last executing test programs: 12.818977815s ago: executing program 4 (id=88): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e40)=0x1, 0x4) getsockopt(r1, 0x200000000114, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) statx(0xffffffffffffff9c, 0x0, 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080)) getpriority(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) listen(r2, 0x1) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept4$x25(r1, &(0x7f0000000f00)={0x9, @remote}, &(0x7f0000000f40)=0x12, 0x100800) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f0000000f80)={0x6, 0x0, 0x8001, 0xa7, 0xa, 0x26, 0x14, "0624c9d7f6ca68ff2a1a636c343f2d2c60118da9", "4f0eda6fc8340072aa80ae6914dde26b0055683d"}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec799", 0xa0}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r6, r5) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r9, 0x0, 0x3, 0x1}}, 0x20) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4c010) socket$nl_generic(0x10, 0x3, 0x10) 12.328545236s ago: executing program 4 (id=93): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.428653125s ago: executing program 4 (id=102): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x800c66, &(0x7f0000000000)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@smackfshat={'smackfshat', 0x3d, '/\xa6'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x1) 11.070678861s ago: executing program 4 (id=107): r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="6e6f646f74732c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030322c64656275672c636865636b3d72656c617865642c666c7573682c646f74732c6e66733d7374616c655f72772c636865636b3d72656c617865642c646f74732c00cc8114d650c0a91f3aa392f51504858ecb67a77a6a1b0439dbbe8613e5f9a5c4abbc8f65a7b589d87961968d900a057ea1f70371cce6b00753f00dae03816539fe0ba953c55157ed17ba82cc2dce95e52829511c63c6da30"], 0x1, 0x25f, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x8060, 0x0, 0xfc, 0x0, &(0x7f0000000400)) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="c33e367dd194fa6da1835b75a6b7f54b0573ddfed61b4604b11600a02a552b09c77cc28aa4972a012e2cc8da1fbaade007aa313be79cc17db2083b881655bead4b6d227890cf41a7667099b8f4c949537f8aed409d12d6cd06b27c3064da45d3736995e72a2f63fff054b14d98167dc76f6d107163620b856667c9f3783c8f35"], &(0x7f0000000000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='svcsock_tcp_recv_short\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) timer_delete(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000423972", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000440)={0x8, 0x9, 0x4, 0x9, 0xa, "efc64a26a83c8ffa332b3a5419e8ab2543c4ec"}) r10 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x52) fallocate(r10, 0x0, 0x9, 0x2000406) 10.804409592s ago: executing program 4 (id=109): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 10.230499477s ago: executing program 4 (id=122): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0xc, 0x0) (fail_nth: 2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 10.198980328s ago: executing program 32 (id=122): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0xc, 0x0) (fail_nth: 2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 5.215478195s ago: executing program 3 (id=176): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x8, 0xc412, 0x68, @mcast1, @local, 0x8000, 0x1, 0x2, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6tnl0\x00', 0x0, 0x4, 0x71, 0x9, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x0, 0x1000}}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xfffffffc, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40d0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'dvmrp1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001b00)={0x6f8, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x281844a4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffff, 0x3, 0x3, 0x2}, {0x7fff, 0x2, 0x9, 0xffffff4d}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x8, 0x6, 0x6}, {0x5, 0x48, 0x56, 0x7f}, {0x9, 0x6, 0x7f, 0x1}, {0x6000, 0x40, 0x6, 0x401}, {0x1, 0x7f, 0x1, 0x7ff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x5, 0x4, 0x8}, {0x4, 0xe0, 0xf}, {0x5, 0x5, 0x3f, 0xa}, {0x401, 0x9, 0x1, 0x7f}, {0x3ff, 0xe, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x5}, {0xe, 0x6, 0x4, 0x40}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=@setlink={0x470, 0x13, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc00, 0x3c}, [@IFLA_MAP={0x24, 0xe, {0xcdf, 0x45cd6b9c, 0xffff, 0x8001, 0x4, 0xf7}}, @IFLA_VFINFO_LIST={0x358, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x4770}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x20e, 0xffffffaf}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x3474f216}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7ff}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x1000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x9dd}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x21e65568, 0x1000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x7fff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0xaf}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xbd, 0x1607}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x302, 0x5, 0x88a8}}, {0x14, 0x1, {0x2661, 0xe1f, 0x7, 0x8100}}, {0x14, 0x1, {0x8001, 0x46d, 0x6f35, 0x88a8}}, {0x14, 0x1, {0x9, 0x4f6, 0x1, 0x88a8}}, {0x14, 0x1, {0x3efe3c87, 0xdc, 0xe4bd, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0xe26, 0xb93e}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff5db, 0xa6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x6ab, 0x9, 0x88a8}}]}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xc94, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5000, 0xffff0000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10000, 0x9}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffff01, 0xf00, 0x9, 0x88a8}}, {0x14, 0x1, {0x3, 0x540, 0xfffffffd, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0x957, 0x9, 0x8100}}, {0x14, 0x1, {0x8, 0x330, 0x0, 0x8100}}, {0x14, 0x1, {0x6, 0x7f1, 0x1, 0x88a8}}, {0x14, 0x1, {0x5, 0x23e, 0xb, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1b7b}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @local}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x962}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x101, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x19c}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff801, 0xc}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7b9, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0xa8}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x101}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x7fffffffffffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffd, 0x8001}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'pim6reg\x00'}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'pim6reg1\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'team_slave_0\x00'}]}, @IFLA_GROUP={0x8, 0x1b, 0x4}, @IFLA_MAP={0x24, 0xe, {0x1, 0x7, 0x2, 0x19a7, 0x1, 0xb}}, @IFLA_PHYS_PORT_ID={0x17, 0x22, "f64e80fb067872a278e25ded39ea4c8924facc"}, @IFLA_CARRIER={0x5, 0x21, 0xf9}, @IFLA_PHYS_SWITCH_ID={0xc, 0x24, "334dba50a5d3cae6"}]}, 0x470}, 0x1, 0x0, 0x0, 0x12}, 0x20000000) (async) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r14, @ANYRES16=r14, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e6574f564657673696d3000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x1, 0x4, 0x0, 0x3d}, {0x7, 0x0, 0x1, 0x7}]}) 5.181020146s ago: executing program 3 (id=177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) (fail_nth: 3) 5.147227937s ago: executing program 3 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) membarrier(0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0xca0, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0xffffff37, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x5, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x5, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xf7ffcf1b, 0x282, 0x5517bc7b, 0x4, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x1, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1}, 0x8, 0xffffffff, 0xf}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r12}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="010000000000fddbdf2554"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 4.470357757s ago: executing program 5 (id=192): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x800c66, &(0x7f0000000000)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@smackfshat={'smackfshat', 0x3d, '/\xa6'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x1) 4.399342269s ago: executing program 5 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setregid(0x0, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000a1c740d40000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x1) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/138) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a000000000000000800010001"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 4.290637194s ago: executing program 3 (id=198): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = mq_open(&(0x7f00000000c0)='Z.\x00', 0x800, 0x4c5665ec88a69c5c, &(0x7f0000000140)={0xf7a, 0x8c, 0x7fffffff, 0x9}) mq_notify(r2, &(0x7f0000000180)={0x0, 0x28, 0x29e457742b0ca0fb, @tid=r0}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x413c1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x100000, &(0x7f0000000880)="f356a0061740631bf62faa7988a36c7c060d7a8c1887b2dd83be039856de32a4beb20d026fe4aa9b44605c1aa2f4a7a0989389a49eab9b536a3d68a90c0d2c67cc60dfc477f07fd1555dc95020fc2895da81983c46935392863c3503dcce080551dc083c1259d7669f4a45dafe72dcc1e7c23d8b1120a88ba88a5c0912059616e9b34a720c2d2a9a5c40473d8217b0f93a0d0b79fb00db43f4fbf88f8686bba5fbfc463ab068840536640fa72c1004f9f7748b1fe1f6b50a9f58d206554174e8e7faa8ba0ee202a0b090c5bca878c875c70d7c2774cee06684d4a64f4853e9cb37984263cde4", 0xe6, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="ce9e653a425b220f6ca7daed1f3fd488c6342bf235fb68547af9696e6945acc04e53c9b08f0a139e975d824ed042fc7c3a46c3137fd7f035128d761ffb20445360273150e25d1741e9d21782b012de56b40a89dec9363c81454dbfcac3a02aadd8f6a7e28cf3607263b713fc388bd6a6e05a681f68bbcc53a46f1e1e730d19d181f598e8afa04edc6d1ebe5305466c14d50018fc838dd4371fb9b9a50ea66d497608141f9d80e1855f2e59533712d3f416cc663fedadc4f7a4ad") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rt_sigtimedwait(&(0x7f0000000440)={[0xffffffff]}, &(0x7f00000007c0), &(0x7f0000000840), 0x8) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) syz_io_uring_setup(0x4e6b, &(0x7f00000002c0)={0x0, 0x302, 0x2000, 0x3, 0x1b9}, &(0x7f00000003c0), &(0x7f0000000400)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22b81) ioctl$SG_GET_TIMEOUT(r10, 0x2202, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000c80)={'syztnl2\x00', r11, 0x40, 0x7800, 0x8, 0xb, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x65, 0x1, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) waitid(0x0, r4, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) 4.071800923s ago: executing program 5 (id=202): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.302037467s ago: executing program 3 (id=217): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, 0x0, 0x0}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x4}, 0x18) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) 3.162588453s ago: executing program 5 (id=220): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x45) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) stat(0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r2 = dup2(r1, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xb8) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) 3.128442215s ago: executing program 3 (id=221): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") truncate(0x0, 0x5) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r5 = msgget$private(0x0, 0x2ac) msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) msgctl$IPC_SET(r5, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) timerfd_create(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.094734116s ago: executing program 33 (id=221): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") truncate(0x0, 0x5) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r5 = msgget$private(0x0, 0x2ac) msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==") r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) msgctl$IPC_SET(r5, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) timerfd_create(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.534812534s ago: executing program 5 (id=238): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) r0 = memfd_create(0x0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000e6ffffff4d241ec2840c65a6b3634a720005000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r2, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) fsetxattr$security_selinux(r0, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xddae, 0x1, 0x503fc, 0x8100014e}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = dup(0xffffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r11, 0x20}, {r8, 0xa059}], 0x2, &(0x7f0000000300)={r12, r13+60000000}, &(0x7f0000000340), 0x8) utimes(&(0x7f0000000380)='./file0\x00', 0x0) shutdown(r4, 0x1) 1.423120249s ago: executing program 2 (id=241): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 1.236550276s ago: executing program 1 (id=242): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x2e8, 0xf0, 0xfeffffff, 0x218, 0x2e8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x4) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000680)={'nat\x00', 0x0, [0x401, 0x4, 0x9, 0xfff, 0x800]}, &(0x7f00000004c0)=0x54) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x4, 0x0, 0x0, 0x7, 0x2}}) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket(0x18, 0xa, 0xe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00007e0b65a0000000d47a48ae00ae097aafd202a55dc94072c7f4ab61e8998937a16878cfaffb1209a156ab668507000000000000009339482cd242a2c905c5c9040049b7e6f6e822867b835e15e265463d697eb915670355456de5e090e4a27173bb8baed0e00f43", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.235940187s ago: executing program 2 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x7, [0x8001, 0x3, 0x454baf4d, 0x80000000, 0x0, 0x6]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.078567673s ago: executing program 0 (id=247): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x7ff]}}, 0x5c) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000800)={0x122000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, 0x0, 0xc080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000fe11b44f6578c344f7", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x3) 1.059122664s ago: executing program 2 (id=248): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) cachestat(0xffffffffffffffff, &(0x7f0000000580)={0x9, 0x9}, &(0x7f00000005c0), 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x200104, 0x54}, 0x18) mkdirat(r3, &(0x7f0000000540)='./file0\x00', 0x0) get_mempolicy(0x0, 0x0, 0x7fffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000010000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0x98}, 0x1, 0x7}, 0x8890) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) r8 = syz_clone3(&(0x7f0000000400)={0x200000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), {0x17}, 0x0, 0x0, &(0x7f0000000300)=""/190, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r9 = syz_open_procfs(r8, &(0x7f0000000100)='net/vlan/vlan0\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='irq_handler_exit\x00', r9, 0x0, 0x5}, 0x18) 984.896638ms ago: executing program 0 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x38664f3, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64=0x0, @ANYRES64=r2], 0x0, 0x23e, &(0x7f0000000bc0)="$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") r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0088a801aaaabb88a8900081000b0088f7"], 0x1a) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000005c0)={'hsr0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {0xa}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 934.756469ms ago: executing program 1 (id=250): syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) (fail_nth: 2) 769.111537ms ago: executing program 1 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100026bd7000fedbdf254b00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900030000006a00000006009800d2ea000008009e004002fc000800dc00070000000500f600890000000500f6004500000008007700ae030000"], 0x58}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000814) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x217, &(0x7f0000019580)="$eJzs3c1qE1EUAOCTNM2PuOhOEIRRF7oq6hNUpIIYECpZ6K5gV80q2UyyaR/DV/C9fADpKhsZSWem6U8Sk0ASLd+36Zk558zcOxem2eQmi9zPR9+j2axE9SAOYlSJvahG6TwAgPtklGXxK8st311bx5AAgDVb4P//7w0PCQBYs89fvn58224fHiVJM+LiPO2knfxvnn//oX34Krm0N+m6SNPOzlX+dXL7s8M4vxsPivybvD+5StcjolOPl8/z/Dj37lN7ko9qmnYa8W3NcwcAAAAAAAAAAAAAAAAAAAAAgG15Eklp6v4++/u3860inx9d2x8oudlfi8fl9sCT7YGys01MCgAAAAAAAAAAAAAAAAAAAP4z/cHw9LjbPelNgkZEXD9Tm1IzO6gUF16oePtBNVZrbxXTXOGmleIRLX3TZ8sUt6Yv7iJB1P6V1Vk1SObW7Cx+wUa5zHdTrajMac+y03rRe3lmtzgY15TbYsxsr5ddMwf24mjV5zPKsqz742mvP4hsbvHkHdFY+1sIAAAAAAAAAAAAAAAAAACIG18Rv5tr7mxjRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwef3BsPyV/+Hpcbd70usPFg7OIuJh/LW4vNduNLc3UQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO61PwEAAP//5lIUfg==") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00bfa20000000000000702f6fff7ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x45, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000fbdbdf252500008c3f7b70000e0001006e657464657673696d0000000f0002006e657464657673696d3000001f1c6e99cf46d15e8d1732259248f76823da06547ae3b19ba915123277f7cd5277768e5de145183789daf299357d2d0fa4b1e3f8bceed0a964ccc12ced14895dea1ff7310ea2ac81359abeb8ed34ef037c633a09b074c740a89774222efb966fb928d7ba60618b135a45d3a02c62"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008015}, 0x40000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1e5202, 0x0) sendfile(r7, r6, 0x0, 0x3ffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffdca, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24060050}, 0x8000) 662.047472ms ago: executing program 5 (id=252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 602.521824ms ago: executing program 2 (id=253): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") truncate(0x0, 0x5) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r5 = msgget$private(0x0, 0x2ac) msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) msgctl$IPC_SET(r5, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) timerfd_create(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 602.244604ms ago: executing program 0 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 594.080214ms ago: executing program 0 (id=255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (fail_nth: 7) 554.906516ms ago: executing program 1 (id=256): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400", @ANYRESHEX=r0], 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) llistxattr(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500"/17], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0x4, 0x96b, 0x1ff}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000680), &(0x7f00000006c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000180)=""/98, 0x62, 0x0, &(0x7f0000000280)=""/55, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 378.543683ms ago: executing program 2 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setregid(0x0, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000a1c740d40000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x1) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/138) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a000000000000000800010001"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 212.056931ms ago: executing program 6 (id=222): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, 0x0, 0x20000044) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r2, 0x20, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000700)=""/81, 0x51}}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0x1, 0x27a, &(0x7f0000000980)="$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") r4 = creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000007c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0x16, &(0x7f0000000ec0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 122.767185ms ago: executing program 0 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 113.743095ms ago: executing program 1 (id=259): socket$inet_sctp(0x2, 0x800000000000001, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) 51.636568ms ago: executing program 6 (id=260): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9b}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x44000) 40.789548ms ago: executing program 0 (id=261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000e5c39c90e85ff12ffb", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f000000"], 0x14}}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="eaea3c261320f5aa648bfd961abd2fb08e51ea4ce5b4831b855f8fb82247fb276392e424491bbf8ddd9c23148962d0d5a0d6944dec0a6ce8aa8e9967bf779dbb317826375942df7b950f31705c6cb1bc63eb8ad3cf6569eabbe407511cdff589330327737ddee17f2104f8fe0e73b50e34b44decc4fddbf060fdeee6448dfccf2dba1b454c85a04bd9ea91"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001300)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc0000001800018014000200ffffffff657673696d306c7208cb11a161fd6b3b6b483a6f2f0000000000000800080000fcffff0800090000000000080011000000000008000e00a00000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x14200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', 0x40140, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x9, 0xfffffffa, 0x1, r6}, 0x10) r7 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f00000002c0)}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r7], 0x0, 0xfa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000040), &(0x7f0000000080)=r11}, 0x20) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r12) 38.068169ms ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$nci(r2, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x6, @b={0x8, 0x3, 0x2, 0x1, 0x6, 0xc3, 0xee, {0x33, "55e04997a4b8f9d30306ece3421ab38e96f3a1a761d51f872f9107f792842ce13e207a055e9dc85113af1b437a5e76ebc388a8"}, 0xd, 0x9, 0x40, 0x1, 0x1e, "78076d79a709207462fe6654bb115fc69670c20b47c8a809e15b66b209c3"}}, 0x61) 1.31129ms ago: executing program 6 (id=263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000101000024000180060005004e230000060001000200000008000300ac1414aa080006001f000000"], 0x38}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) setresuid(0xee01, 0xee00, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) sendmmsg$unix(r11, &(0x7f0000000440), 0x0, 0x0) (async) r12 = getgid() lchown(0x0, 0x0, r12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 2 (id=264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") (fail_nth: 9) kernel console output (not intermixed with test programs): [ 19.509249][ T29] audit: type=1400 audit(1765419620.763:61): avc: denied { siginh } for pid=3222 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.731238][ T29] audit: type=1400 audit(1765419621.003:62): avc: denied { search } for pid=3226 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.756742][ T29] audit: type=1400 audit(1765419621.003:63): avc: denied { search } for pid=3226 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.779366][ T29] audit: type=1400 audit(1765419621.003:64): avc: denied { search } for pid=3226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.802329][ T29] audit: type=1400 audit(1765419621.003:65): avc: denied { search } for pid=3226 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.825373][ T29] audit: type=1400 audit(1765419621.003:66): avc: denied { read open } for pid=3228 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 27.793411][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 27.793425][ T29] audit: type=1400 audit(1765419629.063:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.822513][ T29] audit: type=1400 audit(1765419629.093:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.823376][ T3305] cgroup: Unknown subsys name 'net' [ 27.851115][ T29] audit: type=1400 audit(1765419629.123:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.950512][ T3305] cgroup: Unknown subsys name 'cpuset' [ 27.956538][ T3305] cgroup: Unknown subsys name 'rlimit' [ 28.066878][ T29] audit: type=1400 audit(1765419629.333:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.090126][ T29] audit: type=1400 audit(1765419629.333:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.110572][ T29] audit: type=1400 audit(1765419629.333:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.131025][ T29] audit: type=1400 audit(1765419629.333:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.139118][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.151586][ T29] audit: type=1400 audit(1765419629.363:77): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.184675][ T29] audit: type=1400 audit(1765419629.363:78): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.205818][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k Setting up swapspace version 1, size = 127995904 bytes [ 28.207879][ T29] audit: type=1400 audit(1765419629.383:79): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.437661][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.454256][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.499780][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 29.537050][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.577526][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.584589][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.591704][ T3318] bridge_slave_0: entered allmulticast mode [ 29.597940][ T3318] bridge_slave_0: entered promiscuous mode [ 29.611019][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.618064][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.625184][ T3316] bridge_slave_0: entered allmulticast mode [ 29.631568][ T3316] bridge_slave_0: entered promiscuous mode [ 29.647047][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.654106][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.661261][ T3318] bridge_slave_1: entered allmulticast mode [ 29.667631][ T3318] bridge_slave_1: entered promiscuous mode [ 29.674050][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.687152][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.694274][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.701363][ T3316] bridge_slave_1: entered allmulticast mode [ 29.707641][ T3316] bridge_slave_1: entered promiscuous mode [ 29.743888][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.757465][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.764607][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.771693][ T3324] bridge_slave_0: entered allmulticast mode [ 29.778040][ T3324] bridge_slave_0: entered promiscuous mode [ 29.791831][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.802157][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.811385][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.818484][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.825706][ T3324] bridge_slave_1: entered allmulticast mode [ 29.832042][ T3324] bridge_slave_1: entered promiscuous mode [ 29.851000][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.883566][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.890715][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.897829][ T3315] bridge_slave_0: entered allmulticast mode [ 29.904305][ T3315] bridge_slave_0: entered promiscuous mode [ 29.913183][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.920265][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.927336][ T3315] bridge_slave_1: entered allmulticast mode [ 29.933624][ T3315] bridge_slave_1: entered promiscuous mode [ 29.940643][ T3318] team0: Port device team_slave_0 added [ 29.952194][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.970765][ T3318] team0: Port device team_slave_1 added [ 29.977198][ T3316] team0: Port device team_slave_0 added [ 29.983939][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.993485][ T3316] team0: Port device team_slave_1 added [ 30.022495][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.029627][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.036794][ T3323] bridge_slave_0: entered allmulticast mode [ 30.043096][ T3323] bridge_slave_0: entered promiscuous mode [ 30.050695][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.073211][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.080270][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.087390][ T3323] bridge_slave_1: entered allmulticast mode [ 30.093858][ T3323] bridge_slave_1: entered promiscuous mode [ 30.101025][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.110368][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.117327][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.143238][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.154221][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.161201][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.187136][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.198546][ T3324] team0: Port device team_slave_0 added [ 30.213753][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.220810][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.246717][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.257694][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.264671][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.290613][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.302104][ T3324] team0: Port device team_slave_1 added [ 30.320430][ T3315] team0: Port device team_slave_0 added [ 30.329315][ T3315] team0: Port device team_slave_1 added [ 30.340507][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.350783][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.380057][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.386985][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.412916][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.433471][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.440461][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.466363][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.487626][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.494567][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.520470][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.536244][ T3323] team0: Port device team_slave_0 added [ 30.542126][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.549047][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.574948][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.597291][ T3318] hsr_slave_0: entered promiscuous mode [ 30.603205][ T3318] hsr_slave_1: entered promiscuous mode [ 30.609957][ T3323] team0: Port device team_slave_1 added [ 30.624272][ T3316] hsr_slave_0: entered promiscuous mode [ 30.630309][ T3316] hsr_slave_1: entered promiscuous mode [ 30.636106][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.641859][ T3316] Cannot create hsr debugfs directory [ 30.660308][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.667240][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.693140][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.704279][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.711253][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.737125][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.771581][ T3324] hsr_slave_0: entered promiscuous mode [ 30.777481][ T3324] hsr_slave_1: entered promiscuous mode [ 30.783549][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 30.789267][ T3324] Cannot create hsr debugfs directory [ 30.801009][ T3315] hsr_slave_0: entered promiscuous mode [ 30.806865][ T3315] hsr_slave_1: entered promiscuous mode [ 30.812682][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.818443][ T3315] Cannot create hsr debugfs directory [ 30.872526][ T3323] hsr_slave_0: entered promiscuous mode [ 30.878598][ T3323] hsr_slave_1: entered promiscuous mode [ 30.884468][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 30.890231][ T3323] Cannot create hsr debugfs directory [ 31.047084][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.055780][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.064254][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.072839][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.098352][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.106970][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.118677][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.128140][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.151782][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.162901][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.174010][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.184908][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.218894][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.232775][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.241804][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.251459][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.283329][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.294484][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.303686][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.313006][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.327724][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.344751][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.366396][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.385242][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.399016][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.406174][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.414996][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.422108][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.437382][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.444455][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.452929][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.459968][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.492819][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.511277][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.525231][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.542814][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.558065][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565117][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.584576][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.593636][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.613721][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.620804][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.638167][ T2840] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.645234][ T2840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.654984][ T2840] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.662059][ T2840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.671129][ T2840] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678247][ T2840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.686779][ T2840] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.693826][ T2840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.738098][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.751654][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.789778][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.862562][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.887940][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.908327][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.950941][ T3316] veth0_vlan: entered promiscuous mode [ 31.963521][ T3318] veth0_vlan: entered promiscuous mode [ 31.981107][ T3316] veth1_vlan: entered promiscuous mode [ 31.989522][ T3318] veth1_vlan: entered promiscuous mode [ 32.028224][ T3315] veth0_vlan: entered promiscuous mode [ 32.043872][ T3318] veth0_macvtap: entered promiscuous mode [ 32.053277][ T3318] veth1_macvtap: entered promiscuous mode [ 32.068627][ T3323] veth0_vlan: entered promiscuous mode [ 32.079944][ T3315] veth1_vlan: entered promiscuous mode [ 32.089248][ T3316] veth0_macvtap: entered promiscuous mode [ 32.098740][ T3316] veth1_macvtap: entered promiscuous mode [ 32.107610][ T3323] veth1_vlan: entered promiscuous mode [ 32.115089][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.131094][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.152863][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.164007][ T3315] veth0_macvtap: entered promiscuous mode [ 32.170573][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.181793][ T3323] veth0_macvtap: entered promiscuous mode [ 32.188210][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.197405][ T3315] veth1_macvtap: entered promiscuous mode [ 32.204315][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214939][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.222831][ T3323] veth1_macvtap: entered promiscuous mode [ 32.232585][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.259366][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.266714][ T3324] veth0_vlan: entered promiscuous mode [ 32.272463][ T289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283375][ T289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.292701][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.302970][ T1628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.316033][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.325390][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.333473][ T1628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.345358][ T3324] veth1_vlan: entered promiscuous mode [ 32.362129][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.377974][ T1628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.424631][ T1628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.434604][ T3324] veth0_macvtap: entered promiscuous mode [ 32.455938][ T3324] veth1_macvtap: entered promiscuous mode [ 32.466031][ T1628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482656][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.493857][ T289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.508684][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.520662][ T3496] loop3: detected capacity change from 0 to 256 [ 32.533783][ T289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578276][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.622516][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.632822][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.654092][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.673267][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.694828][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.704033][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.779271][ T3514] loop0: detected capacity change from 0 to 128 [ 32.799853][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 32.799879][ T29] audit: type=1326 audit(1765419634.063:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 32.830872][ T3517] bridge1: entered promiscuous mode [ 32.861305][ T3523] audit: audit_backlog=65 > audit_backlog_limit=64 [ 32.867884][ T3523] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 32.875536][ T3523] audit: backlog limit exceeded [ 32.886376][ T29] audit: type=1326 audit(1765419634.073:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 32.909594][ T29] audit: type=1326 audit(1765419634.073:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 32.932822][ T29] audit: type=1326 audit(1765419634.073:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 32.956221][ T29] audit: type=1326 audit(1765419634.073:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 32.979387][ T29] audit: type=1326 audit(1765419634.073:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 33.002592][ T29] audit: type=1326 audit(1765419634.073:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 33.065206][ T3529] loop3: detected capacity change from 0 to 256 [ 33.168281][ T3543] random: crng reseeded on system resumption [ 33.176663][ T3541] loop4: detected capacity change from 0 to 512 [ 33.189639][ T3543] loop1: detected capacity change from 0 to 256 [ 33.244436][ T3541] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.257524][ T3541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.289870][ T3541] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.304388][ T3550] loop3: detected capacity change from 0 to 128 [ 33.314603][ T3550] syz.3.14: attempt to access beyond end of device [ 33.314603][ T3550] loop3: rw=2049, sector=138, nr_sectors = 32 limit=128 [ 33.329086][ T3550] syz.3.14: attempt to access beyond end of device [ 33.329086][ T3550] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 33.375695][ T3553] loop1: detected capacity change from 0 to 1024 [ 33.393358][ T3550] syz.3.14: attempt to access beyond end of device [ 33.393358][ T3550] loop3: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 33.406922][ T3550] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 33.415804][ T3553] ======================================================= [ 33.415804][ T3553] WARNING: The mand mount option has been deprecated and [ 33.415804][ T3553] and is ignored by this kernel. Remove the mand [ 33.415804][ T3553] option from the mount to silence this warning. [ 33.415804][ T3553] ======================================================= [ 33.434025][ T3550] syz.3.14: attempt to access beyond end of device [ 33.434025][ T3550] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 33.464427][ T3550] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 33.485278][ T3550] syz.3.14: attempt to access beyond end of device [ 33.485278][ T3550] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 33.504823][ T3541] EXT4-fs (loop4): 1 truncate cleaned up [ 33.511275][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.524264][ T3550] syz.3.14: attempt to access beyond end of device [ 33.524264][ T3550] loop3: rw=8390657, sector=198, nr_sectors = 2 limit=128 [ 33.537825][ T3550] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 33.543742][ T3562] random: crng reseeded on system resumption [ 33.546877][ T3553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.565370][ T3553] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.565338][ T3550] syz.3.14: attempt to access beyond end of device [ 33.565338][ T3550] loop3: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 33.589123][ T3550] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 33.630291][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.653846][ T3564] loop0: detected capacity change from 0 to 512 [ 33.663916][ T3564] EXT4-fs: Ignoring removed i_version option [ 33.694695][ T3562] loop2: detected capacity change from 0 to 256 [ 33.702044][ T3550] syz.3.14: attempt to access beyond end of device [ 33.702044][ T3550] loop3: rw=2049, sector=218, nr_sectors = 6 limit=128 [ 33.721214][ T3564] ext4: Unknown parameter 'fowner' [ 33.728053][ T3566] loop1: detected capacity change from 0 to 256 [ 33.757040][ T3550] syz.3.14: attempt to access beyond end of device [ 33.757040][ T3550] loop3: rw=8390657, sector=222, nr_sectors = 2 limit=128 [ 33.770593][ T3550] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 33.811671][ T3572] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 33.811680][ T3550] syz.3.14: attempt to access beyond end of device [ 33.811680][ T3550] loop3: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 33.818191][ T3572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 33.818260][ T3572] vhci_hcd vhci_hcd.0: Device attached [ 33.831744][ T3550] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 33.854590][ T3550] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 33.874299][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.883347][ T3550] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 33.894425][ T3550] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 33.899487][ T3573] vhci_hcd: connection closed [ 33.906679][ T2944] vhci_hcd vhci_hcd.0: stop threads [ 33.916663][ T2944] vhci_hcd vhci_hcd.0: release socket [ 33.922102][ T2944] vhci_hcd vhci_hcd.0: disconnect device [ 33.931442][ T3550] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 33.959987][ T3579] random: crng reseeded on system resumption [ 34.036203][ T3587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.069366][ T3585] infiniband !yz!: set active [ 34.074185][ T3585] infiniband !yz!: added team_slave_0 [ 34.091187][ T3585] RDS/IB: !yz!: added [ 34.095182][ T3585] smc: adding ib device !yz! with port count 1 [ 34.102660][ T3589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.115185][ T3585] smc: ib device !yz! port 1 has no pnetid [ 34.149938][ T3589] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.304042][ T3599] capability: warning: `syz.4.25' uses 32-bit capabilities (legacy support in use) [ 34.347168][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 34.541322][ T3602] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 34.603133][ T3610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.31'. [ 34.628255][ T3610] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 34.636714][ T3610] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.31'. [ 34.652108][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 34.683059][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 34.836377][ T3621] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.865894][ T3585] syz.1.24 (3585) used greatest stack depth: 10488 bytes left [ 34.876483][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.907830][ T3628] PID 3628 killed due to inadequate hugepage pool [ 35.034064][ T3644] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 35.040618][ T3644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 35.048178][ T3644] vhci_hcd vhci_hcd.0: Device attached [ 35.049412][ T3640] EXT4-fs: inline encryption not supported [ 35.059260][ T3645] vhci_hcd: connection closed [ 35.059501][ T3640] EXT4-fs: Ignoring removed orlov option [ 35.071909][ T121] vhci_hcd vhci_hcd.2: stop threads [ 35.077120][ T121] vhci_hcd vhci_hcd.2: release socket [ 35.082553][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 35.088763][ T3640] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 35.119974][ T3640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 35.128209][ T3640] System zones: 0-1, 3-12 [ 35.133402][ T3640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.171753][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 35.183689][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 35.192439][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 35.217562][ T3659] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.217787][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.269093][ T3663] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 35.427489][ T3667] !yz!: rxe_newlink: already configured on team_slave_0 [ 36.213769][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 36.306200][ T3703] !yz!: rxe_newlink: already configured on team_slave_0 [ 36.339362][ T3699] 9p: Bad value for 'wfdno' [ 36.403235][ T3705] mmap: syz.1.60 (3705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.431736][ T3707] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 36.438273][ T3707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 36.445799][ T3707] vhci_hcd vhci_hcd.0: Device attached [ 36.477048][ T3711] FAULT_INJECTION: forcing a failure. [ 36.477048][ T3711] name failslab, interval 1, probability 0, space 0, times 1 [ 36.489893][ T3711] CPU: 1 UID: 0 PID: 3711 Comm: syz.4.62 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.489915][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.489928][ T3711] Call Trace: [ 36.489938][ T3711] [ 36.489946][ T3711] __dump_stack+0x1d/0x30 [ 36.490021][ T3711] dump_stack_lvl+0xe8/0x140 [ 36.490108][ T3711] dump_stack+0x15/0x1b [ 36.490125][ T3711] should_fail_ex+0x265/0x280 [ 36.490146][ T3711] should_failslab+0x8c/0xb0 [ 36.490221][ T3711] __kmalloc_noprof+0xb9/0x5a0 [ 36.490240][ T3711] ? iter_file_splice_write+0xf7/0xa20 [ 36.490266][ T3711] iter_file_splice_write+0xf7/0xa20 [ 36.490367][ T3711] ? shmem_file_splice_read+0x5c2/0x600 [ 36.490399][ T3711] ? __pfx_iter_file_splice_write+0x10/0x10 [ 36.490422][ T3711] direct_splice_actor+0x156/0x2a0 [ 36.490446][ T3711] ? shmem_file_open+0x11/0x40 [ 36.490532][ T3711] splice_direct_to_actor+0x312/0x680 [ 36.490558][ T3711] ? __pfx_direct_splice_actor+0x10/0x10 [ 36.490592][ T3711] do_splice_direct+0xda/0x150 [ 36.490613][ T3711] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 36.490635][ T3711] do_sendfile+0x380/0x650 [ 36.490727][ T3711] __x64_sys_sendfile64+0x105/0x150 [ 36.490753][ T3711] x64_sys_call+0x2db1/0x3000 [ 36.490782][ T3711] do_syscall_64+0xd8/0x2a0 [ 36.490881][ T3711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.490905][ T3711] RIP: 0033:0x7f3833daf749 [ 36.490925][ T3711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.490986][ T3711] RSP: 002b:00007f3832817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 36.491002][ T3711] RAX: ffffffffffffffda RBX: 00007f3834005fa0 RCX: 00007f3833daf749 [ 36.491013][ T3711] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000b [ 36.491026][ T3711] RBP: 00007f3832817090 R08: 0000000000000000 R09: 0000000000000000 [ 36.491040][ T3711] R10: 00000000558410e8 R11: 0000000000000246 R12: 0000000000000001 [ 36.491053][ T3711] R13: 00007f3834006038 R14: 00007f3834005fa0 R15: 00007ffd7ab6f1c8 [ 36.491086][ T3711] [ 36.717995][ T3708] vhci_hcd: connection closed [ 36.718477][ T289] vhci_hcd vhci_hcd.0: stop threads [ 36.728577][ T289] vhci_hcd vhci_hcd.0: release socket [ 36.733992][ T289] vhci_hcd vhci_hcd.0: disconnect device [ 36.800089][ T1039] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 37.032765][ T3737] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 37.346284][ T3761] FAULT_INJECTION: forcing a failure. [ 37.346284][ T3761] name failslab, interval 1, probability 0, space 0, times 0 [ 37.359019][ T3761] CPU: 0 UID: 0 PID: 3761 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.359115][ T3761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.359127][ T3761] Call Trace: [ 37.359132][ T3761] [ 37.359138][ T3761] __dump_stack+0x1d/0x30 [ 37.359165][ T3761] dump_stack_lvl+0xe8/0x140 [ 37.359185][ T3761] dump_stack+0x15/0x1b [ 37.359221][ T3761] should_fail_ex+0x265/0x280 [ 37.359321][ T3761] should_failslab+0x8c/0xb0 [ 37.359340][ T3761] __kmalloc_noprof+0xb9/0x5a0 [ 37.359359][ T3761] ? memcg_list_lru_alloc+0x2e5/0x4c0 [ 37.359464][ T3761] memcg_list_lru_alloc+0x2e5/0x4c0 [ 37.359505][ T3761] __memcg_slab_post_alloc_hook+0x1aa/0x530 [ 37.359535][ T3761] kmem_cache_alloc_lru_noprof+0x2cc/0x4c0 [ 37.359565][ T3761] ? __d_alloc+0x37/0x340 [ 37.359586][ T3761] __d_alloc+0x37/0x340 [ 37.359679][ T3761] ? tnum_intersect+0x1c/0x40 [ 37.359698][ T3761] d_alloc+0x2e/0x100 [ 37.359732][ T3761] lookup_one_qstr_excl+0x99/0x250 [ 37.359757][ T3761] start_dirop+0x3e/0x70 [ 37.359808][ T3761] simple_start_creating+0x83/0xb0 [ 37.359836][ T3761] debugfs_start_creating+0xda/0x150 [ 37.359854][ T3761] __debugfs_create_file+0x70/0x2b0 [ 37.359932][ T3761] debugfs_create_file_full+0x3f/0x60 [ 37.359989][ T3761] ? __pfx_macsec_setup+0x10/0x10 [ 37.360011][ T3761] ref_tracker_dir_debugfs+0x100/0x210 [ 37.360048][ T3761] alloc_netdev_mqs+0x1a7/0xa40 [ 37.360106][ T3761] rtnl_create_link+0x239/0x6e0 [ 37.360129][ T3761] rtnl_newlink_create+0x14c/0x620 [ 37.360152][ T3761] ? security_capable+0x83/0x90 [ 37.360256][ T3761] ? netlink_ns_capable+0x86/0xa0 [ 37.360275][ T3761] rtnl_newlink+0xf5b/0x1360 [ 37.360382][ T3761] ? __rcu_read_unlock+0x34/0x70 [ 37.360397][ T3761] ? bpf_trace_run3+0x12c/0x1e0 [ 37.360420][ T3761] ? xas_load+0x413/0x430 [ 37.360441][ T3761] ? __memcg_slab_free_hook+0x135/0x230 [ 37.360490][ T3761] ? __rcu_read_unlock+0x4f/0x70 [ 37.360576][ T3761] ? avc_has_perm_noaudit+0xab/0x130 [ 37.360603][ T3761] ? cred_has_capability+0x210/0x280 [ 37.360666][ T3761] ? selinux_capable+0x31/0x40 [ 37.360682][ T3761] ? security_capable+0x83/0x90 [ 37.360704][ T3761] ? ns_capable+0x7d/0xb0 [ 37.360778][ T3761] ? __pfx_rtnl_newlink+0x10/0x10 [ 37.360802][ T3761] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 37.360898][ T3761] netlink_rcv_skb+0x123/0x220 [ 37.360923][ T3761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.361042][ T3761] rtnetlink_rcv+0x1c/0x30 [ 37.361079][ T3761] netlink_unicast+0x5c0/0x690 [ 37.361102][ T3761] netlink_sendmsg+0x58b/0x6b0 [ 37.361172][ T3761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.361239][ T3761] __sock_sendmsg+0x145/0x180 [ 37.361253][ T3761] ____sys_sendmsg+0x31e/0x4a0 [ 37.361277][ T3761] ___sys_sendmsg+0x17b/0x1d0 [ 37.361309][ T3761] __x64_sys_sendmsg+0xd4/0x160 [ 37.361390][ T3761] x64_sys_call+0x17ba/0x3000 [ 37.361410][ T3761] do_syscall_64+0xd8/0x2a0 [ 37.361442][ T3761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.361459][ T3761] RIP: 0033:0x7f0dcd08f749 [ 37.361470][ T3761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.361535][ T3761] RSP: 002b:00007f0dcbaef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.361549][ T3761] RAX: ffffffffffffffda RBX: 00007f0dcd2e5fa0 RCX: 00007f0dcd08f749 [ 37.361558][ T3761] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 37.361567][ T3761] RBP: 00007f0dcbaef090 R08: 0000000000000000 R09: 0000000000000000 [ 37.361576][ T3761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.361585][ T3761] R13: 00007f0dcd2e6038 R14: 00007f0dcd2e5fa0 R15: 00007ffe5866ca98 [ 37.361650][ T3761] [ 37.768276][ T3761] syz.0.78 (3761) used greatest stack depth: 9432 bytes left [ 37.779571][ T3766] netlink: 'syz.0.79': attribute type 21 has an invalid length. [ 37.787375][ T3766] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 37.794956][ T3766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.79'. [ 37.937617][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 37.937632][ T29] audit: type=1326 audit(1765419639.203:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 37.972165][ T3782] FAULT_INJECTION: forcing a failure. [ 37.972165][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 37.984774][ T3782] CPU: 1 UID: 0 PID: 3782 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.984802][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.984821][ T3782] Call Trace: [ 37.984826][ T3782] [ 37.984832][ T3782] __dump_stack+0x1d/0x30 [ 37.984854][ T3782] dump_stack_lvl+0xe8/0x140 [ 37.984873][ T3782] dump_stack+0x15/0x1b [ 37.984892][ T3782] should_fail_ex+0x265/0x280 [ 37.984957][ T3782] should_failslab+0x8c/0xb0 [ 37.984981][ T3782] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 37.985008][ T3782] ? __d_alloc+0x37/0x340 [ 37.985036][ T3782] ? obj_cgroup_charge_account+0x122/0x1a0 [ 37.985122][ T3782] __d_alloc+0x37/0x340 [ 37.985216][ T3782] ? should_failslab+0x8c/0xb0 [ 37.985242][ T3782] d_alloc_pseudo+0x1e/0x80 [ 37.985272][ T3782] alloc_file_pseudo+0x71/0x160 [ 37.985304][ T3782] ? security_inode_alloc+0x69/0x100 [ 37.985356][ T3782] sock_alloc_file+0x9c/0x1e0 [ 37.985446][ T3782] do_accept+0x1e4/0x3a0 [ 37.985469][ T3782] __sys_accept4+0xbe/0x170 [ 37.985489][ T3782] __x64_sys_accept+0x42/0x50 [ 37.985554][ T3782] x64_sys_call+0x2215/0x3000 [ 37.985581][ T3782] do_syscall_64+0xd8/0x2a0 [ 37.985635][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.985735][ T3782] RIP: 0033:0x7f3833daf749 [ 37.985747][ T3782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.985766][ T3782] RSP: 002b:00007f3832817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 37.985786][ T3782] RAX: ffffffffffffffda RBX: 00007f3834005fa0 RCX: 00007f3833daf749 [ 37.985800][ T3782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 37.985812][ T3782] RBP: 00007f3832817090 R08: 0000000000000000 R09: 0000000000000000 [ 37.985822][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.985836][ T3782] R13: 00007f3834006038 R14: 00007f3834005fa0 R15: 00007ffd7ab6f1c8 [ 37.985852][ T3782] [ 38.013765][ T29] audit: type=1326 audit(1765419639.233:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.031729][ T3786] set_capacity_and_notify: 8 callbacks suppressed [ 38.031744][ T3786] loop4: detected capacity change from 0 to 128 [ 38.033572][ T29] audit: type=1326 audit(1765419639.233:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.040359][ T3786] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.043896][ T29] audit: type=1326 audit(1765419639.233:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.048443][ T3786] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.053999][ T29] audit: type=1326 audit(1765419639.243:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.177903][ T3792] random: crng reseeded on system resumption [ 38.183650][ T29] audit: type=1326 audit(1765419639.243:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.228821][ T3792] loop2: detected capacity change from 0 to 256 [ 38.245558][ T29] audit: type=1326 audit(1765419639.243:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.394100][ T29] audit: type=1326 audit(1765419639.243:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.417127][ T29] audit: type=1326 audit(1765419639.243:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.440332][ T29] audit: type=1326 audit(1765419639.243:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3833daf749 code=0x7ffc0000 [ 38.465908][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.508001][ T3799] loop3: detected capacity change from 0 to 1024 [ 38.546979][ T3804] random: crng reseeded on system resumption [ 38.571137][ T3804] loop2: detected capacity change from 0 to 256 [ 38.949761][ T3831] xt_hashlimit: max too large, truncated to 1048576 [ 39.013035][ T3832] hub 2-0:1.0: USB hub found [ 39.018277][ T3832] hub 2-0:1.0: 8 ports detected [ 39.401319][ T3821] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 39.408915][ T3821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.95'. [ 39.442834][ T3837] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 39.454119][ T3835] loop1: detected capacity change from 0 to 512 [ 39.482565][ T3842] FAULT_INJECTION: forcing a failure. [ 39.482565][ T3842] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.495708][ T3842] CPU: 0 UID: 0 PID: 3842 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.495775][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.495789][ T3842] Call Trace: [ 39.495796][ T3842] [ 39.495805][ T3842] __dump_stack+0x1d/0x30 [ 39.495833][ T3842] dump_stack_lvl+0xe8/0x140 [ 39.495899][ T3842] dump_stack+0x15/0x1b [ 39.495921][ T3842] should_fail_ex+0x265/0x280 [ 39.495947][ T3842] should_fail+0xb/0x20 [ 39.496036][ T3842] should_fail_usercopy+0x1a/0x20 [ 39.496104][ T3842] _copy_from_user+0x1c/0xb0 [ 39.496136][ T3842] ___sys_recvmsg+0xaa/0x370 [ 39.496179][ T3842] do_recvmmsg+0x1ef/0x540 [ 39.496280][ T3842] ? fput+0x8f/0xc0 [ 39.496348][ T3842] __x64_sys_recvmmsg+0xe5/0x170 [ 39.496381][ T3842] x64_sys_call+0x2b75/0x3000 [ 39.496468][ T3842] do_syscall_64+0xd8/0x2a0 [ 39.496507][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.496531][ T3842] RIP: 0033:0x7fd06cb1f749 [ 39.496626][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.496647][ T3842] RSP: 002b:00007fd06b587038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 39.496669][ T3842] RAX: ffffffffffffffda RBX: 00007fd06cd75fa0 RCX: 00007fd06cb1f749 [ 39.496681][ T3842] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000006 [ 39.496691][ T3842] RBP: 00007fd06b587090 R08: 0000000000000000 R09: 0000000000000000 [ 39.496702][ T3842] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000001 [ 39.496714][ T3842] R13: 00007fd06cd76038 R14: 00007fd06cd75fa0 R15: 00007ffc678c1a58 [ 39.496806][ T3842] [ 39.498971][ T3839] loop4: detected capacity change from 0 to 1024 [ 39.616118][ T3835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.700658][ T3835] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.733212][ C0] hrtimer: interrupt took 36454 ns [ 39.746337][ T3835] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm +}[@: corrupted inode contents [ 39.800320][ T3870] random: crng reseeded on system resumption [ 39.806239][ T3872] loop4: detected capacity change from 0 to 512 [ 39.814581][ T3835] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm +}[@: mark_inode_dirty error [ 39.827191][ T3870] loop3: detected capacity change from 0 to 256 [ 39.870468][ T3863] loop2: detected capacity change from 0 to 1024 [ 39.884288][ T3835] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm +}[@: corrupted inode contents [ 39.897724][ T3863] EXT4-fs: Ignoring removed orlov option [ 39.911834][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 39.924111][ T3872] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 39.944036][ T3863] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 39.991262][ T3872] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 40.031701][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.053187][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.087393][ T3324] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 40.124573][ T3324] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 40.134280][ T3863] process 'syz.2.103' launched './file0/file0' with NULL argv: empty string added [ 40.144145][ T3895] random: crng reseeded on system resumption [ 40.163077][ T3895] loop1: detected capacity change from 0 to 256 [ 40.214312][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.358479][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 40.384870][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.430496][ T3917] hsr_slave_1 (unregistering): left promiscuous mode [ 40.449204][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 40.470861][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.494900][ T3922] hsr_slave_1 (unregistering): left promiscuous mode [ 40.514208][ T3924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.514999][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.546577][ T3924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.557430][ T3927] random: crng reseeded on system resumption [ 40.601834][ T3924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.642802][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.727487][ T3936] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 40.734119][ T3936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.741678][ T3936] vhci_hcd vhci_hcd.0: Device attached [ 40.751091][ T52] bridge_slave_1: left allmulticast mode [ 40.756753][ T52] bridge_slave_1: left promiscuous mode [ 40.762494][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.779229][ T52] bridge_slave_0: left allmulticast mode [ 40.784979][ T52] bridge_slave_0: left promiscuous mode [ 40.790706][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.851177][ T3944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 40.911502][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.922263][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.931671][ T52] bond0 (unregistering): Released all slaves [ 40.969182][ T3938] vhci_hcd: connection closed [ 40.969466][ T12] vhci_hcd vhci_hcd.1: stop threads [ 40.979447][ T12] vhci_hcd vhci_hcd.1: release socket [ 40.984927][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 