last executing test programs: 5.619551366s ago: executing program 0 (id=1144): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18002, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@nouid32}, {@nobarrier}, {@inode_readahead_blks}, {@minixdf}, {@grpjquota}]}, 0xfd, 0xbb6, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="000000000000ffffffffffffff7f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1803000042000000000000000500100018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b5020000040000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00!', 0x2}], 0x1, 0xee, 0x4000004) 5.539073364s ago: executing program 0 (id=1147): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x84a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2040, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xee5}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') inotify_init1(0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.523380716s ago: executing program 0 (id=1148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:( r\x00'], 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r8, r9, 0x0, 0x80000000007) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 4.879593379s ago: executing program 4 (id=1162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec44397600"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0x4e, 0x0) 4.631328193s ago: executing program 0 (id=1163): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000040)={0x2, "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"}, 0x401, 0x0) msgsnd(r2, &(0x7f0000000a00)={0x1, "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"}, 0x401, 0x0) msgctl$IPC_RMID(r2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x16000f57) (async) inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x16000f57) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r7, 0x5}, 0x8) 4.548559401s ago: executing program 0 (id=1164): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 4.486929328s ago: executing program 3 (id=1165): setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) (fail_nth: 6) 4.228696933s ago: executing program 3 (id=1166): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=ANY=[]) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 4.187539697s ago: executing program 2 (id=1171): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000bf85f340181c51471a853500", @ANYRES32=r0, @ANYBLOB="200028bd7000fddbdf254500000008000100706369000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d0000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r4, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088) 4.187047477s ago: executing program 2 (id=1172): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18002, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@nouid32}, {@nobarrier}, {@inode_readahead_blks}, {@minixdf}, {@grpjquota}]}, 0xfd, 0xbb6, &(0x7f0000000bc0)="$eJzs3M1rXOUaAPDnnHy3uXfSy+VyezfN5XJp4XKnaSXFFsFUKm5cCLoVGtJJCZl+kERq0iwm+g+IuhbcCGpRurDrbhTcutG6tbgQisRGQUQjZz6S2MwkaTvJicnvB2/O+85zJu/z5DBz3hdmEsC+NZj9SCMOR8T5JKJQfzyNiO5qrzeiUjtvaXF+7KfF+bEklpdf/D6JJCLuL86PNX5XUj8erA96I+KLZ5L42+vr552enZscLZdLU/Xx8ZlLV49Pz879f+LS6MXSxdLlE6eeHD45fGro9HDbav35m5FbP/77uW8rv3zw640f3noviZHor8fW1tEugzG48jdZqzMiRts9WU466vWsrTPp3ORJ6TYnBQBAS+maNdw/ohAdsbp4K8SnX+aaHAAAANAWyx0RywAAAMAel9j/AwAAwB7X+BzA/cX5sUbL9xMJO+ve2YgYqNW/VG+1SGdUqsfe6IqIA/eTWPu11qT2tMc2GBF3vz79cdZim76HvJHKQkT8s9n1T6r1D1S/xb2+/jQihtow/+AD4z9T/SNtmD/v+gHYn26frd3I1t//0pX1TzS5/3U2uXc9irzvf43139K69d9q/R0t1n8vbHGO6++/c61VLKv/qVvPftRo2fzZ8bGKegj3FiL+1dms/mSl/qRF/ee3OEfht2ulVrG8619+N+JoNK+/Idn4/xMdH58ol4ZqP5vOsfD58Iet5s+7/uz6H2hR/2bX/+oW53j53LmbrWKb159+1528VO111x95dXRmZupERHfy/PrHT26cS+Ocxu/I6j/2n41f/83qz94TKvW/Q7YXWKgfs/FrD8z59I3rn2xUf7b3y/P6X3jE6/9G/9bm+O9nbx5rFVu7/81aNv/dpLYXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICGNCL6I0mLK/00LRYjDkbE3+NAWr4yPfO/8SuvXL6QxSIGoisdnyiXhiKiUBsn2fhEtd+3Mj5ZHa/Gn4iIQxHxdqGvOi6OXSlfyLt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVhyMiP5I0mJEpBGxVEjTYjHvrAAAAIC2G8g7AQAAAGDb2f8DAADAXjdi/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2O3Tk9p0kIipn+qot012PdeWaGbDd0rwTAHLTkXcCQG46804AyM1D7vEtF2APSjaJ97aM9LQ9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2r6OHb99JIqJypq/aMt31WFfTZxzZweyA7ZTmnQCQm46Ngp07lwew87zEYf9qvscH9pNkk3jv6jmVP0Z6ti0nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaf/mpL0mJEpNV+mhaLEX+JiIHoSsYnyqWhiPhrRHxV6OrJxj15Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDbTc/OTY6Wy6Upnb3a6Y1dkYbOpp1kd6RR6+T9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZ+cmR8vl0tR03pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuenZscLZdLU1vo3HyYk9d08q4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/B4AAP//pOgNdw==") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="000000000000ffffffffffffff7f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1803000042000000000000000500100018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b5020000040000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00!', 0x2}], 0x1, 0xee, 0x4000004) 4.186471517s ago: executing program 0 (id=1173): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x84a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2040, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xee5}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') inotify_init1(0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.151731021s ago: executing program 32 (id=1173): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x84a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2040, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xee5}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') inotify_init1(0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.681895837s ago: executing program 1 (id=1175): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000abbd1340804800"/26, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x28060000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1, 0x40, {{0x2c, 0x4, 0x0, 0xa, 0xb0, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x15, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x1ff}, {@multicast2, 0x28000}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xc}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffbffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @generic={0x82, 0x7, "efcd5faeb2"}, @ssrr={0x89, 0x17, 0x39, [@private=0xa010102, @broadcast, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0xa, [{@multicast2, 0x7}]}, @ssrr={0x89, 0xf, 0xf1, [@rand_addr=0x64010101, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0x6, [{@private=0xa010102, 0x2}, {@loopback, 0x98a}, {@multicast1, 0x9}]}]}}}}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xe8b, 0x9}, 0x4, 0x7, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000340)=0x2) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x1, 0x2, 0x0, 0xaf7}]}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x4c, 0x66, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0x7}, {0xffff, 0xd}, {0xb, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x56}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000044) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)}, 0x9}], 0x1, 0x40012021, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8881}, 0x4040084) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x10009, 0x3ff, 0x1, 0x8, 0x1a, "17e0e87af9238d88be4468d958060d2cbdde22"}) syz_open_pts(0xffffffffffffffff, 0x141601) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461a6683ec19d3e48489bffa5602001300111200000f0000ff3f210000001700000000e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbed2c0eead49dbecf9", 0x46}], 0x1) 3.681137737s ago: executing program 2 (id=1176): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:( r\x00'], 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r8, r9, 0x0, 0x80000000007) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 3.679899887s ago: executing program 3 (id=1177): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000010040)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x40000, 0x14, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x402c542c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) 3.673472878s ago: executing program 4 (id=1184): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401000000000000000000030000000000000000000000080041007278650014003300626f6e64300000000000000000ffe5001635811d4856a765b19decfc6529ec58265d322fdc76b91ccafe826729a368895b26519c953d5853e9a32726f11508fd43ccd8176db0441e0e8a682022c168d153"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x14}, 0x80c1) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x2, 0x90, &(0x7f0000000440)="14c444daaf3a5978f4db6eac44a2193748bac5204aad405d8a796a74ab8f60737a2a14d8ff4869a0f556d72fc28c21c380d823c446a457fcdcebf4aaa90bf02336f9322f1bb04b6b34480bae85d91b137df8cf439f25feb5c3010f24ca057d48c65a28b65e7e4abbec2aa36ece758c6f7074e64b0d4667ec4bc49eccc51b0f921eaf181df41d52a59b528af6e4903017"}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009000000", @ANYRES32, @ANYBLOB="0800800000000000000000000000000000000000944356772cf18440a93d1c3da19039adb81fd24634102e054e072d05ab1beedc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000700)="44effa2998cd542c0ba91a6122da352555b6a76c7c6641ecdf3ad635ab8a99cc1ff76465cc7d1b2dbb0fd95d4ff81c48a72961f5d997421bc88bb0109677229cdc614da6d9e6f2f65d6c", 0x4a, r0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='thermal_power_cpu_limit\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r7 = socket(0x2b, 0x3, 0x80000019) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r9], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x18) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.163308318s ago: executing program 1 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a000000000095"], &(0x7f0000000700)='syzkaller\x00'}, 0x94) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x101002, 0x25) r4 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x600900, 0x21) linkat(r3, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x18) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) kexec_load(0x5, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="9f41b271f6120b1c8cc0a1fe887d110431c220765d12707e89dc1019990089e1a552934f9eb496b107c37030a727cb98332f65ebe3cc941cf658ec261aad8a45a3ccd4e2a83fcc6580c52e911fd8f01c0975c9318b37886460bd0e0701c067152056dd2d6b6b74357c49deb9bd284803e3cde8f02999405ba2f503e9e66a2455fc1c566ff0352679bf8a6725f81e155b553913aa43382783f2eb22b5645bfc6929d9b53aad350f544696a3ad22d3143b307dce4e6e073dc089bdd93cd0c29ac9a4aceb8a25f740db945fcc48ade03da93c8ff4dbf283c67951bf5ad6a9db08162e41af116dd109ba", 0xe8, 0x401, 0x5c0}], 0x320000) 3.162672448s ago: executing program 4 (id=1179): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000eaffffff0000000000800000181100d3", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_setup(0x3ff, &(0x7f0000000500)) 2.523828191s ago: executing program 1 (id=1180): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x3014c50, &(0x7f0000000e00)={[{@delalloc}, {@sysvgroups}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@data_writeback}]}, 0x3, 0x4d1, &(0x7f0000000680)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @fixed}, 0x8) listen(r4, 0x7) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) 2.523201661s ago: executing program 2 (id=1181): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:( r\x00'], 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r7, r8, 0x0, 0x80000000007) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) 2.521540162s ago: executing program 3 (id=1182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x7, 0x9, 0x8, 0x5955ec84, 0x10000}, 0x0, &(0x7f00000000c0)={0x8, 0x0, 0x6, 0x100, 0x3, 0x4, 0x7, 0x7fffffffffffffff}, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x48) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000cc0)=0x0) r7 = getegid() r8 = fcntl$getown(r4, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d00)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000e00)=0xe8) r10 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000e80)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ec0)=0x0) getresgid(&(0x7f0000000f00), &(0x7f0000000f40)=0x0, &(0x7f0000000f80)) r14 = fcntl$getown(r1, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r15, r15, 0x0) r16 = getgid() r17 = fspick(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x6000, 0x4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f0000001400), &(0x7f0000001440)) r19 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="2f5578b0c24ade262fe9ed492848", 0xe}], 0x1, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [r5, r4, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}], 0x58, 0x20000000}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r0, r4]}}, @rights={{0x10}}], 0x70, 0x40048000}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)="3ff11ef373232b1241096261d51ee3ec8938b4088e1a89dd490a8ca65deb9a4af0a8fc6bf52553b19942083db5ffd12dc21c76d2ee49447c65181d91dc1ac252be1a01ff2c687e75c3a9188aee54a6ffe26760d06246c54875633e93ec0c0f002197b09a", 0x64}, {&(0x7f0000000c00)="ebc12f4a2323f09dfb9166d00dd56555267ce55020f22a540bc0dbe4bb783508d2d5fe1cb8c10d300f1c4710a0e05c289bd424239e78736a6ea9559ccffa9bc0f2c50fc0a0f4e4f596fb53f36b88", 0x4e}], 0x2, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xa0, 0x4044014}}, {{&(0x7f0000001080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001100)="8afe15ec1f326361e26c479c1b527cae0f861a14750a088660223d82a74923f94c01302c6d8c6576123cb3447f18c5cfb4fa690ea4171f62d270d3f2c5c9a18da5a41ab2cabd55d937e9f99a1a06966cd42857a4dfbb5a3153f9cb4874d40acabbf7b784bd3d8a7b9a944cd95774115a24a758f64a66958b9b966708f23c5ae3679c985bb09d601de073d6db853b479952c7aa5f1316f906afd08e2db0b375b08806e5c96cb6b7192014b627701e7c6c1d0bdfd7c2e6eff5eedba89362150dbea2c1644c63d3a6214689b8464716dca6ac27702232da8dc043b5dc", 0xdb}], 0x1, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [r1, r17]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r18}}}, @rights={{0x1c, 0x1, 0x1, [r4, r3, r19]}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, r0]}}], 0x98, 0x84}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001540)="0c96efa15182b64d4f498f50b4db60c5645a164f8b10b52016a7144c5e513022f914e206ee8c0155532cd73908f4a739b115cebdf8ff1aa94193337a0f3fa6d9c136a8e40c7cb4f1ffac8c75b3d324", 