c [ 41.870736][ T3910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.870753][ T3910] RSP: 002b:00007efc387e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.870779][ T3910] RAX: ffffffffffffffda RBX: 00007efc3a3c6080 RCX: 00007efc3a19d33c [ 41.870795][ T3910] RDX: 000000000000000f RSI: 00007efc387e60a0 RDI: 0000000000000005 [ 41.870810][ T3910] RBP: 00007efc387e6090 R08: 0000000000000000 R09: 000000009a974000 [ 41.870828][ T3910] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 41.870843][ T3910] R13: 0000000000000000 R14: 00007efc3a3c6080 R15: 00007ffea14b42a8 [ 41.870867][ T3910] [ 42.089876][ T3899] EXT4-fs: Ignoring removed orlov option [ 42.217085][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 42.223393][ T3899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.473788][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 42.473805][ T29] audit: type=1326 audit(1751899267.990:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 42.514868][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.868167][ T29] audit: type=1400 audit(1751899268.380:1391): avc: denied { ioctl } for pid=3929 comm="syz.4.139" path="socket:[5552]" dev="sockfs" ino=5552 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.878577][ T3931] netlink: 'syz.4.139': attribute type 9 has an invalid length. [ 42.896180][ T29] audit: type=1400 audit(1751899268.380:1392): avc: denied { create } for pid=3929 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.901458][ T3931] netlink: 'syz.4.139': attribute type 6 has an invalid length. [ 42.928524][ T3931] netlink: 'syz.4.139': attribute type 7 has an invalid length. [ 42.936265][ T3931] netlink: 'syz.4.139': attribute type 8 has an invalid length. [ 42.937138][ T29] audit: type=1400 audit(1751899268.450:1393): avc: denied { write } for pid=3929 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.970873][ T29] audit: type=1326 audit(1751899268.480:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efc3a1a06f4 code=0x7ffc0000 [ 42.994889][ T29] audit: type=1326 audit(1751899268.480:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efc3a1a06f4 code=0x7ffc0000 [ 43.019059][ T29] audit: type=1326 audit(1751899268.480:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc3a19d58a code=0x7ffc0000 [ 43.043018][ T29] audit: type=1326 audit(1751899268.480:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 43.067134][ T29] audit: type=1326 audit(1751899268.480:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 43.161466][ T3953] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 43.186967][ T29] audit: type=1400 audit(1751899268.690:1399): avc: denied { mount } for pid=3950 comm="syz.1.142" name="/" dev="configfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.609168][ T3975] loop2: detected capacity change from 0 to 1024 [ 43.625408][ T3975] EXT4-fs: Ignoring removed orlov option [ 43.757578][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.080687][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.117506][ T3991] random: crng reseeded on system resumption [ 44.158555][ T4000] loop4: detected capacity change from 0 to 1024 [ 44.175931][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.193912][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 44.243302][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.502791][ T4038] loop4: detected capacity change from 0 to 512 [ 44.509813][ T4038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.519647][ T4038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.545732][ T4038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.558708][ T4038] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.570219][ T4038] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 44.580343][ T4038] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 44.598912][ T4044] loop1: detected capacity change from 0 to 1024 [ 44.619845][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.630491][ T4044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.246685][ T4053] lo speed is unknown, defaulting to 1000 [ 45.292152][ T4053] lo speed is unknown, defaulting to 1000 [ 45.333952][ T4061] loop3: detected capacity change from 0 to 512 [ 45.353048][ T4061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.384660][ T4061] EXT4-fs (loop3): 1 truncate cleaned up [ 45.390806][ T4061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.403838][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.433889][ T4065] loop1: detected capacity change from 0 to 2048 [ 45.475826][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.555645][ T4070] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 45.566802][ T4069] loop1: detected capacity change from 0 to 1024 [ 45.579422][ T4069] EXT4-fs: Ignoring removed orlov option [ 45.587086][ T4069] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #4: comm syz.1.174: iget: bad extended attribute block 4 [ 45.600588][ T4069] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.174: Bad quota inode: 4, type: 1 [ 45.611746][ T4069] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.626579][ T4069] EXT4-fs (loop1): mount failed [ 45.689450][ T4080] SELinux: syz.1.177 (4080) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.774765][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 45.791234][ T4092] siw: device registration error -23 [ 45.956327][ T4103] loop1: detected capacity change from 0 to 512 [ 45.964157][ T4103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.976818][ T4103] EXT4-fs (loop1): 1 truncate cleaned up [ 45.983562][ T4103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.064208][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.192613][ T4112] loop1: detected capacity change from 0 to 8192 [ 46.496791][ T4120] loop1: detected capacity change from 0 to 128 [ 46.559678][ T4120] Zero length message leads to an empty skb [ 46.779022][ T4128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 46.838961][ T4136] loop4: detected capacity change from 0 to 512 [ 46.849705][ T4136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.885591][ T4136] EXT4-fs (loop4): 1 truncate cleaned up [ 46.891709][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.920790][ T4140] loop1: detected capacity change