40.990621][ T3423] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 40.997983][ T3423] usb 3-1: enqueue for inactive port 0 [ 41.015271][ T3423] usb 3-1: enqueue for inactive port 0 [ 41.024321][ T3423] usb 3-1: enqueue for inactive port 0 [ 41.084070][ T52] hsr_slave_0: left promiscuous mode [ 41.105141][ T52] hsr_slave_1: left promiscuous mode [ 41.105181][ T3423] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 41.114982][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.117065][ T3956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 41.124263][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.145320][ T3963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.126'. [ 41.147405][ T3961] SELinux: failed to load policy [ 41.170281][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.177818][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.298259][ T52] veth1_macvtap: left promiscuous mode [ 41.308508][ T3980] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.309776][ T52] veth0_macvtap: left promiscuous mode [ 41.333010][ T52] veth1_vlan: left promiscuous mode [ 41.338501][ T3980] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.354109][ T52] veth0_vlan: left promiscuous mode [ 41.485039][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.713908][ T3989] netlink: 'syz.1.132': attribute type 13 has an invalid length. [ 42.019847][ T52] team0 (unregistering): Port device team_slave_1 removed [ 42.041057][ T52] team0 (unregistering): Port device team_slave_0 removed [ 42.071186][ T4001] random: crng reseeded on system resumption [ 42.273906][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.281204][ T3989] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.373498][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.384526][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.502899][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 42.514054][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.514083][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.514095][ T3316] Call Trace: [ 42.514101][ T3316] [ 42.514110][ T3316] __dump_stack+0x1d/0x30 [ 42.514131][ T3316] dump_stack_lvl+0xe8/0x140 [ 42.514197][ T3316] dump_stack+0x15/0x1b [ 42.514220][ T3316] dump_header+0x81/0x240 [ 42.514323][ T3316] oom_kill_process+0x295/0x350 [ 42.514349][ T3316] out_of_memory+0x97b/0xb80 [ 42.514417][ T3316] try_charge_memcg+0x610/0xa10 [ 42.514494][ T3316] charge_memcg+0x51/0xc0 [ 42.514550][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 42.514618][ T3316] __read_swap_cache_async+0x17b/0x2d0 [ 42.514699][ T3316] swap_cluster_readahead+0x262/0x3c0 [ 42.514738][ T3316] swapin_readahead+0xde/0x820 [ 42.514793][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 42.514819][ T3316] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 42.514899][ T3316] ? __list_add_valid_or_report+0x38/0xe0 [ 42.514930][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 42.515011][ T3316] ? swap_cache_get_folio+0x277/0x280 [ 42.515042][ T3316] do_swap_page+0x2b4/0x21e0 [ 42.515071][ T3316] ? _raw_spin_unlock+0x26/0x50 [ 42.515093][ T3316] ? __schedule+0x85f/0xcd0 [ 42.515167][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 42.515215][ T3316] handle_mm_fault+0x9d8/0x2c60 [ 42.515279][ T3316] do_user_addr_fault+0x630/0x1080 [ 42.515310][ T3316] exc_page_fault+0x62/0xa0 [ 42.515335][ T3316] asm_exc_page_fault+0x26/0x30 [ 42.515353][ T3316] RIP: 0033:0x7f2eebe41fc5 [ 42.515367][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 42.515536][ T3316] RSP: 002b:00007ffccc51e3b8 EFLAGS: 00010246 [ 42.515550][ T3316] RAX: 0000000000000000 RBX: 0000000000000050 RCX: 00007f2eebe41fc3 [ 42.515627][ T3316] RDX: 00007ffccc51e3d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.515637][ T3316] RBP: 00007ffccc51e43c R08: 00000000198f1d40 R09: 0000000000000000 [ 42.515648][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 42.515658][ T3316] R13: 00000000000927c0 R14: 000000000000a47e R15: 00007ffccc51e490 [ 42.515719][ T3316] [ 42.515726][ T3316] memory: usage 307196kB, limit 307200kB, failcnt 274 [ 42.618848][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.621143][ T3316] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 42.621160][ T3316] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 42.626519][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.631162][ T3316] Memory cgroup stats for /syz1: [ 42.788792][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.793276][ T3316] cache 0 [ 42.793835][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.801225][ T3316] rss 4096 [ 42.814256][ T3316] shmem 0 [ 42.817266][ T3316] mapped_file 0 [ 42.820732][ T3316] dirty 0 [ 42.823660][ T3316] writeback 4096 [ 42.827191][ T3316] workingset_refault_anon 92 [ 42.831802][ T3316] workingset_refault_file 0 [ 42.836319][ T3316] swap 245760 [ 42.839607][ T3316] swapcached 4096 [ 42.843278][ T3316] pgpgin 2593 [ 42.846553][ T3316] pgpgout 2592 [ 42.849950][ T3316] pgfault 4023 [ 42.853313][ T3316] pgmajfault 70 [ 42.856754][ T3316] inactive_anon 4096 [ 42.860658][ T3316] active_anon 0 [ 42.864130][ T3316] inactive_file 0 [ 42.867747][ T3316] active_file 0 [ 42.871214][ T3316] unevictable 0 [ 42.874673][ T3316] hierarchical_memory_limit 314572800 [ 42.880064][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 42.886247][ T3316] total_cache 0 [ 42.889687][ T3316] total_rss 4096 [ 42.893249][ T3316] total_shmem 0 [ 42.896700][ T3316] total_mapped_file 0 [ 42.900719][ T3316] total_dirty 0 [ 42.904254][ T3316] total_writeback 4096 [ 42.908364][ T3316] total_workingset_refault_anon 92 [ 42.913488][ T3316] total_workingset_refault_file 0 [ 42.918509][ T3316] total_swap 245760 [ 42.922327][ T3316] total_swapcached 4096 [ 42.926478][ T3316] total_pgpgin 2593 [ 42.930297][ T3316] total_pgpgout 2592 [ 42.934245][ T3316] total_pgfault 4023 [ 42.938131][ T3316] total_pgmajfault 70 [ 42.942116][ T3316] total_inactive_anon 4096 [ 42.946550][ T3316] total_active_anon 0 [ 42.950549][ T3316] total_inactive_file 0 [ 42.954689][ T3316] total_active_file 0 [ 42.958652][ T3316] total_unevictable 0 [ 42.962717][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.132,pid=3988,uid=0 [ 42.977241][ T3316] Memory cgroup out of memory: Killed process 3988 (syz.1.132) total-vm:98332kB, anon-rss:1136kB, file-rss:26408kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 42.998816][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.022082][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.040298][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.057424][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.091212][ T3996] Failed to initialize the IGMP autojoin socket (err -12) [ 43.120988][ T3990] syz.1.132 (3990) used greatest stack depth: 7232 bytes left [ 43.154492][ T3940] chnl_net:caif_netlink_parms(): no params data found [ 43.231509][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.238587][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.273873][ T3940] bridge_slave_0: entered allmulticast mode [ 43.312178][ T4030] set_capacity_and_notify: 6 callbacks suppressed [ 43.312189][ T4030] loop3: detected capacity change from 0 to 128 [ 43.313791][ T3940] bridge_slave_0: entered promiscuous mode [ 43.337025][ T4030] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.342820][ T4032] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.363709][ T4030] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.398297][ T4035] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 43.408982][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.416118][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.417330][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 43.417344][ T29] audit: type=1400 audit(2000000004.650:907): avc: denied { ioctl } for pid=4033 comm="syz.0.142" path="socket:[7201]" dev="sockfs" ino=7201 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.453779][ T29] audit: type=1400 audit(2000000004.650:908): avc: denied { relabelfrom } for pid=4033 comm="syz.0.142" name="RAW" dev="sockfs" ino=7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.476508][ T29] audit: type=1400 audit(2000000004.650:909): avc: denied { mac_admin } for pid=4033 comm="syz.0.142" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.477012][ T3940] bridge_slave_1: entered allmulticast mode [ 43.497384][ T29] audit: type=1400 audit(2000000004.660:910): avc: denied { relabelto } for pid=4033 comm="syz.0.142" name="RAW" dev="sockfs" ino=7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0" [ 43.534720][ T4032] loop2: detected capacity change from 0 to 512 [ 43.538605][ T3940] bridge_slave_1: entered promiscuous mode [ 43.573459][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.582453][ T4029] bridge_slave_1: left allmulticast mode [ 43.588080][ T4029] bridge_slave_1: left promiscuous mode [ 43.594144][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.600963][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.614722][ T4029] bridge_slave_0: left allmulticast mode [ 43.620388][ T4029] bridge_slave_0: left promiscuous mode [ 43.622132][ T4032] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.626102][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.644764][ T4042] random: crng reseeded on system resumption [ 43.656067][ T4042] loop3: detected capacity change from 0 to 256 [ 43.712106][ T3940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.721667][ T4036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4036 comm=syz.1.139 [ 43.723048][ T3940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.755163][ T29] audit: type=1400 audit(2000000005.000:911): avc: denied { read write } for pid=4038 comm="syz.0.143" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.785867][ T29] audit: type=1400 audit(2000000005.000:912): avc: denied { open } for pid=4038 comm="syz.0.143" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.818578][ T3940] team0: Port device team_slave_0 added [ 43.828738][ T3940] team0: Port device team_slave_1 added [ 43.869212][ T3940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.876287][ T3940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.902231][ T3940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.919778][ T3940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.926760][ T3940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.935888][ T29] audit: type=1400 audit(2000000005.170:913): avc: denied { getopt } for pid=4053 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.952706][ T3940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.999498][ T3940] hsr_slave_0: entered promiscuous mode [ 44.000425][ T4057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 44.006793][ T3940] hsr_slave_1: entered promiscuous mode [ 44.011604][ T4057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.011703][ T4057] vhci_hcd vhci_hcd.0: Device attached [ 44.017752][ T3940] debugfs: 'hsr0' already exists in 'hsr' [ 44.026945][ T4058] vhci_hcd: connection closed [ 44.030207][ T3940] Cannot create hsr debugfs directory [ 44.040961][ T2944] vhci_hcd vhci_hcd.0: stop threads [ 44.051230][ T2944] vhci_hcd vhci_hcd.0: release socket [ 44.056748][ T2944] vhci_hcd vhci_hcd.0: disconnect device [ 44.123025][ T3940] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.131723][ T3940] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.140697][ T3940] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.149792][ T3940] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.160289][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.172384][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.179456][ T3940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.186740][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.193815][ T3940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.200502][ T4071] loop2: detected capacity change from 0 to 4096 [ 44.210001][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.224686][ T3940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.226227][ T29] audit: type=1400 audit(2000000005.470:914): avc: denied { read append } for pid=4070 comm="syz.2.151" path="/34/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.255570][ T29] audit: type=1326 audit(2000000005.490:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06cb1f749 code=0x7ffc0000 [ 44.255697][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.278340][ T29] audit: type=1326 audit(2000000005.490:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06cb1f749 code=0x7ffc0000 [ 44.308483][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.321412][ T3940] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.324767][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.335689][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.353036][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.353089][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.371020][ T3940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.381375][ T3940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.394588][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.442751][ T4081] loop2: detected capacity change from 0 to 128 [ 44.445162][ T3940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.452188][ T4081] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.468346][ T4081] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.564891][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.607150][ T3940] veth0_vlan: entered promiscuous mode [ 44.628692][ T3940] veth1_vlan: entered promiscuous mode [ 44.644451][ T4102] loop2: detected capacity change from 0 to 1024 [ 44.673217][ T3940] veth0_macvtap: entered promiscuous mode [ 44.681201][ T4097] __nla_validate_parse: 10 callbacks suppressed [ 44.681213][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 44.701049][ T3940] veth1_macvtap: entered promiscuous mode [ 44.711358][ T3940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.731071][ T3940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.741808][ T121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.757004][ T121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.772146][ T121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.789917][ T121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.870344][ T4111] loop5: detected capacity change from 0 to 4096 [ 44.883448][ T4111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.923374][ T4111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.951692][ T4111] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.028623][ T4123] loop1: detected capacity change from 0 to 512 [ 45.045238][ T4120] lo speed is unknown, defaulting to 1000 [ 45.075313][ T4120] lo speed is unknown, defaulting to 1000 [ 45.092924][ T4123] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 45.112333][ T4120] lo speed is unknown, defaulting to 1000 [ 45.130254][ T4123] EXT4-fs (loop1): invalid journal inode [ 45.130723][ T4120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.135971][ T4123] EXT4-fs (loop1): can't get journal size [ 45.144213][ T4120] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 45.163377][ T4123] EXT4-fs (loop1): 1 truncate cleaned up [ 45.174678][ T4120] lo speed is unknown, defaulting to 1000 [ 45.179411][ T4123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.180932][ T4120] lo speed is unknown, defaulting to 1000 [ 45.199184][ T4120] lo speed is unknown, defaulting to 1000 [ 45.205526][ T4120] lo speed is unknown, defaulting to 1000 [ 45.211730][ T4120] lo speed is unknown, defaulting to 1000 [ 45.217886][ T4120] lo speed is unknown, defaulting to 1000 [ 45.272050][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.302393][ T4128] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 45.308921][ T4128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.316515][ T4128] vhci_hcd vhci_hcd.0: Device attached [ 45.323612][ T4129] vhci_hcd: connection closed [ 45.323742][ T2944] vhci_hcd vhci_hcd.2: stop threads [ 45.333687][ T2944] vhci_hcd vhci_hcd.2: release socket [ 45.339057][ T2944] vhci_hcd vhci_hcd.2: disconnect device [ 45.463136][ T4150] can0: slcan on ptm1. [ 45.509891][ T4150] can0 (unregistered): slcan off ptm1. [ 45.516723][ T4150] Falling back ldisc for ptm1. [ 45.547549][ T4161] gtp0: entered promiscuous mode [ 45.552546][ T4161] gtp0: entered allmulticast mode [ 45.711761][ T3940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.989249][ T4184] loop2: detected capacity change from 0 to 1024 [ 46.095144][ T4195] FAULT_INJECTION: forcing a failure. [ 46.095144][ T4195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.108266][ T4195] CPU: 1 UID: 0 PID: 4195 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.108297][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.108307][ T4195] Call Trace: [ 46.108312][ T4195] [ 46.108350][ T4195] __dump_stack+0x1d/0x30 [ 46.108369][ T4195] dump_stack_lvl+0xe8/0x140 [ 46.108388][ T4195] dump_stack+0x15/0x1b [ 46.108403][ T4195] should_fail_ex+0x265/0x280 [ 46.108439][ T4195] should_fail+0xb/0x20 [ 46.108463][ T4195] should_fail_usercopy+0x1a/0x20 [ 46.108484][ T4195] _copy_from_user+0x1c/0xb0 [ 46.108507][ T4195] copy_clone_args_from_user+0x14f/0x490 [ 46.108531][ T4195] ? kstrtouint+0x76/0xc0 [ 46.108565][ T4195] __se_sys_clone3+0x6f/0x200 [ 46.108662][ T4195] __x64_sys_clone3+0x31/0x40 [ 46.108681][ T4195] x64_sys_call+0x2c0f/0x3000 [ 46.108702][ T4195] do_syscall_64+0xd8/0x2a0 [ 46.108731][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.108821][ T4195] RIP: 0033:0x7fd06cb1f749 [ 46.108833][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.108847][ T4195] RSP: 002b:00007fd06b586f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 46.108863][ T4195] RAX: ffffffffffffffda RBX: 00000000000000a0 RCX: 00007fd06cb1f749 [ 46.108889][ T4195] RDX: 00007fd06b586f20 RSI: 00000000000000a0 RDI: 00007fd06b586f20 [ 46.108899][ T4195] RBP: 00007fd06b587090 R08: 0000000000000000 R09: 00000000000000a0 [ 46.108909][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.108920][ T4195] R13: 00007fd06cd76038 R14: 00007fd06cd75fa0 R15: 00007ffc678c1a58 [ 46.108989][ T4195] [ 46.384968][ T4201] loop1: detected capacity change from 0 to 1024 [ 46.426541][ T4201] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 46.471177][ T4207] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 46.477700][ T4207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.485360][ T4207] vhci_hcd vhci_hcd.0: Device attached [ 46.491398][ T4211] vhci_hcd: connection closed [ 46.491776][ T983] vhci_hcd vhci_hcd.0: stop threads [ 46.501809][ T983] vhci_hcd vhci_hcd.0: release socket [ 46.507320][ T983] vhci_hcd vhci_hcd.0: disconnect device [ 46.521192][ T4201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.566144][ T4223] random: crng reseeded on system resumption [ 46.574677][ T4201] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.189: Allocating blocks 497-513 which overlap fs metadata [ 46.588953][ T4201] EXT4-fs (loop1): Remounting filesystem read-only [ 46.604375][ T4224] hub 9-0:1.0: USB hub found [ 46.609170][ T4224] hub 9-0:1.0: 8 ports detected [ 46.617909][ T4200] EXT4-fs (loop1): pa ffff888107a940e0: logic 48, phys. 177, len 21 [ 46.648855][ T4224] tmpfs: Bad value for 'mpol' [ 46.654193][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.194'. [ 46.685959][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.705809][ T4231] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.718136][ T4231] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.760831][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.779923][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 46.788737][ T4237] netlink: 312 bytes leftover after parsing attributes in process `syz.1.200'. [ 46.824284][ T4237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.847269][ T4237] random: crng reseeded on system resumption [ 46.853547][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 46.858231][ T4237] netlink: 56 bytes leftover after parsing attributes in process `syz.1.200'. [ 46.884065][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 46.935890][ T4259] siw: device registration error -23 [ 47.015797][ T4269] random: crng reseeded on system resumption [ 47.172940][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 47.304559][ T4285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.313135][ T4285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.321371][ T4281] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 47.326630][ T4281] loop2: p1 start 460800 is beyond EOD, truncated [ 47.333118][ T4281] loop2: p2 size 83886080 extends beyond EOD, truncated [ 47.341847][ T4281] loop2: p5 start 460800 is beyond EOD, truncated [ 47.348405][ T4281] loop2: p6 size 83886080 extends beyond EOD, truncated [ 47.362430][ T4281] FAULT_INJECTION: forcing a failure. [ 47.362430][ T4281] name failslab, interval 1, probability 0, space 0, times 0 [ 47.375161][ T4281] CPU: 1 UID: 0 PID: 4281 Comm: syz.2.214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.375190][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.375201][ T4281] Call Trace: [ 47.375207][ T4281] [ 47.375213][ T4281] __dump_stack+0x1d/0x30 [ 47.375236][ T4281] dump_stack_lvl+0xe8/0x140 [ 47.375290][ T4281] dump_stack+0x15/0x1b [ 47.375311][ T4281] should_fail_ex+0x265/0x280 [ 47.375371][ T4281] should_failslab+0x8c/0xb0 [ 47.375399][ T4281] __kvmalloc_node_noprof+0x149/0x6b0 [ 47.375485][ T4281] ? listxattr+0x4f/0x260 [ 47.375547][ T4281] listxattr+0x4f/0x260 [ 47.375582][ T4281] __x64_sys_flistxattr+0xc8/0x120 [ 47.375617][ T4281] x64_sys_call+0x2a78/0x3000 [ 47.375652][ T4281] do_syscall_64+0xd8/0x2a0 [ 47.375684][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.375711][ T4281] RIP: 0033:0x7fd06cb1f749 [ 47.375729][ T4281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.375751][ T4281] RSP: 002b:00007fd06b587038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 47.375796][ T4281] RAX: ffffffffffffffda RBX: 00007fd06cd75fa0 RCX: 00007fd06cb1f749 [ 47.375864][ T4281] RDX: 000000000000003e RSI: 0000200000000600 RDI: 0000000000000007 [ 47.375880][ T4281] RBP: 00007fd06b587090 R08: 0000000000000000 R09: 0000000000000000 [ 47.375896][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.375913][ T4281] R13: 00007fd06cd76038 R14: 00007fd06cd75fa0 R15: 00007ffc678c1a58 [ 47.375935][ T4281] [ 47.661816][ T4293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.688796][ T4293] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.703346][ T4297] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.714784][ T4297] EXT4-fs (loop5): 1 truncate cleaned up [ 47.721514][ T4297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.735202][ T4293] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.219: corrupted inode contents [ 47.748871][ T4293] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.219: mark_inode_dirty error [ 47.796849][ T4293] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.219: corrupted inode contents [ 47.828813][ T4293] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.219: mark_inode_dirty error [ 47.846658][ T4302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 47.853167][ T4302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.860697][ T4302] vhci_hcd vhci_hcd.0: Device attached [ 47.869832][ T4293] 9p: Bad value for 'wfdno' [ 47.877996][ T4305] vhci_hcd: connection closed [ 47.890156][ T983] vhci_hcd vhci_hcd.1: stop threads [ 47.900135][ T983] vhci_hcd vhci_hcd.1: release socket [ 47.905563][ T983] vhci_hcd vhci_hcd.1: disconnect device [ 47.937933][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.001910][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 48.007465][ T4303] lo speed is unknown, defaulting to 1000 [ 48.073764][ T4303] chnl_net:caif_netlink_parms(): no params data found [ 48.127159][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.134256][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.141697][ T4303] bridge_slave_0: entered allmulticast mode [ 48.149706][ T4303] bridge_slave_0: entered promiscuous mode [ 48.156789][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.163888][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.171438][ T4303] bridge_slave_1: entered allmulticast mode [ 48.177976][ T4303] bridge_slave_1: entered promiscuous mode [ 48.198408][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.209131][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.230245][ T4303] team0: Port device team_slave_0 added [ 48.236967][ T4303] team0: Port device team_slave_1 added [ 48.250678][ T4327] FAULT_INJECTION: forcing a failure. [ 48.250678][ T4327] name failslab, interval 1, probability 0, space 0, times 0 [ 48.263368][ T4327] CPU: 0 UID: 0 PID: 4327 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.263391][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.263403][ T4327] Call Trace: [ 48.263410][ T4327] [ 48.263418][ T4327] __dump_stack+0x1d/0x30 [ 48.263446][ T4327] dump_stack_lvl+0xe8/0x140 [ 48.263532][ T4327] dump_stack+0x15/0x1b [ 48.263554][ T4327] should_fail_ex+0x265/0x280 [ 48.263590][ T4327] should_failslab+0x8c/0xb0 [ 48.263611][ T4327] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 48.263637][ T4327] ? __alloc_skb+0x324/0x4d0 [ 48.263663][ T4327] __alloc_skb+0x324/0x4d0 [ 48.263738][ T4327] ? __alloc_skb+0x24d/0x4d0 [ 48.263759][ T4327] __ip_append_data+0x1935/0x2440 [ 48.263788][ T4327] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 48.263818][ T4327] ip_append_data+0xd6/0x130 [ 48.263844][ T4327] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 48.263881][ T4327] udp_sendmsg+0x36e/0x13c0 [ 48.263993][ T4327] ? __kernel_text_address+0xd/0x40 [ 48.264015][ T4327] ? unwind_get_return_address+0x16/0x40 [ 48.264040][ T4327] ? perf_callchain_kernel+0x2f0/0x350 [ 48.264064][ T4327] ? __rcu_read_unlock+0x4f/0x70 [ 48.264086][ T4327] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 48.264175][ T4327] ? avc_has_perm+0xf7/0x180 [ 48.264260][ T4327] ? __pfx_udp_sendmsg+0x10/0x10 [ 48.264286][ T4327] inet_sendmsg+0xac/0xd0 [ 48.264306][ T4327] __sock_sendmsg+0x102/0x180 [ 48.264327][ T4327] __sys_sendto+0x268/0x330 [ 48.264363][ T4327] __x64_sys_sendto+0x76/0x90 [ 48.264400][ T4327] x64_sys_call+0x29a7/0x3000 [ 48.264420][ T4327] do_syscall_64+0xd8/0x2a0 [ 48.264523][ T4327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.264544][ T4327] RIP: 0033:0x7fd06cb1f749 [ 48.264560][ T4327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.264648][ T4327] RSP: 002b:00007fd06b566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 48.264664][ T4327] RAX: ffffffffffffffda RBX: 00007fd06cd76090 RCX: 00007fd06cb1f749 [ 48.264682][ T4327] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 000000000000000a [ 48.264695][ T4327] RBP: 00007fd06b566090 R08: 0000000000000000 R09: 0000000000000000 [ 48.264708][ T4327] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.264740][ T4327] R13: 00007fd06cd76128 R14: 00007fd06cd76090 R15: 00007ffc678c1a58 [ 48.264758][ T4327] [ 48.265804][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.299068][ T4329] xt_TCPMSS: Only works on TCP SYN packets [ 48.300966][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.543254][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.555818][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.562822][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.588767][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.608131][ T4337] set_capacity_and_notify: 12 callbacks suppressed [ 48.608198][ T4337] loop1: detected capacity change from 0 to 1024 [ 48.621123][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 48.621136][ T29] audit: type=1326 audit(2000000009.870:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 48.651724][ T29] audit: type=1326 audit(2000000009.880:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 48.675164][ T29] audit: type=1326 audit(2000000009.880:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 48.698561][ T29] audit: type=1326 audit(2000000009.880:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 48.722082][ T29] audit: type=1326 audit(2000000009.880:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0dcd08f783 code=0x7ffc0000 [ 48.745248][ T29] audit: type=1326 audit(2000000009.880:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0dcd08e1ff code=0x7ffc0000 [ 48.768391][ T29] audit: type=1326 audit(2000000009.880:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0dcd08f7d7 code=0x7ffc0000 [ 48.791922][ T29] audit: type=1326 audit(2000000009.900:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dcd08df90 code=0x7ffc0000 [ 48.815474][ T29] audit: type=1326 audit(2000000009.900:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0dcd08e3aa code=0x7ffc0000 [ 48.838907][ T29] audit: type=1326 audit(2000000009.900:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcd08f749 code=0x7ffc0000 [ 48.874246][ T4303] hsr_slave_0: entered promiscuous mode [ 48.887261][ T4303] hsr_slave_1: entered promiscuous mode [ 48.893736][ T4303] debugfs: 'hsr0' already exists in 'hsr' [ 48.899480][ T4303] Cannot create hsr debugfs directory [ 48.929701][ T4351] loop2: detected capacity change from 0 to 128 [ 48.937281][ T4351] /dev/loop2: Can't open blockdev [ 49.186767][ T4358] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.333629][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 49.356995][ T3940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.442683][ T4382] loop5: detected capacity change from 0 to 2048 [ 49.458287][ T4385] random: crng reseeded on system resumption [ 49.471170][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 49.480212][ T4387] bridge_slave_1: left allmulticast mode [ 49.483802][ T4382] loop5: p2 p3 p7 [ 49.485849][ T4387] bridge_slave_1: left promiscuous mode [ 49.486117][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.503066][ T4387] bridge_slave_0: left allmulticast mode [ 49.508799][ T4387] bridge_slave_0: left promiscuous mode [ 49.514696][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.608780][ T4303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.633610][ T4303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.655211][ T4391] Cannot find set identified by id 0 to match [ 49.666957][ T4303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.683369][ T4303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.715737][ T4397] siw: device registration error -23 [ 49.786205][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.804586][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.815664][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.822818][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.846683][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.853795][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.878175][ T4303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.888682][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.918799][ T4422] FAULT_INJECTION: forcing a failure. [ 49.918799][ T4422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.932299][ T4422] CPU: 0 UID: 0 PID: 4422 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.932380][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.932394][ T4422] Call Trace: [ 49.932400][ T4422] [ 49.932408][ T4422] __dump_stack+0x1d/0x30 [ 49.932446][ T4422] dump_stack_lvl+0xe8/0x140 [ 49.932466][ T4422] dump_stack+0x15/0x1b [ 49.932549][ T4422] should_fail_ex+0x265/0x280 [ 49.932576][ T4422] should_fail+0xb/0x20 [ 49.932601][ T4422] should_fail_usercopy+0x1a/0x20 [ 49.932621][ T4422] strncpy_from_user+0x27/0x260 [ 49.932650][ T4422] getname_flags+0xae/0x3b0 [ 49.932689][ T4422] do_sys_openat2+0x60/0x150 [ 49.932722][ T4422] __x64_sys_openat+0xf2/0x120 [ 49.932755][ T4422] x64_sys_call+0x2b07/0x3000 [ 49.932850][ T4422] do_syscall_64+0xd8/0x2a0 [ 49.933025][ T4422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.933043][ T4422] RIP: 0033:0x7f2eebe0df90 [ 49.933056][ T4422] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 49.933071][ T4422] RSP: 002b:00007f2eea876b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 49.933111][ T4422] RAX: ffffffffffffffda RBX: 0000000000000a82 RCX: 00007f2eebe0df90 [ 49.933125][ T4422] RDX: 0000000000000a82 RSI: 00007f2eea876c10 RDI: 00000000ffffff9c [ 49.933135][ T4422] RBP: 00007f2eea876c10 R08: 0000000000000000 R09: 0000000000000000 [ 49.933145][ T4422] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 49.933200][ T4422] R13: 00007f2eec066038 R14: 00007f2eec065fa0 R15: 00007ffccc51e078 [ 49.933217][ T4422] [ 50.181045][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.190256][ T4435] loop1: detected capacity change from 0 to 256 [ 50.203394][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 50.220849][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.247469][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.268502][ T4445] random: crng reseeded on system resumption [ 50.278204][ T4445] loop2: detected capacity change from 0 to 256 [ 50.353232][ T4458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.256'. [ 50.423900][ T4463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 50.458999][ T4303] veth0_vlan: entered promiscuous mode [ 50.475835][ T4303] veth1_vlan: entered promiscuous mode [ 50.502785][ T4303] veth0_macvtap: entered promiscuous mode [ 50.522928][ T4303] veth1_macvtap: entered promiscuous mode [ 50.532522][ T4463] sctp: [Deprecated]: syz.1.256 (pid 4463) Use of int in max_burst socket option. [ 50.532522][ T4463] Use struct sctp_assoc_value instead [ 50.534370][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.567413][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.585732][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.599244][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.646064][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654797][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.685342][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 50.752503][ T4469] loop6: detected capacity change from 0 to 128 [ 50.774220][ T4469] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.791748][ T4469] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.839648][ T4303] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.896114][ T4490] FAULT_INJECTION: forcing a failure. [ 50.896114][ T4490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.909383][ T4490] CPU: 0 UID: 0 PID: 4490 Comm: syz.2.264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.909490][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.909502][ T4490] Call Trace: [ 50.909508][ T4490] [ 50.909514][ T4490] __dump_stack+0x1d/0x30 [ 50.909578][ T4490] dump_stack_lvl+0xe8/0x140 [ 50.909598][ T4490] dump_stack+0x15/0x1b [ 50.909614][ T4490] should_fail_ex+0x265/0x280 [ 50.909640][ T4490] should_fail_alloc_page+0xf2/0x100 [ 50.909745][ T4490] __alloc_frozen_pages_noprof+0x109/0x360 [ 50.909789][ T4490] alloc_pages_mpol+0xb3/0x260 [ 50.909821][ T4490] alloc_pages_noprof+0x90/0x130 [ 50.909929][ T4490] pte_alloc_one+0x1e/0xd0 [ 50.909969][ T4490] __pte_alloc+0x32/0x2c0 [ 50.910011][ T4490] handle_mm_fault+0x1c8e/0x2c60 [ 50.910105][ T4490] do_user_addr_fault+0x630/0x1080 [ 50.910226][ T4490] ? ksys_mmap_pgoff+0xc2/0x310 [ 50.910247][ T4490] ? __x64_sys_mmap+0x49/0x70 [ 50.910304][ T4490] exc_page_fault+0x62/0xa0 [ 50.910325][ T4490] asm_exc_page_fault+0x26/0x30 [ 50.910370][ T4490] RIP: 0033:0x7fd06c9e09e6 [ 50.910392][ T4490] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 50.910405][ T4490] RSP: 002b:00007fd06b5864a0 EFLAGS: 00010246 [ 50.910417][ T4490] RAX: 0000000000000001 RBX: 00007fd06b586540 RCX: 0000000000000101 [ 50.910427][ T4490] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007fd06b5865e0 [ 50.910437][ T4490] RBP: 0000000000000102 R08: 00007fd063167000 R09: 0000000000000000 [ 50.910455][ T4490] R10: 0000000000000000 R11: 00007fd06b586550 R12: 0000000000000001 [ 50.910464][ T4490] R13: 00007fd06cbbfc40 R14: 0000000000000000 R15: 00007fd06b5865e0 [ 50.910554][ T4490] [ 51.085311][ T4490] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 51.096186][ T4492] ================================================================== [ 51.104286][ T4492] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 51.111584][ T4492] [ 51.113902][ T4492] write to 0xffff8881329ba300 of 8 bytes by task 4486 on cpu 1: [ 51.121521][ T4492] mas_wmb_replace+0x208/0xfa0 [ 51.126277][ T4492] mas_wr_store_entry+0x13e3/0x2750 [ 51.131475][ T4492] mas_store_prealloc+0x760/0xa90 [ 51.136501][ T4492] vma_iter_store_new+0x1c5/0x200 [ 51.141526][ T4492] vma_complete+0x125/0x580 [ 51.146032][ T4492] __split_vma+0x5e3/0x660 [ 51.150442][ T4492] vma_modify+0xbee/0xd50 [ 51.154779][ T4492] vma_modify_flags+0x10c/0x190 [ 51.159661][ T4492] mprotect_fixup+0x30f/0x5e0 [ 51.164340][ T4492] do_mprotect_pkey+0x6d6/0x980 [ 51.169190][ T4492] __x64_sys_mprotect+0x48/0x60 [ 51.174035][ T4492] x64_sys_call+0x2c3b/0x3000 [ 51.178711][ T4492] do_syscall_64+0xd8/0x2a0 [ 51.183230][ T4492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.189119][ T4492] [ 51.191437][ T4492] read to 0xffff8881329ba300 of 8 bytes by task 4492 on cpu 0: [ 51.198971][ T4492] mas_state_walk+0x485/0x650 [ 51.203663][ T4492] mas_walk+0x60/0x150 [ 51.207733][ T4492] lock_vma_under_rcu+0x95/0x1b0 [ 51.212664][ T4492] do_user_addr_fault+0x233/0x1080 [ 51.217778][ T4492] exc_page_fault+0x62/0xa0 [ 51.222289][ T4492] asm_exc_page_fault+0x26/0x30 [ 51.227133][ T4492] [ 51.229448][ T4492] value changed: 0xffff88810005b641 -> 0xffff8881329ba300 [ 51.236544][ T4492] [ 51.238859][ T4492] Reported by Kernel Concurrency Sanitizer on: [ 51.245002][ T4492] CPU: 0 UID: 0 PID: 4492 Comm: syz.6.263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.254623][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.264668][ T4492] ================================================================== [ 51.292753][ T4490] loop2: detected capacity change from 0 to 1024 [ 51.299937][ T4490] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.310929][ T4490] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.321643][ T4490] JBD2: no valid journal superblock found [ 51.327452][ T4490] EXT4-fs (loop2): Could not load journal inode