0x4f}, {&(0x7f00000015c0)="e169b16286ec71aacf342cead09f4186aff1ca79a01eb4ba7023b23939e3ea2031aba9dcd48b3dca5e296f1f046a83881b3228587bb74c58e18e7331c4c829d9aead21370078b497c5dd5ea70a8b47af072cf86a452ca4b5b60b8e195eb4a865c865e646b62bbf58f3980f711ea0b4b0753255ef0e1f7c3df3282cd88f46d2d37f2b8f5a75c8994c32015c0b9b79c4c7e5046615f77496d1bb923833adf83b0d2cc8673f6dbb7726cd304d410ac9529ad1682fd4ab6ddd2b92a334265e0ed66db82c23f8ccd9469b4bc07c2168c53b7796ca930a297bef", 0xd7}, {&(0x7f00000016c0)="5b02685084cc85b5f9b356a2e2f9d0f2ebd3b1fc13e8ffc7581205b11616bb8b1eeffa000a1530742c8150bebbbaa444f97111aef2266c2d4309d698479552272b7750652adc1d17f9bcb6fa011b56087e63d69900cb9307872e171b248f9108898335fd713359aa5fd80cf068d55ec757dfe77ce249ee64d491557de5", 0x7d}], 0x3, &(0x7f0000001780)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r3, r4, r2, r2, r5, r2, r3, r1]}}], 0x38, 0x80}}, {{&(0x7f00000017c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001840)="3917b359715743bc2ae23a89f1417d45c7312c999e8e23006209299b8859248b7c", 0x21}, {&(0x7f0000001880)="5c2f9fb15a291f874dee3380216a6113a37f26703096e28e8968a5cf975462c1a369f42a1152d4da61cfde7ff2844ef270fd5af2ca51c46862347bb81f4a4121bd9f366bdf243e0797f9b681f6e2ce9f084b0b591f593775090976f73ef829ed3f5ce1b0795c994a7a0de30ba4fb120926d9555ffc269c88afce898b07a1d759af580aa1482f5cf7341917662614c90b9df54a119b7c567353c3b3a0c75b7ec628b406cf8e85c0cf80302755286079330d5b6a285391d5d725069a975d81b9995d3096ef83bfabd0347d2b8eaaf70204ae94a1668b67212f72b411f0060754a12d4b128772312f85e52a916c8b7e43570e", 0xf1}, {&(0x7f0000001980)="d68996e3eeb9a7648b7d5decf19227327180aadd4bfd8b797a8b9d962f4f58cb89ea6ff15bcc19c2da9633fa60d580827ccb10a6566e6d0be58fc9f9925efb2c5dbe4a10e78d9745be6040c5183d2da734d41b1603339dab8ccab81f4d4f426b913d3214744f26da7ac2bb143b530c877b871f72ec9fd30902677318b9e1d93db3e1ad1e1600c3dcbffa9df502f7cb4032ad23b070ae96e29e0c52ee706be42890432f660c658d44e777d385c541394383ac2a4999c0f0f7a99ef3c65b7adc3246dfebebac9e482112df5a7b4f6463e98c", 0xd1}, {&(0x7f0000001a80)}, {&(0x7f0000001b80)="a7d7c34dcf4ac660c3e68427b517dbd0d19b589cba2233520fb72fefd38b33223d2b558fdf2965f88fa9ed1c24e88154a4c45f0f28b3d9a42d4515c39dce4c37338f814fceaff1361bf44e9f2fc28560241ef7759de638c62c01e0410122acee7a9f7e4b68d0ace1e3c402b1413edf8909ad964d989bb4736d7396d44b816d5ff06079a11f8e6189013ff900c6", 0x8d}], 0x5, 0x0, 0x0, 0x80}}], 0x6, 0x40000) r20 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r20}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) 2.520664232s ago: executing program 4 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x42, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00'}, 0x0) r5 = socket(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) getresuid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="b4359ab8682ebe2e50c999452f1855b876c52e962806579b085fe203364d0f91d694a6e887195882f62666668aa1fa15bbde1cf4d9dabdcb6fde800f267a6a752acb4577e5c9e01732ef0537ef5721a74cc7d8e8e88e103f97e7da1e80520031ec064de9d1911702b0f09bd4ccc1cfaaf060b8c6d0de704a82202c792f7e6c5eb4d5aea3e76ef6e841212a1ea0d49fab843e0119500031f0b1e5951c1c08ab23ad3a232181732c6e1ab8f4c825b0ffbfc3ef694dff7ea2ec24afd8efc358ba376ad79293fbdba1408ad19f155c887beb22880790a70ed12027cad34e1b055a220a6906f376b044214872d83183a47ff705c787d0", 0xf4}, {&(0x7f0000000540)="935b05639eb92cd6fff284b8d7e22e3b6b10916661f5481a470b1c88ed9dd9802a0ba21194748bc7532a47b5c386d95ede4ca3fb5e7251b5ed1eb229330103fa2ba66b630d9d1ba77201048a9a812f7d8a341a522dc09ebb81091d0e146f72b265adbaebee4a95091bc395f3523cd2506422e1415e858768407115", 0x7b}, {0x0}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000000000000010000000100000097ddb369e494bcd07198ed38776de9237e03c0ebcd36772c174e11e5d90aeabb48a7387dc3589f6095d5dcdda65733ef0cd59b42165fe0f97e67ec622a4b1ffeacde00"/97, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8000}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, r7, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, r7, 0xffffffffffffffff, r7, r6, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x98, 0x2c040080}}], 0x2, 0x4004) r10 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f00000073c0)='./file0\x00', &(0x7f0000007400)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000007480)='./file0\x00', 0x4000, 0x1, &(0x7f00000074c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000100)="fe87cfd8c37a3256005625f863dba2d921dbc9cb5c1f1c640da3f002eb79bf6c3744f022a551eb43ebc07b3acddecf806b1e73d64a8e23124728c17104d5370fe01bc96653c4411f8496549c9473b0179deedadbebd451379fb47ad1c0ed60284c9fdd1e4e328bf104cd1a028ff97fb255c0d90610d0d152e267327f351662ab94406e9f6bae732c99b9805a336e5d83341c858404e1edb6a8da48d7a740a2afd2eb11f8e0aa0531b5fbb34df2e1a7f090cb721f2f23faa7c673801d65f02b5adf5db272771aeb7fc475aec9c33813a5f53b431595b0a0123d47d89901c973b1d4dbb9426ff206cfc10355f8016e8d158f121efcf099", 0xf6}, {&(0x7f0000000200)="636f405d60204684e4416fd4598f70ffd8118e0e0df8a36624eb49c76491cb9228298e20578e13b236d4cf7082492b3bf602762a8c24f2e0a3de5d8f0308dd5c74ba149f726c1778d8c9baee213251767516909b227ce064", 0x58}, {&(0x7f0000000040)}, {&(0x7f00000013c0)="06f6647b9a1635163d2d77c32591b451cc364ef4b4bc0e8a761f669f844e8c46c5dd9dac43936db1fb35d20adc244d57c0dbe97c78b01214cf74fdb390777873456ac59070b4870df6b043fc665f7bfe5e02ed56ce62ec340e852ee699c42261cd8ef0992ca32c5ce8be8360282cc7976c80df26f7b022e157b05a552c40fa899e5d7862e2d047242a2cb30adf11208ea80c38365d83d88ece3b3d7e09d85e4af25e2b94c7560aca536e8a93c2eb98eac5c88a8e66ce861a306abe4b833d0e5ec0997f7cfab91673962def145ba0f6f1e0100d94a75dc9e238f8ebbff881fef978b095e59f3c6ce5935b5d55c4f216162c2f2009845642a027d43f0198af68", 0xff}, {&(0x7f00000014c0)="0c06e74d01197a6834d6665b71e7005d1b5dde75b90f3819f6421f44ae195e6f2751e02d7b7ac1ba0f8945d53ad0328558d87a2263ed1d1aa9a8556a485f9fe99d5b804d", 0x44}], 0x6, 0x0, 0x0, 0x20000}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="71d55bcfc9b08d60f7a6e5ec7c7a3941bc9c8fd2c4011e62abc23726fb6574b3b6680b29df8ce41d7ffaa325adc297e15e7a4d98c417b59aaacb61f34fdcaef0a27cc18385bea7a8adcada7e8940d99aa403b1375c30e156ab4b6093c2af8d0aecfc2c792a3518b3ce113b03fbfe18bd5bc111c4c68a4cf32c750fc1785c7b0cd8f51ff1d7cea2e71d20a3df565a569a70a919b3532259c9fefe5adab105e5e874717f2a8ae3ebac7abfba798c2ae8049b6f360bd72a7663d20419b5507fbd0886bb8fe4f42d3c29c46e8eae17e8b5541a253bcbb8e42cf4b4bafc1799eea09c50ddd25a89959dc23f335ab457684c46", 0xf0}, {&(0x7f0000001bc0)="7bd5148fc33bfe4a3c229f06c6e58d27ae61073c42a40bd6b37b91b8779385009242020bc7940dbdf64ba27b6529765dd825dfa1a939296fed7faf94657d21c34e06b0a486", 0x45}], 0x2, &(0x7f0000001e40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x84}}, {{&(0x7f0000001f00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000004f80)="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", 0x1000}, {&(0x7f0000001f80)="f18bff6c65e9946edf670697af272a10b9c6e10e5969db645746634a08b2c878b982bf85d95c8236fac6b9dad2f30d1f50450bcbce4fff9c173955dd5c43092a31016b5c726fd683aa1c3c4ac67ba8e3e9ddb34ccbed9e92175b46d1729eeb80d39b72f6472a91026c7fd30b60a4bd35a83c6ad1743f45c9aab30671b23cc4a100496d", 0x83}], 0x2, 0x0, 0x0, 0x8000}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002100)="a5aa1f67e0efe52a5a760f1554cb9283cfdadb5c806e8b3b48eda31f742448f6a1127b4c204df69071d478845582d0c16a2e1f2dfc460b79d582d69c1571288a0aa3c9e18181aaa0e9d14a88cadfe55c705073ce6a89e47aa596059e2450cbb1f0ba8d2f0ca6d823c6a5c4e7d2bbfb431a73262c8f2b2a735247b95659be3fe9f823e29cee77d6735e097df0626722d04cdbe950f5f1d949e5eaa54e852578b16e051ac10189615e5119e4497fa9d18d0a0be8b3500ce4e054b80c4ec020bf20b23c5c801a86a1a8e03db1", 0xcb}, {&(0x7f0000002300)="ca3166d0e40d10113262e21f21044c43224fa2b442a2f507e3b07382c554f9b1a20e7db8537cc62d9544dd6f9cfc42af149c1cc7475bb3706eae73b97d427a185bed0c08926be47cd03f69b316296f7d256c117cd3671307ff0b576b40324d4f7a5e05da04904da29b73036b188ba88b26bac756", 0x74}, {&(0x7f0000002380)="be4d3b10b0d71daf591e9e571ba4698f80278fe2e446c11e", 0x18}, {&(0x7f00000023c0)="995335452c6aa5804a573a6cf51b1ccc9ccf786147e54ce600ca3513ff211ec3ae546c9d48cb5c7e4fbe4e51cfe2bce92e2c6efca847e879932f083d5f6d7bf5eee3ea554bfa5ea1e6038c8ba20dac8bc26d07f6f18d6c8fa77e7c88788f4df7b0a88fda3f50794ac9e827ebb5c7b86f47dc4c1546fb95fb12bca209fdd6bfd2e42e499d8fd0960bbf65561cca051ef442afd493e700d2b1ff721edc8d4f8eff5287e3857e318907b3b3f346187efada18c5ab313966bc3a9c124b949ec0eace8bf789", 0xc3}, {&(0x7f00000024c0)="731869fbb682a842888610cfb17ca37dd9744a9d35eae553c02c9bca7c04dabb9f832dce5280999df1d3b93a4a4924b7f671dcb316c01fe424c3487783845974aa8106f1f99b8db0fe469e75b0b6b3b7a6ed6eed77af", 0x56}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x20000880}}, {{&(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002840)="87dc22f74f6035e10c75e35169fa16444b147b33eba3bad2", 0x18}, {&(0x7f0000002880)="aea694ee11dc97880e0065d1eed7b0933b79f83aca3a09e6cc03b01985bc17474a8238af4f394a32eeaf0d9aa92fea505ba0f15d8baf4ef375b64a7968edd4b8ce551207ec9eeb6d448044b89ea12d6243548ef4f1c453687ea859f3a68ca85a1b412164cc364c333b6f150e3097ea827fb43b58a77f1ea130c1f5693a381d2b07bbe233110c50e3171aa219db063a7aefa783881c3922800db9ac9bc8969e7479dd5bcf69aa729008fe7c91016581a15780d11838eed0f93d7ec8f5bedabab14add34d375a3864f67fdf10c114dba4b421a7d926f13a765f4643e9718609531ccf8687338", 0xe5}, {&(0x7f0000002980)="c8a32936b4ff54791e4415ce9ba936b5dec55be92a4afa2c1dce6f4d4707285f6edd11a265a62b0e99f901cf0168abcf7af1e62ecd61662570a1a7227942efc66c3ff661e7e4f5eac7dab201ea5442ee63b7de00f3e0a38019866a3d4ec20b5a84f12d085410c58c357fcb68893f42b853cd63e16d5a458c014713daca3ac52278284575d37462f3c8421a02dcdd5609a9dc47692c5be0b2fa9dd426e174", 0x9e}], 0x3, &(0x7f00000075c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x150, 0xc801}}, {{&(0x7f0000007740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000007880)=[{&(0x7f00000077c0)="8dc79df447ae368e9214d455bcc24f42ac203b4e3f99f0db88546bfa7ac528f0028e799d4cb5f95f5294796b2d746bd14ae352eaffa8e28675395725de4caebc09", 0x41}, {&(0x7f0000007840)="34b2bdbd5b3aa0bd361248394a91fb7aed0230a026ca0e2422fb5aa8215eaa102268bb8cc104da5463b3c77e50fab03317bbc503056516834bd9", 0x3a}], 0x2, &(0x7f00000015c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000d30a4cf4c0e622d542fc7489", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78, 0x8044}}, {{&(0x7f0000007940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008ac0)=[{&(0x7f00000079c0)}, {&(0x7f00000089c0)="0365244d1703b751f78f6df4ee6ded338b7718dbe33e33a2886675b48c4d22c89909e5f2ed32805920ed4a14c59bdd2f07bd5ff916d037913d593936fb8be79c422fc5cb5476f53577", 0x49}, {&(0x7f0000008a40)="03fa8168c9a0f313f4ede133361152cfb614410223c144631f04203b735a56afcbf1d5b75b83ba1862bf5c2cb24068c177d7b33098bbabdf8394fdb4a2f10f95c0fb4455f5a760", 0x47}], 0x3, 0x0, 0x0, 0x8800}}], 0x7, 0x20040800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x0, r12}}, './file0\x00'}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r13, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x1) r14 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000040)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) r17 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r17, 0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r14, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.792035374s ago: executing program 1 (id=1185): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x3ff, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000300), &(0x7f00000003c0)=r2}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x10) recvmsg(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 919.966009ms ago: executing program 1 (id=1186): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 919.144739ms ago: executing program 2 (id=1187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec44397600"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0x4e, 0x0) 918.41344ms ago: executing program 3 (id=1188): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000abbd1340804800"/26, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x28060000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1, 0x40, {{0x2c, 0x4, 0x0, 0xa, 0xb0, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x15, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x1ff}, {@multicast2, 0x28000}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xc}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffbffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @generic={0x82, 0x7, "efcd5faeb2"}, @ssrr={0x89, 0x17, 0x39, [@private=0xa010102, @broadcast, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0xa, [{@multicast2, 0x7}]}, @ssrr={0x89, 0xf, 0xf1, [@rand_addr=0x64010101, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0x6, [{@private=0xa010102, 0x2}, {@loopback, 0x98a}, {@multicast1, 0x9}]}]}}}}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xe8b, 0x9}, 0x4, 0x7, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000340)=0x2) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x1, 0x2, 0x0, 0xaf7}]}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x4c, 0x66, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0x7}, {0xffff, 0xd}, {0xb, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x56}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000044) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)}, 0x9}], 0x1, 0x40012021, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8881}, 0x4040084) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x10009, 0x3ff, 0x1, 0x8, 0x1a, "17e0e87af9238d88be4468d958060d2cbdde22"}) syz_open_pts(0xffffffffffffffff, 0x141601) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461a6683ec19d3e48489bffa5602001300111200000f0000ff3f210000001700000000e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbed2c0eead49dbecf9", 0x46}], 0x1) 917.84003ms ago: executing program 4 (id=1189): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000bf85f340181c51471a853500", @ANYRES32=r0, @ANYBLOB="200028bd7000fddbdf254500000008000100706369000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d0000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r4, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088) 2.22665ms ago: executing program 1 (id=1190): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401000000000000000000030000000000000000000000080041007278650014003300626f6e64300000000000000000ffe5001635811d4856a765b19decfc6529ec58265d322fdc76b91ccafe826729a368895b26519c953d5853e9a32726f11508fd43ccd8176db0441e0e8a682022c168d153"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x14}, 0x80c1) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x2, 