from 0 to 1024 [ 46.923736][ T4142] loop0: detected capacity change from 0 to 512 [ 46.936654][ T4142] EXT4-fs: Ignoring removed orlov option [ 46.944154][ T4142] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.956921][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.969138][ T4142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 46.979537][ T4142] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.198: corrupted in-inode xattr: e_value size too large [ 46.994536][ T4142] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.198: couldn't read orphan inode 15 (err -117) [ 46.995996][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.009706][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.030683][ T4140] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 47.063485][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.080478][ T4140] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.105327][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.211676][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 47.294560][ T4163] loop0: detected capacity change from 0 to 128 [ 47.314125][ T4163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4163 comm=+}[@ [ 47.326267][ T4163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4163 comm=+}[@ [ 47.541387][ T4177] loop3: detected capacity change from 0 to 512 [ 47.548391][ T4177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.584809][ T4177] EXT4-fs (loop3): 1 truncate cleaned up [ 47.591701][ T4177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.704549][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.954398][ T4183] loop3: detected capacity change from 0 to 512 [ 47.978171][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.994181][ T4183] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.005129][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 48.005141][ T29] audit: type=1400 audit(1751899273.520:1909): avc: denied { append } for pid=4181 comm="syz.3.210" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.035306][ T4182] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 48.048621][ T4190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4190 comm=syz.4.212 [ 48.062624][ T4190] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 48.071253][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.095648][ T4194] loop3: detected capacity change from 0 to 512 [ 48.096629][ T4190] bond1: (slave bridge1): making interface the new active one [ 48.110248][ T4194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.115106][ T4190] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 48.135351][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.162418][ T29] audit: type=1326 audit(1751899273.670:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.173169][ T4194] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.185903][ T29] audit: type=1326 audit(1751899273.670:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.185943][ T29] audit: type=1326 audit(1751899273.670:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.185974][ T29] audit: type=1326 audit(1751899273.670:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.186020][ T29] audit: type=1326 audit(1751899273.670:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.186052][ T29] audit: type=1326 audit(1751899273.670:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.186086][ T29] audit: type=1326 audit(1751899273.670:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.186118][ T29] audit: type=1326 audit(1751899273.670:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.186196][ T29] audit: type=1326 audit(1751899273.670:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 48.514464][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.579333][ T4214] loop0: detected capacity change from 0 to 512 [ 48.676316][ T4214] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.687667][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 48.885123][ T4214] EXT4-fs (loop0): 1 truncate cleaned up [ 48.918247][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.092605][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.269146][ T4241] loop1: detected capacity change from 0 to 1024 [ 49.310358][ T4241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.324636][ T4241] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.350921][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.714355][ T4258] loop1: detected capacity change from 0 to 512 [ 49.743655][ T4258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.835910][ T4258] EXT4-fs (loop1): 1 truncate cleaned up [ 49.853081][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.885660][ T4255] loop3: detected capacity change from 0 to 1024 [ 49.915217][ T4255] EXT4-fs: Ignoring removed orlov option [ 49.989312][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.990176][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.057287][ T4268] loop1: detected capacity change from 0 to 512 [ 50.169050][ T4268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.214380][ T4268] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.239: invalid indirect mapped block 4294967295 (level 1) [ 50.216214][ T4271] siw: device registration error -23 [ 50.373955][ T4268] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.239: invalid indirect mapped block 4294967295 (level 1) [ 50.406451][ T4268] EXT4-fs (loop1): 2 truncates cleaned up [ 50.434365][ T4268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.596816][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.674254][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.876232][ T3555] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 51.134659][ T4294] loop1: detected capacity change from 0 to 512 [ 51.150459][ T4294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.161886][ T4294] EXT4-fs (loop1): 1 truncate cleaned up [ 51.169020][ T4294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.561046][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.667881][ T4336] binfmt_misc: register: failed to install interpreter file ./bus [ 51.679107][ T4334] loop0: detected capacity change from 0 to 1024 [ 51.697696][ T4334] EXT4-fs: Ignoring removed i_version option [ 