0x90, &(0x7f0000000440)="14c444daaf3a5978f4db6eac44a2193748bac5204aad405d8a796a74ab8f60737a2a14d8ff4869a0f556d72fc28c21c380d823c446a457fcdcebf4aaa90bf02336f9322f1bb04b6b34480bae85d91b137df8cf439f25feb5c3010f24ca057d48c65a28b65e7e4abbec2aa36ece758c6f7074e64b0d4667ec4bc49eccc51b0f921eaf181df41d52a59b528af6e4903017"}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009000000", @ANYRES32, @ANYBLOB="0800800000000000000000000000000000000000944356772cf18440a93d1c3da19039adb81fd24634102e054e072d05ab1beedc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000700)="44effa2998cd542c0ba91a6122da352555b6a76c7c6641ecdf3ad635ab8a99cc1ff76465cc7d1b2dbb0fd95d4ff81c48a72961f5d997421bc88bb0109677229cdc614da6d9e6f2f65d6c", 0x4a, r0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='thermal_power_cpu_limit\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r7 = socket(0x2b, 0x3, 0x80000019) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r9], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x18) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.54931ms ago: executing program 2 (id=1191): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:( r\x00'], 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r8, r9, 0x0, 0x80000000007) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 456.62µs ago: executing program 3 (id=1192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a000000000095"], &(0x7f0000000700)='syzkaller\x00'}, 0x94) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x101002, 0x25) r4 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x600900, 0x21) linkat(r3, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x18) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) kexec_load(0x5, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="9f41b271f6120b1c8cc0a1fe887d110431c220765d12707e89dc1019990089e1a552934f9eb496b107c37030a727cb98332f65ebe3cc941cf658ec261aad8a45a3ccd4e2a83fcc6580c52e911fd8f01c0975c9318b37886460bd0e0701c067152056dd2d6b6b74357c49deb9bd284803e3cde8f02999405ba2f503e9e66a2455fc1c566ff0352679bf8a6725f81e155b553913aa43382783f2eb22b5645bfc6929d9b53aad350f544696a3ad22d3143b307dce4e6e073dc089bdd93cd0c29ac9a4aceb8a25f740db945fcc48ade03da93c8ff4dbf283c67951bf5ad6a9db08162e41af116dd109ba", 0xe8, 0x401, 0x5c0}], 0x320000) 0s ago: executing program 4 (id=1193): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000010040)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x40000, 0x14, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x402c542c, &(0x7f0000000000)=0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): __x64_sys_sendmmsg+0x57/0x70 [ 53.989763][ T4207] x64_sys_call+0x1c4a/0x3000 [ 53.989837][ T4207] do_syscall_64+0xd2/0x200 [ 53.989868][ T4207] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.989904][ T4207] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.989964][ T4207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.989985][ T4207] RIP: 0033:0x7fdaecc2efc9 [ 53.990004][ T4207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.990027][ T4207] RSP: 002b:00007fdaeb68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.990052][ T4207] RAX: ffffffffffffffda RBX: 00007fdaece85fa0 RCX: 00007fdaecc2efc9 [ 53.990117][ T4207] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 53.990134][ T4207] RBP: 00007fdaeb68f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.990150][ T4207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.990164][ T4207] R13: 00007fdaece86038 R14: 00007fdaece85fa0 R15: 00007ffe69a1cab8 [ 53.990188][ T4207] [ 54.258355][ T4210] FAULT_INJECTION: forcing a failure. [ 54.258355][ T4210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.271605][ T4210] CPU: 0 UID: 0 PID: 4210 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.271632][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.271707][ T4210] Call Trace: [ 54.271713][ T4210] [ 54.271721][ T4210] __dump_stack+0x1d/0x30 [ 54.271743][ T4210] dump_stack_lvl+0xe8/0x140 [ 54.271840][ T4210] dump_stack+0x15/0x1b [ 54.271884][ T4210] should_fail_ex+0x265/0x280 [ 54.271926][ T4210] should_fail+0xb/0x20 [ 54.271983][ T4210] should_fail_usercopy+0x1a/0x20 [ 54.272010][ T4210] _copy_from_iter+0xd2/0xe80 [ 54.272088][ T4210] ? __build_skb_around+0x1ab/0x200 [ 54.272118][ T4210] ? __alloc_skb+0x223/0x320 [ 54.272215][ T4210] netlink_sendmsg+0x471/0x6b0 [ 54.272254][ T4210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.272293][ T4210] __sock_sendmsg+0x145/0x180 [ 54.272320][ T4210] ____sys_sendmsg+0x31e/0x4e0 [ 54.272368][ T4210] ___sys_sendmsg+0x17b/0x1d0 [ 54.272416][ T4210] __x64_sys_sendmsg+0xd4/0x160 [ 54.272525][ T4210] x64_sys_call+0x191e/0x3000 [ 54.272554][ T4210] do_syscall_64+0xd2/0x200 [ 54.272581][ T4210] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.272663][ T4210] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.272687][ T4210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.272789][ T4210] RIP: 0033:0x7f6110cdefc9 [ 54.272806][ T4210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.272829][ T4210] RSP: 002b:00007f610f73f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.272851][ T4210] RAX: ffffffffffffffda RBX: 00007f6110f35fa0 RCX: 00007f6110cdefc9 [ 54.272890][ T4210] RDX: 0000000020008040 RSI: 0000200000000080 RDI: 0000000000000008 [ 54.272904][ T4210] RBP: 00007f610f73f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.272917][ T4210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.272933][ T4210] R13: 00007f6110f36038 R14: 00007f6110f35fa0 R15: 00007ffc46b4dee8 [ 54.272965][ T4210] [ 54.497027][ T4210] loop0: detected capacity change from 0 to 2048 [ 54.571204][ T4224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.573774][ T3305] loop0: p2 < > p4 [ 54.614101][ T4226] netlink: 'syz.1.218': attribute type 3 has an invalid length. [ 54.646935][ T3305] loop0: p4 size 262144 extends beyond EOD, truncated [ 54.669139][ T4231] FAULT_INJECTION: forcing a failure. [ 54.669139][ T4231] name failslab, interval 1, probability 0, space 0, times 0 [ 54.682061][ T4231] CPU: 1 UID: 0 PID: 4231 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.682096][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.682108][ T4231] Call Trace: [ 54.682114][ T4231] [ 54.682121][ T4231] __dump_stack+0x1d/0x30 [ 54.682145][ T4231] dump_stack_lvl+0xe8/0x140 [ 54.682185][ T4231] dump_stack+0x15/0x1b [ 54.682251][ T4231] should_fail_ex+0x265/0x280 [ 54.682289][ T4231] should_failslab+0x8c/0xb0 [ 54.682376][ T4231] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 54.682410][ T4231] ? __alloc_skb+0x101/0x320 [ 54.682444][ T4231] __alloc_skb+0x101/0x320 [ 54.682476][ T4231] netlink_alloc_large_skb+0xbf/0xf0 [ 54.682578][ T4231] netlink_sendmsg+0x3cf/0x6b0 [ 54.682610][ T4231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.682646][ T4231] __sock_sendmsg+0x145/0x180 [ 54.682717][ T4231] ____sys_sendmsg+0x31e/0x4e0 [ 54.682755][ T4231] ___sys_sendmsg+0x17b/0x1d0 [ 54.682850][ T4231] __x64_sys_sendmsg+0xd4/0x160 [ 54.682887][ T4231] x64_sys_call+0x191e/0x3000 [ 54.682952][ T4231] do_syscall_64+0xd2/0x200 [ 54.682976][ T4231] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.683004][ T4231] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.683032][ T4231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.683055][ T4231] RIP: 0033:0x7efcdce8efc9 [ 54.683140][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.683164][ T4231] RSP: 002b:00007efcdb8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.683186][ T4231] RAX: ffffffffffffffda RBX: 00007efcdd0e5fa0 RCX: 00007efcdce8efc9 [ 54.683198][ T4231] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 54.683210][ T4231] RBP: 00007efcdb8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.683225][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.683240][ T4231] R13: 00007efcdd0e6038 R14: 00007efcdd0e5fa0 R15: 00007ffe488b5d98 [ 54.683259][ T4231] [ 54.909396][ T4228] loop4: detected capacity change from 0 to 1024 [ 54.917412][ T4228] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.928395][ T4228] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.948652][ T4210] loop0: p2 < > p4 [ 54.971976][ T4210] loop0: p4 size 262144 extends beyond EOD, truncated [ 54.981640][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 54.981654][ T29] audit: type=1400 audit(1760757615.101:1117): avc: denied { mounton } for pid=4209 comm="syz.0.214" path="/dev/loop0p2" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.011365][ T4228] JBD2: no valid journal superblock found [ 55.017209][ T4228] EXT4-fs (loop4): Could not load journal inode [ 55.046709][ T29] audit: type=1400 audit(1760757615.161:1118): avc: denied { create } for pid=4238 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.066100][ T29] audit: type=1400 audit(1760757615.161:1119): avc: denied { bind } for pid=4238 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.073764][ T3512] udevd[3512]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 55.085293][ T29] audit: type=1400 audit(1760757615.161:1120): avc: denied { block_suspend } for pid=4238 comm="syz.1.224" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.096628][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 55.146914][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 55.160296][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 55.210762][ T4245] __nla_validate_parse: 3 callbacks suppressed [ 55.210781][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 55.225811][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 55.307027][ T4247] loop0: detected capacity change from 0 to 128 [ 55.353388][ T4247] syz.0.225: attempt to access beyond end of device [ 55.353388][ T4247] loop0: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 55.390001][ T4256] loop1: detected capacity change from 0 to 128 [ 55.468576][ T4256] syz.1.227: attempt to access beyond end of device [ 55.468576][ T4256] loop1: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 55.493834][ T4258] netlink: 3 bytes leftover after parsing attributes in process `syz.4.231'. [ 55.502910][ T29] audit: type=1326 audit(1760757615.601:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecc2efc9 code=0x7ffc0000 [ 55.526338][ T29] audit: type=1326 audit(1760757615.601:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecc2efc9 code=0x7ffc0000 [ 55.549791][ T29] audit: type=1326 audit(1760757615.601:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdaecc2efc9 code=0x7ffc0000 [ 55.554814][ T4258] 1ªX¹¦À: renamed from 60ªX¹¦À [ 55.573537][ T29] audit: type=1326 audit(1760757615.601:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecc2efc9 code=0x7ffc0000 [ 55.601816][ T29] audit: type=1326 audit(1760757615.601:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaecc2efc9 code=0x7ffc0000 [ 55.625184][ T29] audit: type=1326 audit(1760757615.601:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecc2efc9 code=0x7ffc0000 [ 55.657018][ T4258] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 55.694738][ T4268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=4268 comm=syz.2.233 [ 55.733183][ T4270] loop3: detected capacity change from 0 to 2048 [ 55.772986][ T4270] loop3: p2 < > p4 [ 55.778010][ T4270] loop3: p4 size 262144 extends beyond EOD, truncated [ 55.874919][ T4282] loop2: detected capacity change from 0 to 1024 [ 55.882561][ T4282] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.893623][ T4282] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.906304][ T4282] JBD2: no valid journal superblock found [ 55.912057][ T4282] EXT4-fs (loop2): Could not load journal inode [ 55.923890][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 55.932821][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 56.068873][ T4295] loop2: detected capacity change from 0 to 1024 [ 56.094949][ T4295] ext3: Bad value for 'mb_optimize_scan' [ 56.148630][ T4308] 9pnet_fd: Insufficient options for proto=fd [ 56.209842][ T4298] netlink: 3 bytes leftover after parsing attributes in process `syz.0.246'. [ 56.221912][ T4311] loop1: detected capacity change from 0 to 512 [ 56.233846][ T4298] 1ªX¹¦À: renamed from 60ªX¹¦À [ 56.242224][ T4311] EXT4-fs: Ignoring removed oldalloc option [ 56.248260][ T4311] EXT4-fs: inline encryption not supported [ 56.254134][ T4311] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.262527][ T4298] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 56.288465][ T4311] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.336314][ T4311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.250: bg 0: block 64: padding at end of block bitmap is not set [ 56.355385][ T4311] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.250: Failed to acquire dquot type 0 [ 56.370053][ T4327] netlink: 72 bytes leftover after parsing attributes in process `syz.4.255'. [ 56.379633][ T4311] EXT4-fs (loop1): 1 truncate cleaned up [ 56.391884][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.416787][ T4311] ip6gre1: entered allmulticast mode [ 56.447477][ T4334] loop3: detected capacity change from 0 to 1024 [ 56.457053][ T4334] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.468051][ T4334] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.480239][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 56.494041][ T4339] loop4: detected capacity change from 0 to 128 [ 56.523368][ T4334] JBD2: no valid journal superblock found [ 56.529238][ T4334] EXT4-fs (loop3): Could not load journal inode [ 56.598691][ T4339] syz.4.257: attempt to access beyond end of device [ 56.598691][ T4339] loop4: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 56.602162][ T4344] loop0: detected capacity change from 0 to 512 [ 56.632227][ T4344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.669650][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.720244][ T4351] netlink: 3 bytes leftover after parsing attributes in process `syz.3.261'. [ 56.741537][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.764749][ T4351] batadv1: entered promiscuous mode [ 56.770020][ T4351] batadv1: entered allmulticast mode [ 56.792159][ T4355] Illegal XDP return value 4294967274 on prog (id 189) dev N/A, expect packet loss! [ 56.802540][ T4360] FAULT_INJECTION: forcing a failure. [ 56.802540][ T4360] name failslab, interval 1, probability 0, space 0, times 0 [ 56.815316][ T4360] CPU: 0 UID: 0 PID: 4360 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.815417][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.815433][ T4360] Call Trace: [ 56.815440][ T4360] [ 56.815450][ T4360] __dump_stack+0x1d/0x30 [ 56.815484][ T4360] dump_stack_lvl+0xe8/0x140 [ 56.815504][ T4360] dump_stack+0x15/0x1b [ 56.815523][ T4360] should_fail_ex+0x265/0x280 [ 56.815566][ T4360] should_failslab+0x8c/0xb0 [ 56.815635][ T4360] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 56.815673][ T4360] ? __alloc_skb+0x101/0x320 [ 56.815707][ T4360] __alloc_skb+0x101/0x320 [ 56.815744][ T4360] netlink_alloc_large_skb+0xbf/0xf0 [ 56.815780][ T4360] netlink_sendmsg+0x3cf/0x6b0 [ 56.815820][ T4360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.815850][ T4360] __sock_sendmsg+0x145/0x180 [ 56.815883][ T4360] ____sys_sendmsg+0x31e/0x4e0 [ 56.815931][ T4360] ___sys_sendmsg+0x17b/0x1d0 [ 56.815985][ T4360] __x64_sys_sendmsg+0xd4/0x160 [ 56.816029][ T4360] x64_sys_call+0x191e/0x3000 [ 56.816135][ T4360] do_syscall_64+0xd2/0x200 [ 56.816162][ T4360] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.816219][ T4360] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.816240][ T4360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.816324][ T4360] RIP: 0033:0x7f6110cdefc9 [ 56.816338][ T4360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.816360][ T4360] RSP: 002b:00007f610f73f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.816437][ T4360] RAX: ffffffffffffffda RBX: 00007f6110f35fa0 RCX: 00007f6110cdefc9 [ 56.816449][ T4360] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 56.816460][ T4360] RBP: 00007f610f73f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.816471][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.816484][ T4360] R13: 00007f6110f36038 R14: 00007f6110f35fa0 R15: 00007ffc46b4dee8 [ 56.816582][ T4360] [ 57.070611][ T4366] loop3: detected capacity change from 0 to 1024 [ 57.093773][ T4366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.130148][ T4366] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.267: Allocating blocks 449-513 which overlap fs metadata [ 57.147589][ T4365] EXT4-fs (loop3): pa ffff888106e8b150: logic 48, phys. 177, len 21 [ 57.155698][ T4365] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 57.178676][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.195024][ T4362] netlink: 3 bytes leftover after parsing attributes in process `syz.2.265'. [ 57.204283][ T4362] 1ªX¹¦À: renamed from 60ªX¹¦À [ 57.221071][ T4362] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 57.390845][ T4391] loop0: detected capacity change from 0 to 1024 [ 57.400591][ T4391] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.411627][ T4391] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.475266][ T4391] JBD2: no valid journal superblock found [ 57.481058][ T4391] EXT4-fs (loop0): Could not load journal inode [ 57.751811][ T4399] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 57.758274][ T4406] loop0: detected capacity change from 0 to 512 [ 57.769950][ T4406] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.793762][ T4406] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.816561][ T4406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 57.824740][ T4406] System zones: 1-12 [ 57.832695][ T4406] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.281: inode has both inline data and extents flags [ 57.852966][ T4406] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.281: couldn't read orphan inode 15 (err -117) [ 57.873195][ T4406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.895465][ T4399] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 57.937227][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.955591][ T4399] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.034379][ T4415] FAULT_INJECTION: forcing a failure. [ 58.034379][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 58.047659][ T4415] CPU: 0 UID: 0 PID: 4415 Comm: syz.4.283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.047689][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.047702][ T4415] Call Trace: [ 58.047708][ T4415] [ 58.047717][ T4415] __dump_stack+0x1d/0x30 [ 58.047812][ T4415] dump_stack_lvl+0xe8/0x140 [ 58.047836][ T4415] dump_stack+0x15/0x1b [ 58.047856][ T4415] should_fail_ex+0x265/0x280 [ 58.047899][ T4415] should_failslab+0x8c/0xb0 [ 58.048006][ T4415] kmem_cache_alloc_noprof+0x50/0x480 [ 58.048050][ T4415] ? alloc_empty_file+0x76/0x200 [ 58.048084][ T4415] ? __rcu_read_unlock+0x4f/0x70 [ 58.048117][ T4415] alloc_empty_file+0x76/0x200 [ 58.048191][ T4415] dentry_open+0x2d/0x90 [ 58.048220][ T4415] vfs_open_tree+0x33d/0x530 [ 58.048322][ T4415] __x64_sys_open_tree+0x45/0xc0 [ 58.048350][ T4415] x64_sys_call+0x2a8b/0x3000 [ 58.048407][ T4415] do_syscall_64+0xd2/0x200 [ 58.048429][ T4415] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.048458][ T4415] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.048486][ T4415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.048552][ T4415] RIP: 0033:0x7fdaecc2efc9 [ 58.048567][ T4415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.048584][ T4415] RSP: 002b:00007fdaeb68f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 58.048602][ T4415] RAX: ffffffffffffffda RBX: 00007fdaece85fa0 RCX: 00007fdaecc2efc9 [ 58.048647][ T4415] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 58.048663][ T4415] RBP: 00007fdaeb68f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.048679][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.048695][ T4415] R13: 00007fdaece86038 R14: 00007fdaece85fa0 R15: 00007ffe69a1cab8 [ 58.048719][ T4415] [ 58.298229][ T4420] loop1: detected capacity change from 0 to 128 [ 58.329109][ T4420] syz.1.284: attempt to access beyond end of device [ 58.329109][ T4420] loop1: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 58.398603][ T4419] 0ªX¹¦À: renamed from 61ªX¹¦À [ 58.406140][ T4419] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 58.476473][ T4431] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 58.538467][ T4431] team0: Port device dummy0 added [ 58.564913][ T4436] loop4: detected capacity change from 0 to 256 [ 58.571517][ T4434] FAULT_INJECTION: forcing a failure. [ 58.571517][ T4434] name failslab, interval 1, probability 0, space 0, times 0 [ 58.584198][ T4434] CPU: 1 UID: 0 PID: 4434 Comm: syz.3.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.584232][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.584248][ T4434] Call Trace: [ 58.584303][ T4434] [ 58.584314][ T4434] __dump_stack+0x1d/0x30 [ 58.584342][ T4434] dump_stack_lvl+0xe8/0x140 [ 58.584368][ T4434] dump_stack+0x15/0x1b [ 58.584451][ T4434] should_fail_ex+0x265/0x280 [ 58.584495][ T4434] should_failslab+0x8c/0xb0 [ 58.584605][ T4434] __kvmalloc_node_noprof+0x12e/0x670 [ 58.584646][ T4434] ? alloc_netdev_mqs+0xa5/0xa50 [ 58.584683][ T4434] ? __pfx_vlan_setup+0x10/0x10 [ 58.584785][ T4434] alloc_netdev_mqs+0xa5/0xa50 [ 58.584822][ T4434] register_vlan_device+0x26c/0x3d0 [ 58.584862][ T4434] vlan_ioctl_handler+0x1b8/0x4f0 [ 58.584900][ T4434] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 58.585004][ T4434] sock_ioctl+0x4a7/0x610 [ 58.585046][ T4434] ? __pfx_sock_ioctl+0x10/0x10 [ 58.585132][ T4434] __se_sys_ioctl+0xce/0x140 [ 58.585157][ T4434] __x64_sys_ioctl+0x43/0x50 [ 58.585178][ T4434] x64_sys_call+0x1816/0x3000 [ 58.585199][ T4434] do_syscall_64+0xd2/0x200 [ 58.585228][ T4434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.585274][ T4434] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.585296][ T4434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.585317][ T4434] RIP: 0033:0x7f62e50fefc9 [ 58.585332][ T4434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.585349][ T4434] RSP: 002b:00007f62e3b46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.585405][ T4434] RAX: ffffffffffffffda RBX: 00007f62e5356090 RCX: 00007f62e50fefc9 [ 58.585418][ T4434] RDX: 0000200000000400 RSI: 0000000000008982 RDI: 0000000000000009 [ 58.585511][ T4434] RBP: 00007f62e3b46090 R08: 0000000000000000 R09: 0000000000000000 [ 58.585526][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.585543][ T4434] R13: 00007f62e5356128 R14: 00007f62e5356090 R15: 00007fff5a2fc558 [ 58.585567][ T4434] [ 58.802937][ T4434] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 58.811272][ T4434] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.821123][ T4436] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.831721][ T4434] team0: Failed to send options change via netlink (err -105) [ 58.839641][ T4434] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.848758][ T4434] team0: Port device dummy0 removed [ 58.857000][ T4434] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.935212][ T4445] loop2: detected capacity change from 0 to 512 [ 58.941757][ T4445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.958724][ T4445] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 58.973358][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.291: corrupted inode contents [ 58.986847][ T4445] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.291: mark_inode_dirty error [ 59.003265][ T4445] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.291: invalid indirect mapped block 1 (level 1) [ 59.018790][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.291: corrupted inode contents [ 59.032105][ T4445] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 59.042980][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.291: corrupted inode contents [ 59.054986][ T4445] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.291: mark_inode_dirty error [ 59.066804][ T4445] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 59.067132][ T4442] loop3: detected capacity change from 0 to 1024 [ 59.082854][ T4445] EXT4-fs (loop2): 1 truncate cleaned up [ 59.088956][ T4445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.106722][ T4442] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.117681][ T4442] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.142186][ T4442] JBD2: no valid journal superblock found [ 59.148006][ T4442] EXT4-fs (loop3): Could not load journal inode [ 59.287318][ T4469] FAULT_INJECTION: forcing a failure. [ 59.287318][ T4469] name failslab, interval 1, probability 0, space 0, times 0 [ 59.300112][ T4469] CPU: 0 UID: 0 PID: 4469 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.300140][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.300152][ T4469] Call Trace: [ 59.300158][ T4469] [ 59.300165][ T4469] __dump_stack+0x1d/0x30 [ 59.300196][ T4469] dump_stack_lvl+0xe8/0x140 [ 59.300213][ T4469] dump_stack+0x15/0x1b [ 59.300227][ T4469] should_fail_ex+0x265/0x280 [ 59.300414][ T4469] should_failslab+0x8c/0xb0 [ 59.300438][ T4469] kmem_cache_alloc_noprof+0x50/0x480 [ 59.300463][ T4469] ? getname_flags+0x80/0x3b0 [ 59.300536][ T4469] getname_flags+0x80/0x3b0 [ 59.300562][ T4469] user_path_at+0x28/0x130 [ 59.300666][ T4469] vfs_open_tree+0x19c/0x530 [ 59.300694][ T4469] __x64_sys_open_tree+0x45/0xc0 [ 59.300720][ T4469] x64_sys_call+0x2a8b/0x3000 [ 59.300740][ T4469] do_syscall_64+0xd2/0x200 [ 59.300762][ T4469] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.300889][ T4469] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.300925][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.300945][ T4469] RIP: 0033:0x7f62e50fefc9 [ 59.300958][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.300974][ T4469] RSP: 002b:00007f62e3b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 59.300991][ T4469] RAX: ffffffffffffffda RBX: 00007f62e5355fa0 RCX: 00007f62e50fefc9 [ 59.301003][ T4469] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 59.301014][ T4469] RBP: 00007f62e3b67090 R08: 0000000000000000 R09: 0000000000000000 [ 59.301108][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.301123][ T4469] R13: 00007f62e5356038 R14: 00007f62e5355fa0 R15: 00007fff5a2fc558 [ 59.301143][ T4469] [ 59.496523][ T4464] 0ªX¹¦À: renamed from caif0 [ 59.504512][ T4464] 0ªX¹¦À: entered allmulticast mode [ 59.509760][ T4464] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 59.644346][ T4480] loop1: detected capacity change from 0 to 8192 [ 59.723153][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.790293][ T4490] loop1: detected capacity change from 0 to 128 [ 59.832484][ T4490] syz.1.307: attempt to access beyond end of device [ 59.832484][ T4490] loop1: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 59.935945][ T4499] loop3: detected capacity change from 0 to 164 [ 59.943701][ T4499] FAULT_INJECTION: forcing a failure. [ 59.943701][ T4499] name failslab, interval 1, probability 0, space 0, times 0 [ 59.956417][ T4499] CPU: 1 UID: 0 PID: 4499 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.956511][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.956566][ T4499] Call Trace: [ 59.956573][ T4499] [ 59.956586][ T4499] __dump_stack+0x1d/0x30 [ 59.956688][ T4499] dump_stack_lvl+0xe8/0x140 [ 59.956720][ T4499] dump_stack+0x15/0x1b [ 59.956742][ T4499] should_fail_ex+0x265/0x280 [ 59.956787][ T4499] should_failslab+0x8c/0xb0 [ 59.956815][ T4499] kmem_cache_alloc_noprof+0x50/0x480 [ 59.956898][ T4499] ? getname_flags+0x80/0x3b0 [ 59.956934][ T4499] getname_flags+0x80/0x3b0 [ 59.956975][ T4499] getname_uflags+0x21/0x30 [ 59.957030][ T4499] __x64_sys_execveat+0x5d/0x90 [ 59.957056][ T4499] x64_sys_call+0x1fec/0x3000 [ 59.957078][ T4499] do_syscall_64+0xd2/0x200 [ 59.957168][ T4499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.957204][ T4499] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.957295][ T4499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.957325][ T4499] RIP: 0033:0x7f62e50fefc9 [ 59.957346][ T4499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.957370][ T4499] RSP: 002b:00007f62e3b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 59.957405][ T4499] RAX: ffffffffffffffda RBX: 00007f62e5355fa0 RCX: 00007f62e50fefc9 [ 59.957492][ T4499] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 59.957508][ T4499] RBP: 00007f62e3b67090 R08: 0000000000001000 R09: 0000000000000000 [ 59.957525][ T4499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.957541][ T4499] R13: 00007f62e5356038 R14: 00007f62e5355fa0 R15: 00007fff5a2fc558 [ 59.957566][ T4499] [ 59.985314][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 59.985344][ T29] audit: type=1326 audit(1760757620.101:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.094763][ T4495] loop2: detected capacity change from 0 to 1024 [ 60.102646][ T29] audit: type=1326 audit(1760757620.141:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.158764][ T4495] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.167574][ T29] audit: type=1326 audit(1760757620.141:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.173972][ T4495] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.197966][ T29] audit: type=1326 audit(1760757620.151:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.222317][ T4495] JBD2: no valid journal superblock found [ 60.232113][ T29] audit: type=1326 audit(1760757620.151:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.241723][ T4495] EXT4-fs (loop2): Could not load journal inode [ 60.265034][ T29] audit: type=1326 audit(1760757620.151:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.323652][ T29] audit: type=1326 audit(1760757620.151:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.347106][ T29] audit: type=1326 audit(1760757620.151:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.355093][ T4506] __nla_validate_parse: 8 callbacks suppressed [ 60.355111][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 60.370438][ T29] audit: type=1326 audit(1760757620.151:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.370474][ T29] audit: type=1326 audit(1760757620.151:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 60.376673][ T4506] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 60.432751][ T4497] loop0: detected capacity change from 0 to 512 [ 60.448611][ T4497] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 60.464440][ T4504] loop3: detected capacity change from 0 to 164 [ 60.477526][ T4504] syz.3.315: attempt to access beyond end of device [ 60.477526][ T4504] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 60.495380][ T4504] syz.3.315: attempt to access beyond end of device [ 60.495380][ T4504] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 60.587882][ T4508] netlink: 3 bytes leftover after parsing attributes in process `syz.4.317'. [ 60.597081][ T4508] 1ªX¹¦À: renamed from 60ªX¹¦À [ 60.611628][ T4518] loop2: detected capacity change from 0 to 164 [ 60.618147][ T4508] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 60.674552][ T4522] loop3: detected capacity change from 0 to 164 [ 60.693808][ T4518] syz.2.322: attempt to access beyond end of device [ 60.693808][ T4518] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 60.708077][ T4518] syz.2.322: attempt to access beyond end of device [ 60.708077][ T4518] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 60.723638][ T4522] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.739273][ T4522] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.750809][ T4522] Symlink component flag not implemented [ 60.756533][ T4522] Symlink component flag not implemented [ 60.763380][ T4522] Symlink component flag not implemented (7) [ 60.769431][ T4522] Symlink component flag not implemented (116) [ 60.829732][ T4522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=4522 comm=syz.3.323 [ 60.924343][ T4534] loop4: detected capacity change from 0 to 512 [ 60.971383][ T4536] loop3: detected capacity change from 0 to 1024 [ 60.981060][ T4530] loop0: detected capacity change from 0 to 512 [ 60.991197][ T4530] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 61.011575][ T4534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.011714][ T4534] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.035922][ T4530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm wÞ£ÿ: bg 0: block 104: invalid block bitmap [ 61.036215][ T4530] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 61.036456][ T4530] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm wÞ£ÿ: invalid indirect mapped block 1 (level 1) [ 61.036660][ T4530] EXT4-fs (loop0): 1 truncate cleaned up [ 61.037079][ T4530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.053026][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.125748][ T4536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.125848][ T4536] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.145323][ T4536] syz.3.329 (4536): attempted to duplicate a private mapping with mremap. This is not supported. [ 61.236032][ T4536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.329'. [ 61.245623][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.251513][ T387] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.265220][ T4536] netlink: 'syz.3.329': attribute type 39 has an invalid length. [ 61.273819][ T4536] veth1_macvtap: left promiscuous mode [ 61.336734][ T4536] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 61.373326][ T4536] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.329: inode has both inline data and extents flags [ 61.404039][ T4565] loop0: detected capacity change from 0 to 128 [ 61.485688][ T4565] syz.0.333: attempt to access beyond end of device [ 61.485688][ T4565] loop0: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 61.553576][ T4570] netlink: 27 bytes leftover after parsing attributes in process `syz.2.334'. [ 61.575721][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.622748][ T4561] loop4: detected capacity change from 0 to 32768 [ 61.722958][ T3307] loop4: p1 p3 < p5 p6 > [ 61.739587][ T4561] loop4: p1 p3 < p5 p6 > [ 61.779866][ T4572] netlink: 3 bytes leftover after parsing attributes in process `syz.1.337'. [ 61.872603][ T4572] 1ªX¹¦À: renamed from 60ªX¹¦À [ 61.893661][ T4576] loop3: detected capacity change from 0 to 1024 [ 61.900818][ T4576] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.911802][ T4576] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.921890][ T4576] JBD2: no valid journal superblock found [ 61.927688][ T4576] EXT4-fs (loop3): Could not load journal inode [ 61.939366][ T4572] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 62.066661][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 62.075601][ T4583] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 62.124995][ T4589] loop3: detected capacity change from 0 to 256 [ 62.493852][ T4605] netlink: 3 bytes leftover after parsing attributes in process `syz.1.349'. [ 62.502824][ T4605] 0ªX¹¦À: renamed from 61ªX¹¦À [ 62.516743][ T4605] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 62.564446][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 62.573349][ T4622] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 62.591316][ T4615] loop3: detected capacity change from 0 to 1024 [ 62.601237][ T4615] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.612320][ T4615] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.624278][ T4615] JBD2: no valid journal superblock found [ 62.630176][ T4615] EXT4-fs (loop3): Could not load journal inode [ 62.686038][ T4631] loop0: detected capacity change from 0 to 512 [ 62.693081][ T4631] ext4: Unknown parameter '' [ 62.721363][ T4634] loop1: detected capacity change from 0 to 128 [ 62.849406][ T4641] loop3: detected capacity change from 0 to 128 [ 62.871478][ T4634] syz.1.356: attempt to access beyond end of device [ 62.871478][ T4634] loop1: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 62.873389][ T4641] loop3: detected capacity change from 0 to 1024 [ 62.892652][ T4641] EXT4-fs: test_dummy_encryption option not supported [ 62.948327][ T4644] netlink: 27 bytes leftover after parsing attributes in process `syz.0.358'. [ 63.065631][ T4647] bridge0: port 3(vlan0) entered blocking state [ 63.071957][ T4647] bridge0: port 3(vlan0) entered disabled state [ 63.087030][ T4647] vlan0: entered allmulticast mode [ 63.092221][ T4647] bridge0: entered allmulticast mode [ 63.099497][ T4647] vlan0: left allmulticast mode [ 63.104521][ T4647] bridge0: left allmulticast mode [ 63.241606][ T4649] loop2: detected capacity change from 0 to 512 [ 63.274832][ T4649] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.298326][ T4649] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wÞ£ÿ: bg 0: block 248: padding at end of block bitmap is not set [ 63.316873][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.324778][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 63.346912][ T4649] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 63.367841][ T4649] EXT4-fs (loop2): 1 truncate cleaned up [ 63.378709][ T4649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.456064][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.528684][ T52] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.564304][ T4663] loop2: detected capacity change from 0 to 1024 [ 63.576860][ T52] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.614415][ T52] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.626363][ T4663] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.637397][ T4663] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.671163][ T4663] JBD2: no valid journal superblock found [ 63.677186][ T4663] EXT4-fs (loop2): Could not load journal inode [ 63.701011][ T4663] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 63.745876][ T52] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.789553][ T4677] loop3: detected capacity change from 0 to 512 [ 63.799122][ T4684] loop1: detected capacity change from 0 to 512 [ 63.805878][ T4682] loop0: detected capacity change from 0 to 4096 [ 63.814075][ T4682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.825531][ T4684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.838685][ T4684] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.852854][ T4684] FAULT_INJECTION: forcing a failure. [ 63.852854][ T4684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.865977][ T4684] CPU: 1 UID: 0 PID: 4684 Comm: syz.1.372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.866010][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.866026][ T4684] Call Trace: [ 63.866035][ T4684] [ 63.866044][ T4684] __dump_stack+0x1d/0x30 [ 63.866070][ T4684] dump_stack_lvl+0xe8/0x140 [ 63.866157][ T4684] dump_stack+0x15/0x1b [ 63.866190][ T4684] should_fail_ex+0x265/0x280 [ 63.866252][ T4684] should_fail+0xb/0x20 [ 63.866282][ T4684] should_fail_usercopy+0x1a/0x20 [ 63.866378][ T4684] _copy_from_user+0x1c/0xb0 [ 63.866497][ T4684] do_ipv6_setsockopt+0x124/0x2160 [ 63.866524][ T4684] ? kstrtoull+0x111/0x140 [ 63.866555][ T4684] ? avc_has_perm_noaudit+0x1b1/0x200 [ 63.866645][ T4684] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 63.866674][ T4684] ipv6_setsockopt+0x59/0x130 [ 63.866699][ T4684] udpv6_setsockopt+0x99/0xb0 [ 63.866784][ T4684] sock_common_setsockopt+0x69/0x80 [ 63.866805][ T4684] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 63.866828][ T4684] __sys_setsockopt+0x184/0x200 [ 63.866865][ T4684] __x64_sys_setsockopt+0x64/0x80 [ 63.866945][ T4684] x64_sys_call+0x20ec/0x3000 [ 63.866983][ T4684] do_syscall_64+0xd2/0x200 [ 63.867015][ T4684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.867049][ T4684] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.867130][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.867155][ T4684] RIP: 0033:0x7efcdce8efc9 [ 63.867174][ T4684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.867196][ T4684] RSP: 002b:00007efcdb8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 63.867215][ T4684] RAX: ffffffffffffffda RBX: 00007efcdd0e5fa0 RCX: 00007efcdce8efc9 [ 63.867227][ T4684] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000006 [ 63.867266][ T4684] RBP: 00007efcdb8f7090 R08: 0000000000000108 R09: 0000000000000000 [ 63.867304][ T4684] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 63.867320][ T4684] R13: 00007efcdd0e6038 R14: 00007efcdd0e5fa0 R15: 00007ffe488b5d98 [ 63.867344][ T4684] [ 63.872576][ T4677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.925968][ T4682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.926653][ T4677] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.999863][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 64.041418][ T4677] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.371: corrupted inode contents [ 64.059492][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 64.060844][ T4693] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 16: comm syz.0.373: bad entry in directory: inode out of bounds - offset=76, inode=589840, rec_len=16, size=4096 fake=0 [ 64.103488][ T4692] 9pnet: Could not find request transport: fd [ 65.539062][ T4755] __dump_stack+0x1d/0x30 [ 65.539097][ T4755] dump_stack_lvl+0xe8/0x140 [ 65.539141][ T4755] dump_stack+0x15/0x1b [ 65.539163][ T4755] should_fail_ex+0x265/0x280 [ 65.539207][ T4755] should_fail+0xb/0x20 [ 65.539248][ T4755] should_fail_usercopy+0x1a/0x20 [ 65.539345][ T4755] _copy_from_user+0x1c/0xb0 [ 65.539377][ T4755] uhid_char_write+0xef/0x650 [ 65.539442][ T4755] ? __pfx_uhid_char_write+0x10/0x10 [ 65.539470][ T4755] vfs_write+0x269/0x960 [ 65.539493][ T4755] ? __rcu_read_unlock+0x4f/0x70 [ 65.539523][ T4755] ? __fget_files+0x184/0x1c0 [ 65.539560][ T4755] ksys_write+0xda/0x1a0 [ 65.539620][ T4755] __x64_sys_write+0x40/0x50 [ 65.539718][ T4755] x64_sys_call+0x2802/0x3000 [ 65.539816][ T4755] do_syscall_64+0xd2/0x200 [ 65.539843][ T4755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.539948][ T4755] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.539971][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.540000][ T4755] RIP: 0033:0x7fdaecc2efc9 [ 65.540085][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.540104][ T4755] RSP: 002b:00007fdaeb68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.540124][ T4755] RAX: ffffffffffffffda RBX: 00007fdaece85fa0 RCX: 00007fdaecc2efc9 [ 65.540137][ T4755] RDX: 0000000000000128 RSI: 0000200000000480 RDI: 0000000000000003 [ 65.540270][ T4755] RBP: 00007fdaeb68f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.540287][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.540348][ T4755] R13: 00007fdaece86038 R14: 00007fdaece85fa0 R15: 00007ffe69a1cab8 [ 65.540368][ T4755] [ 65.742139][ T4749] JBD2: no valid journal superblock found [ 65.747978][ T4749] EXT4-fs (loop3): Could not load journal inode [ 65.760920][ T4754] tipc: Started in network mode [ 65.765904][ T4754] tipc: Node identity 26ac0717098f, cluster identity 4711 [ 65.773225][ T4754] tipc: Enabled bearer , priority 0 [ 65.782463][ T29] audit: type=1400 audit(1760757625.891:1897): avc: denied { ioctl } for pid=4759 comm="syz.4.394" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8936 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.792768][ T4754] syzkaller0: entered promiscuous mode [ 65.815142][ T4754] syzkaller0: entered allmulticast mode [ 65.845038][ T4754] tipc: Resetting bearer [ 65.863561][ T29] audit: type=1400 audit(1760757625.961:1898): avc: denied { setopt } for pid=4752 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.883659][ T29] audit: type=1326 