51.752273][ T4334] EXT4-fs: Ignoring removed nobh option [ 51.766149][ T4334] EXT4-fs: quotafile must be on filesystem root [ 51.833578][ T4349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.857113][ T4351] loop1: detected capacity change from 0 to 512 [ 51.872115][ T4349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.883189][ T4351] EXT4-fs (loop1): 1 orphan inode deleted [ 51.889260][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.931536][ T4361] loop4: detected capacity change from 0 to 128 [ 51.938791][ T2248] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 51.950874][ T4351] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.963075][ T4361] FAT-fs (loop4): Directory bread(block 162) failed [ 51.971451][ T4361] FAT-fs (loop4): Directory bread(block 163) failed [ 51.981454][ T4361] FAT-fs (loop4): Directory bread(block 164) failed [ 51.988409][ T4361] FAT-fs (loop4): Directory bread(block 165) failed [ 51.996473][ T4361] FAT-fs (loop4): Directory bread(block 166) failed [ 51.999034][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.003786][ T4361] FAT-fs (loop4): Directory bread(block 167) failed [ 52.019670][ T4361] FAT-fs (loop4): Directory bread(block 168) failed [ 52.026383][ T4361] FAT-fs (loop4): Directory bread(block 169) failed [ 52.049716][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 52.085482][ T4373] loop1: detected capacity change from 0 to 164 [ 52.125414][ T4376] binfmt_misc: register: failed to install interpreter file ./bus [ 52.224523][ T4383] loop4: detected capacity change from 0 to 1024 [ 52.232273][ T4383] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.253728][ T4383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.269099][ T4383] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.286999][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.480009][ T4397] netlink: 84 bytes leftover after parsing attributes in process `syz.3.276'. [ 52.619369][ T4347] ------------[ cut here ]------------ [ 52.624924][ T4347] WARNING: CPU: 1 PID: 4347 at kernel/events/core.c:7211 perf_pending_task+0x206/0x210 [ 52.634756][ T4347] Modules linked in: [ 52.638683][ T4347] CPU: 1 UID: 0 PID: 4347 Comm: syz.2.260 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 52.649342][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.659455][ T4347] RIP: 0010:perf_pending_task+0x206/0x210 [ 52.665254][ T4347] Code: 20 f0 fc ff 41 88 6c 1d 00 eb 05 e8 54 ec e2 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d1 ef ee 03 cc e8 3b ec e2 ff 90 <0f> 0b 90 eb 86 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 52.684986][ T4347] RSP: 0018:ffffc9000f8d7c30 EFLAGS: 00010293 [ 52.691058][ T4347] RAX: ffffffff8174b955 RBX: 0000000000000000 RCX: ffff88811ab05140 [ 52.699084][ T4347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881170d3788 [ 52.707157][ T4347] RBP: 000000007a9c86d0 R08: 00018881170d378f R09: 0000000000000000 [ 52.715292][ T4347] R10: 0001c9000f8d7c70 R11: ffffffff8174b750 R12: ffff88811aa8bb80 [ 52.723344][ T4347] R13: ffff88811ab05140 R14: ffff88811aa8bcc8 R15: ffff8881170d3700 [ 52.731362][ T4347] FS: 0000000000000000(0000) GS:ffff8882aef30000(0000) knlGS:0000000000000000 [ 52.740339][ T4347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.746981][ T4347] CR2: 0000000100000000 CR3: 000000013cd72000 CR4: 00000000003506f0 [ 52.754997][ T4347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.763017][ T4347] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 52.771013][ T4347] Call Trace: [ 52.774342][ T4347] [ 52.777300][ T4347] task_work_run+0x12e/0x1a0 [ 52.781904][ T4347] do_exit+0x483/0x1590 [ 52.786120][ T4347] do_group_exit+0xff/0x140 [ 52.790737][ T4347] ? get_signal+0xe51/0xf70 [ 52.795351][ T4347] get_signal+0xe59/0xf70 [ 52.799905][ T4347] arch_do_signal_or_restart+0x96/0x480 [ 52.805557][ T4347] exit_to_user_mode_loop+0x7a/0x100 [ 52.810937][ T4347] do_syscall_64+0x1d6/0x200 [ 52.815596][ T4347] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.821381][ T4347] ? clear_bhb_loop+0x40/0x90 [ 52.826204][ T4347] ? clear_bhb_loop+0x40/0x90 [ 52.830996][ T4347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.837090][ T4347] RIP: 0033:0x7efc3a19e929 [ 52.841685][ T4347] Code: Unable to access opcode bytes at 0x7efc3a19e8ff. [ 52.848788][ T4347] RSP: 002b:00007efc38807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.857272][ T4347] RAX: 0000000000010000 RBX: 00007efc3a3c5fa0 RCX: 00007efc3a19e929 [ 52.865328][ T4347] RDX: 00000000200002e6 RSI: 00002000000002c0 RDI: 0000000000000005 [ 52.873417][ T4347] RBP: 00007efc3a220b39 R08: 0000000000000000 R09: 0000000000000000 [ 52.881447][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.889490][ T4347] R13: 0000000000000000 R14: 00007efc3a3c5fa0 R15: 00007ffea14b42a8 [ 52.897526][ T4347] [ 52.900634][ T4347] ---[ end trace 0000000000000000 ]--- [ 52.970035][ T4410] binfmt_misc: register: failed to install interpreter file ./bus [ 53.080256][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 53.080270][ T29] audit: type=1400 audit(1751899278.590:2184): avc: denied { create } for pid=4405 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.087709][ T4417] loop1: detected capacity change from 0 to 512 [ 53.140858][ T4414] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 53.171533][ T29] audit: type=1400 audit(1751899278.630:2185): avc: denied { connect } for pid=4405 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.174988][ T4417] ext4: Unknown parameter 'subj_role' [ 53.192177][ T29] audit: type=1400 audit(1751899278.630:2186): avc: denied { bind } for pid=4405 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.222830][ T4414] veth0_macvtap: left promiscuous mode [ 53.250482][ T4414] veth0_macvtap: entered promiscuous mode [ 53.276591][ T29] audit: type=1326 audit(1751899278.680:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.300882][ T29] audit: type=1326 audit(1751899278.680:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.318188][ T4414] team0: Device macvtap0 failed to register rx_handler [ 53.324958][ T29] audit: type=1326 audit(1751899278.680:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.355046][ T29] audit: type=1326 audit(1751899278.680:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.379251][ T29] audit: type=1326 audit(1751899278.680:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.403254][ T29] audit: type=1326 audit(1751899278.680:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.427365][ T29] audit: type=1326 audit(1751899278.680:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 53.455139][ T4414] veth0_macvtap: left promiscuous mode [ 53.548472][ T3555] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 53.746319][ T4452] loop1: detected capacity change from 0 to 512 [ 53.764139][ T4452] EXT4-fs (loop1): too many log groups per flexible block group [ 53.771879][ T4452] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 53.779379][ T4452] EXT4-fs (loop1): mount failed [ 53.917837][ T4459] loop1: detected capacity change from 0 to 1024 [ 53.925983][ T4459] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.368925][ T4463] loop3: detected capacity change from 0 to 256 [ 54.378356][ T4462] loop0: detected capacity change from 0 to 512 [ 54.395161][ T4465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.407993][ T4465] futex_wake_op: syz.4.297 tries to shift op by -1; fix this program [ 54.420018][ T4463] FAT-fs (loop3): Directory bread(block 64) failed [ 54.429008][ T4463] FAT-fs (loop3): Directory bread(block 65) failed [ 54.431746][ T4462] EXT4-fs (loop0): 1 orphan inode deleted [ 54.436130][ T4463] FAT-fs (loop3): Directory bread(block 66) failed [ 54.436155][ T4463] FAT-fs (loop3): Directory bread(block 67) failed [ 54.436183][ T4463] FAT-fs (loop3): Directory bread(block 68) failed [ 54.436204][ T4463] FAT-fs (loop3): Directory bread(block 69) failed [ 54.436232][ T4463] FAT-fs (loop3): Directory bread(block 70) failed [ 54.436265][ T4463] FAT-fs (loop3): Directory bread(block 71) failed [ 54.436290][ T4463] FAT-fs (loop3): Directory bread(block 72) failed [ 54.436306][ T4463] FAT-fs (loop3): Directory bread(block 73) failed [ 54.476943][ T4463] bio_check_eod: 438 callbacks suppressed [ 54.476963][ T4463] syz.3.296: attempt to access beyond end of device [ 54.476963][ T4463] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 54.502672][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 54.536171][ T4462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.549063][ T4462] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.607540][ T4476] loop2: detected capacity change from 0 to 512 [ 54.617173][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.644176][ T4478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 54.699549][ T4476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.748031][ T4476] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.757600][ T4490] loop3: detected capacity change from 0 to 512 [ 54.765714][ T4490] EXT4-fs: Mount option(s) incompatible with ext3 [ 54.806512][ T4493] FAULT_INJECTION: forcing a failure. [ 54.806512][ T4493] name failslab, interval 1, probability 0, space 0, times 0 [ 54.819959][ T4493] CPU: 0 UID: 0 PID: 4493 Comm: kfree Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 54.819994][ T4493] Tainted: [W]=WARN [ 54.820000][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.820012][ T4493] Call Trace: [ 54.820018][ T4493] [ 54.820025][ T4493] __dump_stack+0x1d/0x30 [ 54.820050][ T4493] dump_stack_lvl+0xe8/0x140 [ 54.820076][ T4493] dump_stack+0x15/0x1b [ 54.820093][ T4493] should_fail_ex+0x265/0x280 [ 54.820125][ T4493] ? audit_log_d_path+0x8d/0x150 [ 54.820162][ T4493] should_failslab+0x8c/0xb0 [ 54.820228][ T4493] __kmalloc_cache_noprof+0x4c/0x320 [ 54.820260][ T4493] audit_log_d_path+0x8d/0x150 [ 54.820339][ T4476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.820373][ T4493] audit_log_d_path_exe+0x42/0x70 [ 54.820517][ T4493] audit_log_task+0x1e9/0x250 [ 54.820600][ T4493] audit_seccomp+0x61/0x100 [ 54.820636][ T4493] ? __seccomp_filter+0x68c/0x10d0 [ 54.820667][ T4493] __seccomp_filter+0x69d/0x10d0 [ 54.820700][ T4493] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.820771][ T4493] ? vfs_write+0x75e/0x8e0 [ 54.820810][ T4493] ? update_curr+0x16e/0x320 [ 54.820848][ T4493] ? __rcu_read_unlock+0x4f/0x70 [ 54.820947][ T4493] ? __fget_files+0x184/0x1c0 [ 54.820977][ T4493] __secure_computing+0x82/0x150 [ 54.821006][ T4493] syscall_trace_enter+0xcf/0x1e0 [ 54.821075][ T4493] do_syscall_64+0xac/0x200 [ 54.821182][ T4493] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.821215][ T4493] ? clear_bhb_loop+0x40/0x90 [ 54.821305][ T4493] ? clear_bhb_loop+0x40/0x90 [ 54.821335][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.821422][ T4493] RIP: 0033:0x7f604cd0e929 [ 54.821445][ T4493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.821466][ T4493] RSP: 002b:00007f604b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 54.821493][ T4493] RAX: ffffffffffffffda RBX: 00007f604cf35fa0 RCX: 00007f604cd0e929 [ 54.821551][ T4493] RDX: 0000000000000080 RSI: 0000000000000000 RDI: ffffffffffffffff [ 54.821568][ T4493] RBP: 00007f604b377090 R08: 0000000000000000 R09: 0000000000000000 [ 54.821584][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.821608][ T4493] R13: 0000000000000000 R14: 00007f604cf35fa0 R15: 00007ffd0ed40378 [ 54.821634][ T4493] [ 54.836843][ T4494] netlink: 256 bytes leftover after parsing attributes in process `syz.4.303'. [ 55.077433][ T4494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.303'. [ 55.141931][ T4502] siw: device registration error -23 [ 55.225516][ T4511] loop3: detected capacity change from 0 to 1024 [ 55.244032][ T4513] openvswitch: netlink: Message has 6 unknown bytes. [ 55.245758][ T4511] EXT4-fs: Ignoring removed nobh option [ 55.256525][ T4511] EXT4-fs: Ignoring removed bh option [ 55.263695][ T4510] siw: device registration error -23 [ 55.314755][ T4511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.352705][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.546727][ T4533] loop0: detected capacity change from 0 to 1024 [ 55.555888][ T4516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.313'. [ 55.566604][ T4533] EXT4-fs: Ignoring removed nobh option [ 55.572298][ T4533] EXT4-fs: Ignoring removed bh option [ 55.609971][ T4537] tipc: Started in network mode [ 55.614976][ T4537] tipc: Node identity ce7c7b040bc4, cluster identity 4711 [ 55.622308][ T4537] tipc: Enabled bearer , priority 0 [ 55.726343][ T4537] syzkaller0: entered promiscuous mode [ 55.731958][ T4537] syzkaller0: entered allmulticast mode [ 55.740893][ T4537] tipc: Resetting bearer [ 55.756364][ T4533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.777656][ T4533] netlink: 'syz.0.320': attribute type 23 has an invalid length. [ 55.786888][ T4536] tipc: Resetting bearer [ 55.873908][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.903173][ T4536] tipc: Disabling bearer [ 56.118193][ T4569] loop4: detected capacity change from 0 to 1024 [ 56.125069][ T4569] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.244544][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 57.355768][ T4585] netem: change failed [ 57.426746][ T4594] siw: device registration error -23 [ 57.468857][ T4595] siw: device registration error -23 [ 57.557746][ T4599] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 57.597408][ T4599] team0: Device hsr_slave_0 failed to register rx_handler [ 57.683445][ T4607] loop2: detected capacity change from 0 to 2048 [ 57.939394][ T4622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.346'. [ 57.986504][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 58.009076][ T4628] loop0: detected capacity change from 0 to 512 [ 58.080565][ T4633] bridge0: port 3(syz_tun) entered blocking state [ 58.087858][ T4633] bridge0: port 3(syz_tun) entered disabled state [ 58.094898][ T4633] syz_tun: entered allmulticast mode [ 58.100943][ T4633] syz_tun: entered promiscuous mode [ 58.107553][ T4633] bridge0: port 3(syz_tun) entered blocking state [ 58.114168][ T4633] bridge0: port 3(syz_tun) entered forwarding state [ 58.128112][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 58.128126][ T29] audit: type=1400 audit(1751899283.640:2714): avc: denied { connect } for pid=4632 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.842529][ T29] audit: type=1400 audit(1751899284.350:2715): avc: denied { accept } for pid=4654 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 58.869751][ T4653] loop2: detected capacity change from 0 to 1024 [ 58.897112][ T4653] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.908111][ T4653] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.920319][ T4653] JBD2: no valid journal superblock found [ 58.926269][ T4653] EXT4-fs (loop2): Could not load journal inode [ 59.121197][ T4669] loop3: detected capacity change from 0 to 2048 [ 59.213289][ T4672] lo speed is unknown, defaulting to 1000 [ 59.226580][ T4672] lo speed is unknown, defaulting to 1000 [ 59.244016][ T4355] Alternate GPT is invalid, using primary GPT. [ 59.250387][ T4355] loop3: p1 p2 p3 [ 60.111829][ T4078] udevd[4078]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 60.112387][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 60.123659][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 60.189297][ T29] audit: type=1326 audit(1751899285.670:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.212844][ T29] audit: type=1326 audit(1751899285.670:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.236319][ T29] audit: type=1326 audit(1751899285.670:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.260085][ T29] audit: type=1326 audit(1751899285.670:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.283527][ T29] audit: type=1326 audit(1751899285.670:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.307321][ T29] audit: type=1326 audit(1751899285.670:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.330711][ T29] audit: type=1326 audit(1751899285.670:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.354096][ T29] audit: type=1326 audit(1751899285.670:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3a19e929 code=0x7ffc0000 [ 60.376382][ T4684] siw: device registration error -23 [ 60.496850][ T4701] loop2: detected capacity change from 0 to 512 [ 60.519450][ T4702] loop1: detected capacity change from 0 to 1024 [ 60.528546][ T4702] EXT4-fs: Ignoring removed orlov option [ 60.540135][ T4687] siw: device registration error -23 [ 60.555914][ T4701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.583488][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 60.619242][ T4701] EXT4-fs (loop2): 1 truncate cleaned up [ 60.712147][ T4711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.140026][ T4721] syz.1.376 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.207198][ T4723] netlink: 'syz.3.377': attribute type 11 has an invalid length. [ 61.794507][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 61.805002][ T4740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 61.816016][ T4738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.843669][ T4738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.881129][ T4744] loop0: detected capacity change from 0 to 2048 [ 61.888084][ T4744] EXT4-fs: quotafile must be on filesystem root [ 61.903054][ T4746] wg2: entered promiscuous mode [ 61.907987][ T4746] wg2: entered allmulticast mode [ 61.973588][ T4754] loop4: detected capacity change from 0 to 128 [ 61.994773][ T4759] FAULT_INJECTION: forcing a failure. [ 61.994773][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 62.008393][ T4759] CPU: 0 UID: 0 PID: 4759 Comm: syz.3.391 Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 62.008430][ T4759] Tainted: [W]=WARN [ 62.008452][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.008468][ T4759] Call Trace: [ 62.008473][ T4759] [ 62.008537][ T4759] __dump_stack+0x1d/0x30 [ 62.008567][ T4759] dump_stack_lvl+0xe8/0x140 [ 62.008585][ T4759] dump_stack+0x15/0x1b [ 62.008600][ T4759] should_fail_ex+0x265/0x280 [ 62.008698][ T4759] should_failslab+0x8c/0xb0 [ 62.008776][ T4759] __kmalloc_noprof+0xa5/0x3e0 [ 62.008806][ T4759] ? sock_kmalloc+0x85/0xc0 [ 62.008853][ T4759] ? iovec_from_user+0x5e/0x210 [ 62.008893][ T4759] sock_kmalloc+0x85/0xc0 [ 62.008917][ T4759] ____sys_sendmsg+0xf8/0x4e0 [ 62.008961][ T4759] ___sys_sendmsg+0x17b/0x1d0 [ 62.009007][ T4759] __sys_sendmmsg+0x178/0x300 [ 62.009080][ T4759] __x64_sys_sendmmsg+0x57/0x70 [ 62.009215][ T4759] x64_sys_call+0x2f2f/0x2fb0 [ 62.009244][ T4759] do_syscall_64+0xd2/0x200 [ 62.009283][ T4759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.009315][ T4759] ? clear_bhb_loop+0x40/0x90 [ 62.009336][ T4759] ? clear_bhb_loop+0x40/0x90 [ 62.009402][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.009429][ T4759] RIP: 0033:0x7fc42515e929 [ 62.009459][ T4759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.009542][ T4759] RSP: 002b:00007fc4237c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.009571][ T4759] RAX: ffffffffffffffda RBX: 00007fc425385fa0 RCX: 00007fc42515e929 [ 62.009583][ T4759] RDX: 0000000000000002 RSI: 000020000000a440 RDI: 0000000000000004 [ 62.009596][ T4759] RBP: 00007fc4237c7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.009609][ T4759] R10: 0000000008008801 R11: 0000000000000246 R12: 0000000000000001 [ 62.009650][ T4759] R13: 0000000000000000 R14: 00007fc425385fa0 R15: 00007ffddd81d4e8 [ 62.009705][ T4759] [ 62.253890][ T4757] loop0: detected capacity change from 0 to 1024 [ 62.261677][ T4757] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 62.315045][ T4757] 9pnet_fd: Insufficient options for proto=fd [ 62.477945][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.477945][ T59] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 62.492789][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.492789][ T59] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 62.508206][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.508206][ T59] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 62.541375][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.541375][ T59] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 62.557309][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.557309][ T59] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 62.571124][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.571124][ T59] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 62.597958][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.597958][ T59] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 62.623917][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.623917][ T59] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 62.640175][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.640175][ T59] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 62.656862][ T59] kworker/u8:4: attempt to access beyond end of device [ 62.656862][ T59] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 62.691620][ T4792] loop0: detected capacity change from 0 to 164 [ 62.703741][ T4790] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.711329][ T4790] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 62.823289][ T4803] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.407' sets config #0 [ 62.842321][ T4805] binfmt_misc: register: failed to install interpreter file ./bus [ 62.854706][ T4801] loop0: detected capacity change from 0 to 1024 [ 62.864811][ T4801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.874613][ T4801] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.930486][ T4801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 62.959096][ T4801] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.406: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.975462][ T4801] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.406: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.011300][ T4801] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.406: Failed to acquire dquot type 0 [ 63.032793][ T4801] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 63.062930][ T4810] syz.4.409 (4810) used greatest stack depth: 10064 bytes left [ 63.090474][ T4801] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.406: mark_inode_dirty error [ 63.105396][ T4801] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 63.137609][ T4801] EXT4-fs (loop0): 1 orphan inode deleted [ 63.161528][ T12] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.180841][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 63.180875][ T29] audit: type=1400 audit(1751899288.690:3043): avc: denied { bind } for pid=4816 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.214184][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 63.222694][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 63.239448][ T4801] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.406: Invalid inode table block 1 in block_group 0 [ 63.270544][ T4801] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 63.288824][ T4801] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.406: mark_inode_dirty error [ 63.321250][ T29] audit: type=1400 audit(1751899288.830:3044): avc: denied { create } for pid=4816 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.340807][ T29] audit: type=1400 audit(1751899288.830:3045): avc: denied { ioctl } for pid=4816 comm="syz.4.413" path="socket:[8129]" dev="sockfs" ino=8129 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.365409][ T29] audit: type=1326 audit(1751899288.830:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 63.388756][ T29] audit: type=1326 audit(1751899288.830:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3289e929 code=0x7ffc0000 [ 63.422878][ T29] audit: type=1326 audit(1751899288.940:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 63.446450][ T29] audit: type=1326 audit(1751899288.940:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 63.481361][ T29] audit: type=1326 audit(1751899288.990:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 63.504837][ T29] audit: type=1326 audit(1751899288.990:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 63.536912][ T4824] siw: device registration error -23 [ 63.639639][ T4831] loop0: detected capacity change from 0 to 256 [ 63.690193][ T4835] loop2: detected capacity change from 0 to 164 [ 63.710983][ T4833] lo speed is unknown, defaulting to 1000 [ 63.724726][ T4833] lo speed is unknown, defaulting to 1000 [ 63.738002][ T4837] loop3: detected capacity change from 0 to 2048 [ 63.783558][ T4837] loop3: p1 < > p4 [ 63.798019][ T4837] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.846528][ T4845] netlink: 'syz.0.422': attribute type 21 has an invalid length. [ 63.847924][ T4840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.421'. [ 63.886608][ T4837] netlink: 64 bytes leftover after parsing attributes in process `syz.3.420'. [ 63.913729][ T2996] loop3: p1 < > p4 [ 63.922788][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.956116][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.973359][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.979547][ T4845] loop0: detected capacity change from 0 to 8192 [ 64.032232][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 64.048295][ T4854] loop2: detected capacity change from 0 to 512 [ 64.062120][ T4854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.088774][ T4854] EXT4-fs (loop2): 1 truncate cleaned up [ 64.112193][ T4856] siw: device registration error -23 [ 64.175613][ T4865] lo speed is unknown, defaulting to 1000 [ 64.181940][ T4865] lo speed is unknown, defaulting to 1000 [ 64.333339][ T4875] loop1: detected capacity change from 0 to 164 [ 64.415809][ T4882] FAULT_INJECTION: forcing a failure. [ 64.415809][ T4882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.429895][ T4882] CPU: 0 UID: 0 PID: 4882 Comm: syz.1.434 Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 64.429954][ T4882] Tainted: [W]=WARN [ 64.429962][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.429978][ T4882] Call Trace: [ 64.429986][ T4882] [ 64.429995][ T4882] __dump_stack+0x1d/0x30 [ 64.430055][ T4882] dump_stack_lvl+0xe8/0x140 [ 64.430081][ T4882] dump_stack+0x15/0x1b [ 64.430102][ T4882] should_fail_ex+0x265/0x280 [ 64.430155][ T4882] should_fail+0xb/0x20 [ 64.430189][ T4882] should_fail_usercopy+0x1a/0x20 [ 64.430308][ T4882] _copy_to_user+0x20/0xa0 [ 64.430334][ T4882] simple_read_from_buffer+0xb5/0x130 [ 64.430383][ T4882] proc_fail_nth_read+0x100/0x140 [ 64.430434][ T4882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.430465][ T4882] vfs_read+0x19d/0x6f0 [ 64.430510][ T4882] ? __rcu_read_unlock+0x4f/0x70 [ 64.430580][ T4882] ? __fget_files+0x184/0x1c0 [ 64.430644][ T4882] ksys_read+0xda/0x1a0 [ 64.430683][ T4882] __x64_sys_read+0x40/0x50 [ 64.430718][ T4882] x64_sys_call+0x2d77/0x2fb0 [ 64.430748][ T4882] do_syscall_64+0xd2/0x200 [ 64.430805][ T4882] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.430836][ T4882] ? clear_bhb_loop+0x40/0x90 [ 64.430925][ T4882] ? clear_bhb_loop+0x40/0x90 [ 64.431028][ T4882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.431055][ T4882] RIP: 0033:0x7f604cd0d33c [ 64.431073][ T4882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.431096][ T4882] RSP: 002b:00007f604b377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.431148][ T4882] RAX: ffffffffffffffda RBX: 00007f604cf35fa0 RCX: 00007f604cd0d33c [ 64.431164][ T4882] RDX: 000000000000000f RSI: 00007f604b3770a0 RDI: 0000000000000009 [ 64.431189][ T4882] RBP: 00007f604b377090 R08: 0000000000000000 R09: 0000000000000000 [ 64.431204][ T4882] R10: 0000000000000d81 R11: 0000000000000246 R12: 0000000000000001 [ 64.431219][ T4882] R13: 0000000000000000 R14: 00007f604cf35fa0 R15: 00007ffd0ed40378 [ 64.431244][ T4882] [ 64.431393][ T4881] wg2: entered promiscuous mode [ 64.464459][ T4884] binfmt_misc: register: failed to install interpreter file ./bus [ 64.516385][ T4887] loop4: detected capacity change from 0 to 512 [ 64.516851][ T4881] wg2: entered allmulticast mode [ 64.546685][ T4887] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.690254][ T4887] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.436: corrupted inode contents [ 64.704956][ T4891] raw_sendmsg: syz.1.437 forgot to set AF_INET. Fix it! [ 64.713675][ T4887] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.436: mark_inode_dirty error [ 64.725436][ T4887] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.436: corrupted inode contents [ 64.738545][ T4887] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.436: mark_inode_dirty error [ 64.911030][ T4902] netlink: 'syz.4.440': attribute type 10 has an invalid length. [ 64.927821][ T4902] team0: Device hsr_slave_0 failed to register rx_handler [ 65.261525][ T4916] binfmt_misc: register: failed to install interpreter file ./bus [ 65.606569][ T4928] loop4: detected capacity change from 0 to 1024 [ 65.631104][ T4928] EXT4-fs: Ignoring removed orlov option [ 65.691128][ T4932] siw: device registration error -23 [ 65.760248][ T4937] loop1: detected capacity change from 0 to 1024 [ 65.773502][ T4937] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 66.077583][ T4944] bond1: entered promiscuous mode [ 66.082715][ T4944] bond1: entered allmulticast mode [ 66.102668][ T4944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.117089][ T4944] bond1 (unregistering): Released all slaves [ 66.151701][ T4950] loop0: detected capacity change from 0 to 1024 [ 66.225341][ T4952] loop4: detected capacity change from 0 to 1024 [ 66.235272][ T4952] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 66.262878][ T4952] 9pnet_fd: Insufficient options for proto=fd [ 66.610608][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 66.610608][ T4978] FAULT_INJECTION: forcing a failure. [ 66.610608][ T4978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.610640][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.3.465 Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 66.610669][ T4978] Tainted: [W]=WARN [ 66.610750][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.610765][ T4978] Call Trace: [ 66.610774][ T4978] [ 66.610785][ T4978] __dump_stack+0x1d/0x30 [ 66.610816][ T4978] dump_stack_lvl+0xe8/0x140 [ 66.610843][ T4978] dump_stack+0x15/0x1b [ 66.610865][ T4978] should_fail_ex+0x265/0x280 [ 66.610912][ T4978] should_fail+0xb/0x20 [ 66.610948][ T4978] should_fail_usercopy+0x1a/0x20 [ 66.610990][ T4978] _copy_from_user+0x1c/0xb0 [ 66.611017][ T4978] sk_getsockopt+0xcf/0x1a30 [ 66.611112][ T4978] ? selinux_socket_getsockopt+0x175/0x1b0 [ 66.611158][ T4978] ? should_fail_ex+0xdb/0x280 [ 66.611198][ T4978] do_sock_getsockopt+0x14d/0x240 [ 66.611295][ T4978] __x64_sys_getsockopt+0x11e/0x1a0 [ 66.611390][ T4978] x64_sys_call+0x12aa/0x2fb0 [ 66.611434][ T4978] do_syscall_64+0xd2/0x200 [ 66.611506][ T4978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.611550][ T4978] ? clear_bhb_loop+0x40/0x90 [ 66.611613][ T4978] ? clear_bhb_loop+0x40/0x90 [ 66.611645][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.611674][ T4978] RIP: 0033:0x7fc42515e929 [ 66.611695][ T4978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.611776][ T4978] RSP: 002b:00007fc4237c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 66.611809][ T4978] RAX: ffffffffffffffda RBX: 00007fc425385fa0 RCX: 00007fc42515e929 [ 66.611833][ T4978] RDX: 0000000000000045 RSI: 0000000000000001 RDI: 0000000000000003 [ 66.611849][ T4978] RBP: 00007fc4237c7090 R08: 0000200000000340 R09: 0000000000000000 [ 66.611866][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.611883][ T4978] R13: 0000000000000000 R14: 00007fc425385fa0 R15: 00007ffddd81d4e8 [ 66.611961][ T4978] [ 66.674731][ T4981] process 'gtp' launched './file0' with NULL argv: empty string added [ 66.861519][ T4986] Illegal XDP return value 207626368 on prog (id 427) dev N/A, expect packet loss! [ 66.920483][ T4990] loop1: detected capacity change from 0 to 128 [ 66.980319][ T4991] siw: device registration error -23 [ 67.130781][ T4994] loop1: detected capacity change from 0 to 1024 [ 67.159274][ T4994] EXT4-fs: Ignoring removed orlov option [ 67.183637][ T4998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.471'. [ 67.193157][ T4998] random: crng reseeded on system resumption [ 67.739650][ T5012] loop4: detected capacity change from 0 to 1024 [ 67.751164][ T5012] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 67.935148][ T5023] loop3: detected capacity change from 0 to 128 [ 68.019176][ T5036] loop4: detected capacity change from 0 to 164 [ 68.135363][ T37] bio_check_eod: 214 callbacks suppressed [ 68.135382][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.135382][ T37] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 68.155722][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.155722][ T37] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 68.169227][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.169227][ T37] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 68.185178][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.185178][ T37] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 68.208571][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.208571][ T37] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 68.236628][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.236628][ T37] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 68.280113][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.280113][ T37] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 68.294328][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.294328][ T37] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 68.309391][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.309391][ T37] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 68.345393][ T29] kauditd_printk_skb: 882 callbacks suppressed [ 68.345465][ T29] audit: type=1400 audit(1751899293.840:3932): avc: denied { create } for pid=5044 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.351630][ T37] kworker/u8:2: attempt to access beyond end of device [ 68.351630][ T37] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 68.351681][ T29] audit: type=1400 audit(1751899293.840:3933): avc: denied { getopt } for pid=5044 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.404182][ T29] audit: type=1326 audit(1751899293.850:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604cd0e929 code=0x7ffc0000 [ 68.451753][ T5049] loop1: detected capacity change from 0 to 164 [ 68.466149][ T5051] loop3: detected capacity change from 0 to 1024 [ 68.473138][ T3298] ================================================================== [ 68.477389][ T5051] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 68.481288][ T3298] BUG: KCSAN: data-race in set_nlink / set_nlink [ 68.494863][ T29] audit: type=1326 audit(1751899293.960:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.495966][ T3298] [ 68.495974][ T3298] read to 0xffff8881069669e8 of 4 bytes by task 2996 on cpu 1: [ 68.519311][ T29] audit: type=1326 audit(1751899293.960:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.521564][ T3298] set_nlink+0x29/0xb0 [ 68.529337][ T29] audit: type=1326 audit(1751899293.970:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.552437][ T3298] kernfs_iop_permission+0x1e2/0x220 [ 68.552477][ T3298] inode_permission+0x1c7/0x310 [ 68.552501][ T3298] link_path_walk+0x162/0x900 [ 68.556581][ T29] audit: type=1326 audit(1751899293.970:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.579819][ T3298] path_lookupat+0x63/0x2a0 [ 68.579867][ T3298] filename_lookup+0x147/0x340 [ 68.579892][ T3298] vfs_statx+0x9d/0x390 [ 68.579915][ T3298] vfs_fstatat+0x115/0x170 [ 68.585255][ T29] audit: type=1326 audit(1751899293.970:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.590043][ T3298] __se_sys_newfstatat+0x55/0x260 [ 68.594779][ T29] audit: type=1326 audit(1751899293.970:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.617955][ T3298] __x64_sys_newfstatat+0x55/0x70 [ 68.617988][ T3298] x64_sys_call+0x2c22/0x2fb0 [ 68.618014][ T3298] do_syscall_64+0xd2/0x200 [ 68.622531][ T29] audit: type=1326 audit(1751899293.970:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42515e929 code=0x7ffc0000 [ 68.627267][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.730990][ T3298] [ 68.733364][ T3298] write to 0xffff8881069669e8 of 4 bytes by task 3298 on cpu 0: [ 68.741027][ T3298] set_nlink+0x99/0xb0 [ 68.745148][ T3298] kernfs_iop_permission+0x1e2/0x220 [ 68.750484][ T3298] inode_permission+0x1c7/0x310 [ 68.755377][ T3298] link_path_walk+0x162/0x900 [ 68.760083][ T3298] path_openat+0x1de/0x2170 [ 68.764621][ T3298] do_filp_open+0x109/0x230 [ 68.769145][ T3298] do_sys_openat2+0xa6/0x110 [ 68.773757][ T3298] __x64_sys_openat+0xf2/0x120 [ 68.778554][ T3298] x64_sys_call+0x1af/0x2fb0 [ 68.783259][ T3298] do_syscall_64+0xd2/0x200 [ 68.787805][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.793811][ T3298] [ 68.796143][ T3298] value changed: 0x00000008 -> 0x00000009 [ 68.801866][ T3298] [ 68.804221][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 68.810389][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: udevd Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 68.822213][ T3298] Tainted: [W]=WARN [ 68.826028][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.836103][ T3298] ==================================================================