audit(1760757625.961:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 65.908229][ T29] audit: type=1326 audit(1760757625.961:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 65.931590][ T29] audit: type=1326 audit(1760757625.971:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 65.955923][ T29] audit: type=1326 audit(1760757625.971:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 65.979270][ T29] audit: type=1326 audit(1760757625.971:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 66.002643][ T29] audit: type=1326 audit(1760757625.971:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 66.072669][ T29] audit: type=1326 audit(1760757626.191:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 66.106678][ T4752] tipc: Resetting bearer [ 66.136100][ T4752] tipc: Disabling bearer [ 66.157360][ T4769] loop0: detected capacity change from 0 to 128 [ 66.218116][ T4769] syz.0.396: attempt to access beyond end of device [ 66.218116][ T4769] loop0: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 66.303712][ T4781] loop1: detected capacity change from 0 to 128 [ 66.316137][ T4781] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.339057][ T4781] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.422159][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.432624][ T4784] __nla_validate_parse: 6 callbacks suppressed [ 66.432642][ T4784] netlink: 27 bytes leftover after parsing attributes in process `syz.3.400'. [ 66.683461][ T4793] loop1: detected capacity change from 0 to 1024 [ 66.693615][ T4793] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.704567][ T4793] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.811793][ T4793] JBD2: no valid journal superblock found [ 66.817607][ T4793] EXT4-fs (loop1): Could not load journal inode [ 66.896983][ T4790] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 67.381997][ T4812] loop2: detected capacity change from 0 to 1024 [ 67.390407][ T4812] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.401570][ T4812] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.442128][ T4799] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.449521][ T4799] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.480231][ T4812] JBD2: no valid journal superblock found [ 67.486115][ T4812] EXT4-fs (loop2): Could not load journal inode [ 67.528329][ T4799] 0ªX¹¦À: left allmulticast mode [ 67.585054][ T4823] FAULT_INJECTION: forcing a failure. [ 67.585054][ T4823] name failslab, interval 1, probability 0, space 0, times 0 [ 67.597842][ T4823] CPU: 0 UID: 0 PID: 4823 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.597882][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.597900][ T4823] Call Trace: [ 67.597954][ T4823] [ 67.597965][ T4823] __dump_stack+0x1d/0x30 [ 67.597994][ T4823] dump_stack_lvl+0xe8/0x140 [ 67.598022][ T4823] dump_stack+0x15/0x1b [ 67.598083][ T4823] should_fail_ex+0x265/0x280 [ 67.598130][ T4823] should_failslab+0x8c/0xb0 [ 67.598167][ T4823] kmem_cache_alloc_noprof+0x50/0x480 [ 67.598203][ T4823] ? security_inode_alloc+0x37/0x100 [ 67.598289][ T4823] security_inode_alloc+0x37/0x100 [ 67.598315][ T4823] inode_init_always_gfp+0x4b7/0x500 [ 67.598351][ T4823] ? __pfx_sock_alloc_inode+0x10/0x10 [ 67.598379][ T4823] alloc_inode+0x58/0x170 [ 67.598409][ T4823] __sock_create+0x122/0x5b0 [ 67.598447][ T4823] __sys_socketpair+0x1bc/0x430 [ 67.598551][ T4823] __x64_sys_socketpair+0x52/0x60 [ 67.598599][ T4823] x64_sys_call+0x2bf6/0x3000 [ 67.598629][ T4823] do_syscall_64+0xd2/0x200 [ 67.598661][ T4823] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.598744][ T4823] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.598813][ T4823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.598842][ T4823] RIP: 0033:0x7f6110ce0f1a [ 67.598868][ T4823] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.598903][ T4823] RSP: 002b:00007f610f73ef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 67.598929][ T4823] RAX: ffffffffffffffda RBX: 00007f6110f35f00 RCX: 00007f6110ce0f1a [ 67.598968][ T4823] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 67.598985][ T4823] RBP: 00007f610f73f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.599001][ T4823] R10: 00007f610f73ef98 R11: 0000000000000246 R12: 0000000000000002 [ 67.599018][ T4823] R13: 00007f6110f36038 R14: 00007f6110f35fa0 R15: 00007ffc46b4dee8 [ 67.599065][ T4823] [ 67.599130][ T4823] socket: no more sockets [ 67.903689][ T4799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.914990][ T4799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.000614][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 68.041308][ T4799] ip6gre1: left allmulticast mode [ 68.098539][ T135] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.107576][ T135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.196283][ T4854] loop1: detected capacity change from 0 to 128 [ 68.208462][ T135] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.217469][ T135] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.290492][ T4854] syz.1.414: attempt to access beyond end of device [ 68.290492][ T4854] loop1: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 68.306716][ T135] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.315743][ T135] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.338198][ T4856] loop3: detected capacity change from 0 to 1024 [ 68.347868][ T135] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.357540][ T135] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.365514][ T4856] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.377475][ T4856] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.387976][ T4856] JBD2: no valid journal superblock found [ 68.393803][ T4856] EXT4-fs (loop3): Could not load journal inode [ 68.417590][ T4853] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 68.579974][ T4874] macvtap0: refused to change device tx_queue_len [ 68.588294][ T4872] netlink: 27 bytes leftover after parsing attributes in process `syz.0.416'. [ 68.630514][ T4870] netlink: 3 bytes leftover after parsing attributes in process `syz.2.417'. [ 68.639820][ T4870] 0ªX¹¦À: renamed from 61ªX¹¦À [ 68.676396][ T4870] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 68.912468][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 68.935641][ T1945] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.972268][ T1945] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.998766][ T1945] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.026054][ T1945] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.074262][ T4908] netlink: 'syz.1.429': attribute type 29 has an invalid length. [ 69.088642][ T4909] loop2: detected capacity change from 0 to 1024 [ 69.096043][ T4908] netlink: 'syz.1.429': attribute type 29 has an invalid length. [ 69.105214][ T4908] netlink: 500 bytes leftover after parsing attributes in process `syz.1.429'. [ 69.133337][ T4909] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.144341][ T4909] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.171496][ T4909] JBD2: no valid journal superblock found [ 69.177299][ T4909] EXT4-fs (loop2): Could not load journal inode [ 69.186106][ T4913] 9pnet_fd: Insufficient options for proto=fd [ 69.213394][ T4913] xt_CT: No such helper "netbios-ns" [ 69.708248][ T4954] FAULT_INJECTION: forcing a failure. [ 69.708248][ T4954] name failslab, interval 1, probability 0, space 0, times 0 [ 69.720947][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.720982][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.720998][ T4954] Call Trace: [ 69.721005][ T4954] [ 69.721077][ T4954] __dump_stack+0x1d/0x30 [ 69.721099][ T4954] dump_stack_lvl+0xe8/0x140 [ 69.721118][ T4954] dump_stack+0x15/0x1b [ 69.721140][ T4954] should_fail_ex+0x265/0x280 [ 69.721185][ T4954] should_failslab+0x8c/0xb0 [ 69.721262][ T4954] kmem_cache_alloc_noprof+0x50/0x480 [ 69.721372][ T4954] ? audit_log_start+0x342/0x720 [ 69.721396][ T4954] audit_log_start+0x342/0x720 [ 69.721421][ T4954] ? kstrtouint+0x76/0xc0 [ 69.721490][ T4954] audit_seccomp+0x48/0x100 [ 69.721561][ T4954] ? __seccomp_filter+0x82d/0x1250 [ 69.721594][ T4954] __seccomp_filter+0x83e/0x1250 [ 69.721626][ T4954] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.721683][ T4954] ? vfs_write+0x7e8/0x960 [ 69.721712][ T4954] ? __rcu_read_unlock+0x4f/0x70 [ 69.721745][ T4954] ? __fget_files+0x184/0x1c0 [ 69.721823][ T4954] __secure_computing+0x82/0x150 [ 69.721858][ T4954] syscall_trace_enter+0xcf/0x1e0 [ 69.721893][ T4954] do_syscall_64+0xac/0x200 [ 69.721923][ T4954] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.722019][ T4954] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.722046][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.722074][ T4954] RIP: 0033:0x7f6110cdefc9 [ 69.722094][ T4954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.722195][ T4954] RSP: 002b:00007f610f73f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 69.722226][ T4954] RAX: ffffffffffffffda RBX: 00007f6110f35fa0 RCX: 00007f6110cdefc9 [ 69.722251][ T4954] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000008006 [ 69.722266][ T4954] RBP: 00007f610f73f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.722337][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.722349][ T4954] R13: 00007f6110f36038 R14: 00007f6110f35fa0 R15: 00007ffc46b4dee8 [ 69.722392][ T4954] [ 70.311045][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 70.311075][ T29] audit: type=1400 audit(1760757630.421:2274): avc: denied { map_create } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.337019][ T29] audit: type=1400 audit(1760757630.441:2275): avc: denied { prog_load } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.356085][ T29] audit: type=1400 audit(1760757630.441:2276): avc: denied { prog_load } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.375255][ T29] audit: type=1400 audit(1760757630.441:2277): avc: denied { create } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 70.394897][ T29] audit: type=1400 audit(1760757630.441:2278): avc: denied { prog_load } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.413954][ T29] audit: type=1400 audit(1760757630.441:2279): avc: denied { prog_load } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.419071][ T4972] netlink: 3 bytes leftover after parsing attributes in process `syz.2.445'. [ 70.432980][ T29] audit: type=1400 audit(1760757630.441:2280): avc: denied { prog_load } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.433014][ T29] audit: type=1400 audit(1760757630.441:2281): avc: denied { prog_load } for pid=4975 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.481815][ T29] audit: type=1326 audit(1760757630.531:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745803efc9 code=0x7ffc0000 [ 70.505247][ T29] audit: type=1326 audit(1760757630.531:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745803efc9 code=0x7ffc0000 [ 70.537873][ T4972] 1ªX¹¦À: renamed from 60ªX¹¦À [ 70.547630][ T4972] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.589514][ T4987] netlink: 27 bytes leftover after parsing attributes in process `syz.2.451'. [ 71.010377][ T5014] netlink: 3 bytes leftover after parsing attributes in process `syz.0.462'. [ 71.019400][ T5014] 0ªX¹¦À: renamed from 61ªX¹¦À [ 71.025825][ T5014] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 71.271167][ T5029] netlink: 27 bytes leftover after parsing attributes in process `syz.0.468'. [ 71.639474][ T5039] netlink: 3 bytes leftover after parsing attributes in process `syz.4.473'. [ 71.655589][ T5039] 0ªX¹¦À: renamed from 61ªX¹¦À [ 71.663777][ T5039] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 72.495691][ T5080] netlink: 3 bytes leftover after parsing attributes in process `syz.2.489'. [ 72.504705][ T5080] 0ªX¹¦À: renamed from 61ªX¹¦À [ 72.511504][ T5080] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 72.674831][ T5101] netlink: 27 bytes leftover after parsing attributes in process `syz.4.494'. [ 72.874615][ T5109] netlink: 3 bytes leftover after parsing attributes in process `syz.3.501'. [ 72.883634][ T5109] 1ªX¹¦À: renamed from 60ªX¹¦À [ 72.890018][ T5109] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 73.713131][ T5148] netlink: 27 bytes leftover after parsing attributes in process `syz.2.515'. [ 73.745363][ T5141] netlink: 3 bytes leftover after parsing attributes in process `syz.4.513'. [ 73.754960][ T5141] 1ªX¹¦À: renamed from 60ªX¹¦À [ 73.764739][ T5141] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.634391][ T5186] netlink: 3 bytes leftover after parsing attributes in process `syz.1.529'. [ 74.643950][ T5186] 1ªX¹¦À: renamed from 60ªX¹¦À [ 74.650575][ T5186] 1ªX¹¦À: entered allmulticast mode [ 74.655852][ T5186] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.814523][ T5207] netlink: 27 bytes leftover after parsing attributes in process `syz.1.538'. [ 75.057349][ T5222] netlink: 3 bytes leftover after parsing attributes in process `syz.0.545'. [ 75.066694][ T5222] 1ªX¹¦À: renamed from 60ªX¹¦À [ 75.074429][ T5222] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 75.136143][ T5234] netlink: 27 bytes leftover after parsing attributes in process `syz.0.549'. [ 75.224152][ T5242] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 75.312931][ T29] kauditd_printk_skb: 2079 callbacks suppressed [ 75.312946][ T29] audit: type=1326 audit(1760757635.431:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7458035e67 code=0x7ffc0000 [ 75.347981][ T29] audit: type=1326 audit(1760757635.431:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7457fdb099 code=0x7ffc0000 [ 75.371290][ T29] audit: type=1326 audit(1760757635.431:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f745803efc9 code=0x7ffc0000 [ 75.394898][ T29] audit: type=1400 audit(1760757635.431:4366): avc: denied { map_create } for pid=5249 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.414135][ T29] audit: type=1400 audit(1760757635.431:4367): avc: denied { prog_load } for pid=5249 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.433291][ T29] audit: type=1400 audit(1760757635.431:4368): avc: denied { prog_load } for pid=5249 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.452473][ T29] audit: type=1400 audit(1760757635.431:4369): avc: denied { create } for pid=5249 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 75.471918][ T29] audit: type=1326 audit(1760757635.461:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7458035e67 code=0x7ffc0000 [ 75.495419][ T29] audit: type=1326 audit(1760757635.461:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7457fdb099 code=0x7ffc0000 [ 75.518849][ T29] audit: type=1326 audit(1760757635.461:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7458035e67 code=0x7ffc0000 [ 75.559660][ T5257] 1ªX¹¦À: renamed from 60ªX¹¦À [ 75.567315][ T5257] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 75.732304][ T5273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42240 sclass=netlink_audit_socket pid=5273 comm=syz.4.565 [ 75.912627][ T5285] 0ªX¹¦À: renamed from 61ªX¹¦À [ 75.919320][ T5285] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 76.354131][ T5323] 1ªX¹¦À: renamed from 60ªX¹¦À [ 76.364109][ T5323] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 76.750616][ T5354] __nla_validate_parse: 7 callbacks suppressed [ 76.750635][ T5354] netlink: 27 bytes leftover after parsing attributes in process `syz.1.599'. [ 76.909658][ T5358] netlink: 3 bytes leftover after parsing attributes in process `syz.1.601'. [ 76.918869][ T5358] 0ªX¹¦À: renamed from 61ªX¹¦À [ 76.926200][ T5358] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 77.157841][ T5383] netlink: 3 bytes leftover after parsing attributes in process `syz.3.610'. [ 77.166853][ T5383] 0ªX¹¦À: renamed from 61ªX¹¦À [ 77.173449][ T5383] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 77.301869][ T5397] netlink: 27 bytes leftover after parsing attributes in process `syz.0.616'. [ 77.472942][ T5407] netlink: 3 bytes leftover after parsing attributes in process `syz.3.621'. [ 77.481990][ T5407] 1ªX¹¦À: renamed from 60ªX¹¦À [ 77.488597][ T5407] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 77.830521][ T5431] netlink: 27 bytes leftover after parsing attributes in process `syz.2.629'. [ 78.064578][ T5444] netlink: 3 bytes leftover after parsing attributes in process `syz.2.636'. [ 78.073479][ T5444] 0ªX¹¦À: renamed from 61ªX¹¦À [ 78.079866][ T5444] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 78.553149][ T5477] netlink: 27 bytes leftover after parsing attributes in process `syz.3.647'. [ 78.684018][ T5479] netlink: 3 bytes leftover after parsing attributes in process `syz.3.649'. [ 78.693124][ T5479] 0ªX¹¦À: renamed from 61ªX¹¦À [ 78.699632][ T5479] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.238202][ T5512] netlink: 27 bytes leftover after parsing attributes in process `syz.4.662'. [ 79.436259][ T5523] 1ªX¹¦À: renamed from 60ªX¹¦À [ 79.443737][ T5523] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.145808][ T5554] 1ªX¹¦À: renamed from 60ªX¹¦À [ 80.152442][ T5554] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.213243][ T5575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5575 comm=syz.0.690 [ 80.327630][ T29] kauditd_printk_skb: 2568 callbacks suppressed [ 80.327646][ T29] audit: type=1400 audit(1760757640.441:6941): avc: denied { map_create } for pid=5580 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.374060][ T29] audit: type=1400 audit(1760757640.471:6942): avc: denied { prog_load } for pid=5580 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.393090][ T29] audit: type=1400 audit(1760757640.471:6943): avc: denied { prog_load } for pid=5580 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.412158][ T29] audit: type=1400 audit(1760757640.471:6944): avc: denied { read write } for pid=5580 comm="syz.0.693" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.436147][ T29] audit: type=1400 audit(1760757640.471:6945): avc: denied { write } for pid=5580 comm="syz.0.693" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=0 [ 80.463647][ T29] audit: type=1400 audit(1760757640.491:6946): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.488005][ T29] audit: type=1400 audit(1760757640.491:6947): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.512319][ T29] audit: type=1400 audit(1760757640.551:6948): avc: denied { map_create } for pid=5585 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.531567][ T29] audit: type=1400 audit(1760757640.551:6949): avc: denied { prog_load } for pid=5585 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.550644][ T29] audit: type=1326 audit(1760757640.551:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 80.706714][ T5598] 0ªX¹¦À: renamed from 61ªX¹¦À [ 80.713420][ T5598] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.292732][ T5639] 0ªX¹¦À: renamed from 61ªX¹¦À [ 81.301291][ T5639] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.529563][ T5654] 1ªX¹¦À: renamed from 60ªX¹¦À [ 81.538937][ T5654] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.639525][ T5676] FAULT_INJECTION: forcing a failure. [ 81.639525][ T5676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.652676][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.652751][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.652768][ T5676] Call Trace: [ 81.652776][ T5676] [ 81.652816][ T5676] __dump_stack+0x1d/0x30 [ 81.652842][ T5676] dump_stack_lvl+0xe8/0x140 [ 81.652866][ T5676] dump_stack+0x15/0x1b [ 81.652886][ T5676] should_fail_ex+0x265/0x280 [ 81.652929][ T5676] should_fail+0xb/0x20 [ 81.652973][ T5676] should_fail_usercopy+0x1a/0x20 [ 81.652998][ T5676] _copy_from_user+0x1c/0xb0 [ 81.653029][ T5676] __copy_msghdr+0x244/0x300 [ 81.653092][ T5676] ___sys_sendmsg+0x109/0x1d0 [ 81.653141][ T5676] __sys_sendmmsg+0x178/0x300 [ 81.653188][ T5676] __x64_sys_sendmmsg+0x57/0x70 [ 81.653226][ T5676] x64_sys_call+0x1c4a/0x3000 [ 81.653323][ T5676] do_syscall_64+0xd2/0x200 [ 81.653353][ T5676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.653388][ T5676] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.653496][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.653525][ T5676] RIP: 0033:0x7f62e50fefc9 [ 81.653549][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.653569][ T5676] RSP: 002b:00007f62e3b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.653671][ T5676] RAX: ffffffffffffffda RBX: 00007f62e5355fa0 RCX: 00007f62e50fefc9 [ 81.653684][ T5676] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 81.653696][ T5676] RBP: 00007f62e3b67090 R08: 0000000000000000 R09: 0000000000000000 [ 81.653777][ T5676] R10: 0000000004000804 R11: 0000000000000246 R12: 0000000000000001 [ 81.653794][ T5676] R13: 00007f62e5356038 R14: 00007f62e5355fa0 R15: 00007fff5a2fc558 [ 81.653812][ T5676] [ 82.120547][ T5691] __nla_validate_parse: 12 callbacks suppressed [ 82.120586][ T5691] netlink: 3 bytes leftover after parsing attributes in process `syz.3.736'. [ 82.135841][ T5691] 1ªX¹¦À: renamed from 60ªX¹¦À [ 82.142609][ T5691] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 82.173022][ T5700] netlink: 27 bytes leftover after parsing attributes in process `syz.1.739'. [ 82.410280][ T5720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=5720 comm=syz.2.749 [ 82.504368][ T5730] netlink: 27 bytes leftover after parsing attributes in process `syz.3.753'. [ 82.592950][ T5726] netlink: 3 bytes leftover after parsing attributes in process `syz.4.752'. [ 82.601819][ T5726] 0ªX¹¦À: renamed from 61ªX¹¦À [ 82.614005][ T5726] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 82.698688][ T5749] FAULT_INJECTION: forcing a failure. [ 82.698688][ T5749] name failslab, interval 1, probability 0, space 0, times 0 [ 82.711626][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz.4.761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.711692][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.711705][ T5749] Call Trace: [ 82.711711][ T5749] [ 82.711718][ T5749] __dump_stack+0x1d/0x30 [ 82.711798][ T5749] dump_stack_lvl+0xe8/0x140 [ 82.711815][ T5749] dump_stack+0x15/0x1b [ 82.711829][ T5749] should_fail_ex+0x265/0x280 [ 82.711860][ T5749] should_failslab+0x8c/0xb0 [ 82.711883][ T5749] kmem_cache_alloc_noprof+0x50/0x480 [ 82.711977][ T5749] ? audit_log_start+0x342/0x720 [ 82.711995][ T5749] audit_log_start+0x342/0x720 [ 82.712013][ T5749] audit_seccomp+0x48/0x100 [ 82.712111][ T5749] ? __seccomp_filter+0x82d/0x1250 [ 82.712134][ T5749] __seccomp_filter+0x83e/0x1250 [ 82.712179][ T5749] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.712260][ T5749] ? vfs_write+0x7e8/0x960 [ 82.712298][ T5749] ? __rcu_read_unlock+0x4f/0x70 [ 82.712319][ T5749] ? __fget_files+0x184/0x1c0 [ 82.712348][ T5749] __secure_computing+0x82/0x150 [ 82.712371][ T5749] syscall_trace_enter+0xcf/0x1e0 [ 82.712394][ T5749] do_syscall_64+0xac/0x200 [ 82.712414][ T5749] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.712452][ T5749] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.712470][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.712488][ T5749] RIP: 0033:0x7fdaecc2d9dc [ 82.712500][ T5749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.712600][ T5749] RSP: 002b:00007fdaeb68f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.712617][ T5749] RAX: ffffffffffffffda RBX: 00007fdaece85fa0 RCX: 00007fdaecc2d9dc [ 82.712628][ T5749] RDX: 000000000000000f RSI: 00007fdaeb68f0a0 RDI: 0000000000000003 [ 82.712638][ T5749] RBP: 00007fdaeb68f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.712708][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.712741][ T5749] R13: 00007fdaece86038 R14: 00007fdaece85fa0 R15: 00007ffe69a1cab8 [ 82.712759][ T5749] [ 83.025385][ T5759] netlink: 27 bytes leftover after parsing attributes in process `syz.0.765'. [ 83.183727][ T5765] netlink: 3 bytes leftover after parsing attributes in process `syz.0.768'. [ 83.192652][ T5765] 0ªX¹¦À: renamed from 61ªX¹¦À [ 83.200741][ T5765] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.373622][ T5790] netlink: 27 bytes leftover after parsing attributes in process `syz.0.778'. [ 83.638342][ T5803] netlink: 3 bytes leftover after parsing attributes in process `syz.0.784'. [ 83.647335][ T5803] 1ªX¹¦À: renamed from 60ªX¹¦À [ 83.654364][ T5803] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.793066][ T5818] netlink: 27 bytes leftover after parsing attributes in process `syz.0.789'. [ 84.055811][ T5836] netlink: 3 bytes leftover after parsing attributes in process `syz.0.797'. [ 84.064769][ T5836] 0ªX¹¦À: renamed from 61ªX¹¦À [ 84.075399][ T5836] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.452833][ T5869] 1ªX¹¦À: renamed from 60ªX¹¦À [ 84.459423][ T5869] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.823681][ T5902] netlink: 'syz.4.821': attribute type 13 has an invalid length. [ 85.119261][ T5906] 0ªX¹¦À: renamed from 61ªX¹¦À [ 85.125984][ T5906] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 85.344700][ T29] kauditd_printk_skb: 2495 callbacks suppressed [ 85.344715][ T29] audit: type=1400 audit(1760757645.461:9444): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.411255][ T29] audit: type=1400 audit(1760757645.461:9445): avc: denied { map_create } for pid=5918 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.430449][ T29] audit: type=1400 audit(1760757645.461:9446): avc: denied { prog_load } for pid=5918 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.449593][ T29] audit: type=1400 audit(1760757645.461:9447): avc: denied { prog_load } for pid=5918 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.468793][ T29] audit: type=1400 audit(1760757645.461:9448): avc: denied { read write } for pid=5918 comm="syz.2.830" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.492838][ T29] audit: type=1400 audit(1760757645.471:9449): avc: denied { write } for pid=5918 comm="syz.2.830" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=0 [ 85.516423][ T29] audit: type=1400 audit(1760757645.501:9450): avc: denied { map_create } for pid=5927 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.535775][ T29] audit: type=1400 audit(1760757645.501:9451): avc: denied { prog_load } for pid=5927 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.554830][ T29] audit: type=1400 audit(1760757645.501:9452): avc: denied { open } for pid=5927 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 85.574035][ T29] audit: type=1400 audit(1760757645.501:9453): avc: denied { create } for pid=5927 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 85.719716][ T5937] 0ªX¹¦À: renamed from 61ªX¹¦À [ 85.727347][ T5937] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 86.561622][ T5976] netlink: 'syz.3.850': attribute type 13 has an invalid length. [ 86.571995][ T5972] 1ªX¹¦À: renamed from 60ªX¹¦À [ 86.578530][ T5972] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 87.029234][ T6001] 1ªX¹¦À: renamed from 60ªX¹¦À [ 87.036186][ T6001] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 87.427766][ T6019] __nla_validate_parse: 10 callbacks suppressed [ 87.427780][ T6019] netlink: 27 bytes leftover after parsing attributes in process `syz.2.870'. [ 87.567868][ T6032] team0 (unregistering): Port device team_slave_0 removed [ 87.576752][ T6032] team0 (unregistering): Port device team_slave_1 removed [ 87.615754][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 87.709466][ T6034] netlink: 3 bytes leftover after parsing attributes in process `syz.0.876'. [ 87.719347][ T6034] 1ªX¹¦À: renamed from 60ªX¹¦À [ 87.726678][ T6034] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 87.790846][ T6048] netlink: 27 bytes leftover after parsing attributes in process `syz.0.882'. [ 88.062720][ T6069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.891'. [ 88.071656][ T6069] 0ªX¹¦À: renamed from 61ªX¹¦À [ 88.078194][ T6069] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 88.250280][ T6082] netlink: 27 bytes leftover after parsing attributes in process `syz.4.896'. [ 88.394903][ T6093] wireguard0: entered promiscuous mode [ 88.400476][ T6093] wireguard0: entered allmulticast mode [ 88.616413][ T6098] netlink: 3 bytes leftover after parsing attributes in process `syz.2.902'. [ 88.625443][ T6098] 1ªX¹¦À: renamed from 60ªX¹¦À [ 88.637575][ T6098] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 88.707155][ T6114] netlink: 27 bytes leftover after parsing attributes in process `syz.3.909'. [ 89.311938][ T6139] netlink: 3 bytes leftover after parsing attributes in process `syz.4.918'. [ 89.322763][ T6139] 1ªX¹¦À: renamed from 60ªX¹¦À [ 89.329272][ T6139] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 89.548682][ T6149] netlink: 27 bytes leftover after parsing attributes in process `syz.2.922'. [ 89.883054][ T6169] 0ªX¹¦À: renamed from 61ªX¹¦À [ 89.889448][ T6169] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 90.354877][ T29] kauditd_printk_skb: 2948 callbacks suppressed [ 90.354891][ T29] audit: type=1400 audit(1760757650.471:12400): avc: denied { map_create } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.380790][ T29] audit: type=1400 audit(1760757650.481:12401): avc: denied { prog_load } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.399938][ T29] audit: type=1400 audit(1760757650.481:12402): avc: denied { prog_load } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.419023][ T29] audit: type=1400 audit(1760757650.481:12403): avc: denied { create } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 90.438561][ T29] audit: type=1400 audit(1760757650.481:12404): avc: denied { prog_load } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.457725][ T29] audit: type=1400 audit(1760757650.481:12405): avc: denied { prog_load } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.476948][ T29] audit: type=1400 audit(1760757650.481:12406): avc: denied { prog_load } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.496042][ T29] audit: type=1400 audit(1760757650.481:12407): avc: denied { prog_load } for pid=6197 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.515369][ T29] audit: type=1400 audit(1760757650.511:12408): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.520698][ T6205] FAULT_INJECTION: forcing a failure. [ 90.520698][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 90.539713][ T29] audit: type=1400 audit(1760757650.531:12409): avc: denied { create } for pid=6200 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 90.552430][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.2.943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.552502][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.552624][ T6205] Call Trace: [ 90.552634][ T6205] [ 90.552647][ T6205] __dump_stack+0x1d/0x30 [ 90.552676][ T6205] dump_stack_lvl+0xe8/0x140 [ 90.552704][ T6205] dump_stack+0x15/0x1b [ 90.552728][ T6205] should_fail_ex+0x265/0x280 [ 90.552828][ T6205] should_failslab+0x8c/0xb0 [ 90.552875][ T6205] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 90.553001][ T6205] ? sidtab_sid2str_get+0xa0/0x130 [ 90.553045][ T6205] kmemdup_noprof+0x2b/0x70 [ 90.553137][ T6205] sidtab_sid2str_get+0xa0/0x130 [ 90.553178][ T6205] security_sid_to_context_core+0x1eb/0x2e0 [ 90.553217][ T6205] security_sid_to_context+0x27/0x40 [ 90.553374][ T6205] avc_audit_post_callback+0x10f/0x520 [ 90.553445][ T6205] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 90.553492][ T6205] common_lsm_audit+0x1bb/0x230 [ 90.553527][ T6205] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 90.553618][ T6205] slow_avc_audit+0x104/0x140 [ 90.553671][ T6205] cred_has_capability+0x1ad/0x280 [ 90.553715][ T6205] selinux_capable+0x31/0x40 [ 90.553743][ T6205] security_capable+0x83/0x90 [ 90.553820][ T6205] capable+0x4c/0xb0 [ 90.553850][ T6205] __se_sys_finit_module+0x34/0x460 [ 90.553877][ T6205] ? vfs_write+0x7e8/0x960 [ 90.553909][ T6205] ? __rcu_read_unlock+0x4f/0x70 [ 90.553993][ T6205] ? __fget_files+0x184/0x1c0 [ 90.554031][ T6205] ? fput+0x8f/0xc0 [ 90.554072][ T6205] ? ksys_write+0x192/0x1a0 [ 90.554152][ T6205] __x64_sys_finit_module+0x3e/0x50 [ 90.554179][ T6205] x64_sys_call+0x2a96/0x3000 [ 90.554208][ T6205] do_syscall_64+0xd2/0x200 [ 90.554242][ T6205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.554323][ T6205] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.554355][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.554459][ T6205] RIP: 0033:0x7f745803efc9 [ 90.554481][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.554505][ T6205] RSP: 002b:00007f7456aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 90.554555][ T6205] RAX: ffffffffffffffda RBX: 00007f7458295fa0 RCX: 00007f745803efc9 [ 90.554573][ T6205] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 90.554590][ T6205] RBP: 00007f7456aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.554630][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.554646][ T6205] R13: 00007f7458296038 R14: 00007f7458295fa0 R15: 00007ffdee970588 [ 90.554668][ T6205] [ 90.843545][ T6207] 0ªX¹¦À: renamed from 61ªX¹¦À [ 90.859530][ T6207] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 91.822433][ T6257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=6257 comm=syz.3.963 [ 91.871079][ T6262] FAULT_INJECTION: forcing a failure. [ 91.871079][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.884314][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.3.966 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.884345][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.884362][ T6262] Call Trace: [ 91.884409][ T6262] [ 91.884417][ T6262] __dump_stack+0x1d/0x30 [ 91.884468][ T6262] dump_stack_lvl+0xe8/0x140 [ 91.884488][ T6262] dump_stack+0x15/0x1b [ 91.884507][ T6262] should_fail_ex+0x265/0x280 [ 91.884542][ T6262] should_fail+0xb/0x20 [ 91.884604][ T6262] should_fail_usercopy+0x1a/0x20 [ 91.884631][ T6262] _copy_to_user+0x20/0xa0 [ 91.884664][ T6262] simple_read_from_buffer+0xb5/0x130 [ 91.884695][ T6262] proc_fail_nth_read+0x10e/0x150 [ 91.884808][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.884847][ T6262] vfs_read+0x1a8/0x770 [ 91.884875][ T6262] ? __rcu_read_unlock+0x4f/0x70 [ 91.884905][ T6262] ? __fget_files+0x184/0x1c0 [ 91.884934][ T6262] ksys_read+0xda/0x1a0 [ 91.885042][ T6262] __x64_sys_read+0x40/0x50 [ 91.885069][ T6262] x64_sys_call+0x27c0/0x3000 [ 91.885090][ T6262] do_syscall_64+0xd2/0x200 [ 91.885119][ T6262] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.885185][ T6262] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.885227][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.885250][ T6262] RIP: 0033:0x7f62e50fd9dc [ 91.885266][ T6262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.885327][ T6262] RSP: 002b:00007f62e3b67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.885346][ T6262] RAX: ffffffffffffffda RBX: 00007f62e5355fa0 RCX: 00007f62e50fd9dc [ 91.885361][ T6262] RDX: 000000000000000f RSI: 00007f62e3b670a0 RDI: 0000000000000004 [ 91.885378][ T6262] RBP: 00007f62e3b67090 R08: 0000000000000000 R09: 0000000000000000 [ 91.885467][ T6262] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 91.885484][ T6262] R13: 00007f62e5356038 R14: 00007f62e5355fa0 R15: 00007fff5a2fc558 [ 91.885508][ T6262] [ 92.105610][ T6266] 1ªX¹¦À: renamed from 60ªX¹¦À [ 92.113612][ T6266] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 93.104438][ T6312] FAULT_INJECTION: forcing a failure. [ 93.104438][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 93.117124][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.3.986 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.117156][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.117172][ T6312] Call Trace: [ 93.117180][ T6312] [ 93.117187][ T6312] __dump_stack+0x1d/0x30 [ 93.117210][ T6312] dump_stack_lvl+0xe8/0x140 [ 93.117234][ T6312] dump_stack+0x15/0x1b [ 93.117256][ T6312] should_fail_ex+0x265/0x280 [ 93.117325][ T6312] should_failslab+0x8c/0xb0 [ 93.117354][ T6312] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 93.117457][ T6312] ? __alloc_skb+0x101/0x320 [ 93.117489][ T6312] __alloc_skb+0x101/0x320 [ 93.117514][ T6312] ? audit_log_start+0x342/0x720 [ 93.117540][ T6312] audit_log_start+0x3a0/0x720 [ 93.117618][ T6312] ? kstrtouint+0x76/0xc0 [ 93.117649][ T6312] audit_seccomp+0x48/0x100 [ 93.117816][ T6312] ? __seccomp_filter+0x82d/0x1250 [ 93.117847][ T6312] __seccomp_filter+0x83e/0x1250 [ 93.117879][ T6312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.117914][ T6312] ? vfs_write+0x7e8/0x960 [ 93.117975][ T6312] ? __rcu_read_unlock+0x4f/0x70 [ 93.118021][ T6312] ? __fget_files+0x184/0x1c0 [ 93.118119][ T6312] __secure_computing+0x82/0x150 [ 93.118151][ T6312] syscall_trace_enter+0xcf/0x1e0 [ 93.118184][ T6312] do_syscall_64+0xac/0x200 [ 93.118216][ T6312] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.118298][ T6312] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.118390][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.118417][ T6312] RIP: 0033:0x7f62e50fdc2a [ 93.118436][ T6312] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 93.118459][ T6312] RSP: 002b:00007f62e3b66ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 93.118484][ T6312] RAX: ffffffffffffffda RBX: 00007f62e5355fa0 RCX: 00007f62e50fdc2a [ 93.118501][ T6312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 93.118574][ T6312] RBP: 00007f62e3b67090 R08: 0000000000000000 R09: 0000000000000000 [ 93.118590][ T6312] R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000001 [ 93.118606][ T6312] R13: 00007f62e5356038 R14: 00007f62e5355fa0 R15: 00007fff5a2fc558 [ 93.118645][ T6312] [ 93.362317][ T6306] __nla_validate_parse: 7 callbacks suppressed [ 93.362331][ T6306] netlink: 3 bytes leftover after parsing attributes in process `syz.2.984'. [ 93.377719][ T6306] 1ªX¹¦À: renamed from 60ªX¹¦À [ 93.394984][ T6306] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 93.399045][ T6317] netlink: 27 bytes leftover after parsing attributes in process `syz.1.987'. [ 94.102885][ T6351] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1001'. [ 94.111838][ T6351] 0ªX¹¦À: renamed from 61ªX¹¦À [ 94.119093][ T6351] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 94.154938][ T6355] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1002'. [ 94.381304][ T6380] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1014'. [ 94.462795][ T6378] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1013'. [ 94.474515][ T6378] 0ªX¹¦À: renamed from 61ªX¹¦À [ 94.483287][ T6378] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 94.558853][ T6407] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1025'. [ 95.329336][ T6434] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1036'. [ 95.368137][ T29] kauditd_printk_skb: 1983 callbacks suppressed [ 95.368155][ T29] audit: type=1326 audit(1760757655.481:14391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 95.404836][ T6429] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1034'. [ 95.420940][ T6429] 0ªX¹¦À: renamed from 61ªX¹¦À [ 95.423943][ T29] audit: type=1326 audit(1760757655.481:14392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110cdefc9 code=0x7ffc0000 [ 95.449457][ T29] audit: type=1400 audit(1760757655.521:14393): avc: denied { open } for pid=6428 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 95.468879][ T29] audit: type=1400 audit(1760757655.531:14394): avc: denied { read write } for pid=6439 comm="syz.3.1039" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.493264][ T29] audit: type=1400 audit(1760757655.531:14395): avc: denied { create } for pid=6439 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.513811][ T29] audit: type=1400 audit(1760757655.541:14396): avc: denied { map_create } for pid=6437 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.533135][ T29] audit: type=1400 audit(1760757655.541:14397): avc: denied { prog_load } for pid=6437 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.552382][ T29] audit: type=1400 audit(1760757655.541:14398): avc: denied { prog_load } for pid=6437 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.571646][ T29] audit: type=1400 audit(1760757655.541:14399): avc: denied { create } for pid=6437 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 95.591289][ T29] audit: type=1400 audit(1760757655.541:14400): avc: denied { prog_load } for pid=6437 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.613355][ T6429] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 95.767707][ T6469] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1049'. [ 96.612031][ T6491] 1ªX¹¦À: renamed from 60ªX¹¦À [ 96.619075][ T6491] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 96.688834][ T6501] --map-set only usable from mangle table [ 97.678675][ T6522] 1ªX¹¦À: renamed from 60ªX¹¦À [ 97.694772][ T6522] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.836903][ T6555] FAULT_INJECTION: forcing a failure. [ 97.836903][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.850090][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.4.1083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.850124][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.850201][ T6555] Call Trace: [ 97.850226][ T6555] [ 97.850233][ T6555] __dump_stack+0x1d/0x30 [ 97.850251][ T6555] dump_stack_lvl+0xe8/0x140 [ 97.850341][ T6555] dump_stack+0x15/0x1b [ 97.850356][ T6555] should_fail_ex+0x265/0x280 [ 97.850386][ T6555] should_fail+0xb/0x20 [ 97.850466][ T6555] should_fail_usercopy+0x1a/0x20 [ 97.850543][ T6555] _copy_from_iter+0xd2/0xe80 [ 97.850565][ T6555] ? alloc_pages_mpol+0x217/0x260 [ 97.850602][ T6555] copy_page_from_iter+0x178/0x2a0 [ 97.850673][ T6555] tun_get_user+0x679/0x26e0 [ 97.850761][ T6555] ? ref_tracker_alloc+0x1f2/0x2f0 [ 97.850796][ T6555] tun_chr_write_iter+0x15e/0x210 [ 97.850882][ T6555] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 97.850907][ T6555] vfs_write+0x52a/0x960 [ 97.850959][ T6555] ksys_write+0xda/0x1a0 [ 97.851017][ T6555] __x64_sys_write+0x40/0x50 [ 97.851038][ T6555] x64_sys_call+0x2802/0x3000 [ 97.851135][ T6555] do_syscall_64+0xd2/0x200 [ 97.851161][ T6555] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.851197][ T6555] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.851217][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.851317][ T6555] RIP: 0033:0x7fdaecc2da7f [ 97.851336][ T6555] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 97.851353][ T6555] RSP: 002b:00007fdaeb68f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 97.851370][ T6555] RAX: ffffffffffffffda RBX: 00007fdaece85fa0 RCX: 00007fdaecc2da7f [ 97.851381][ T6555] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 97.851392][ T6555] RBP: 00007fdaeb68f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.851404][ T6555] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 97.851474][ T6555] R13: 00007fdaece86038 R14: 00007fdaece85fa0 R15: 00007ffe69a1cab8 [ 97.851491][ T6555] [ 98.643595][ T6567] __nla_validate_parse: 4 callbacks suppressed [ 98.643609][ T6567] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1088'. [ 98.789421][ T6572] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1090'. [ 98.798643][ T6572] 0ªX¹¦À: renamed from 61ªX¹¦À [ 98.806209][ T6572] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 99.008407][ T6596] FAULT_INJECTION: forcing a failure. [ 99.008407][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 99.021129][ T6596] CPU: 0 UID: 0 PID: 6596 Comm: syz.4.1099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.021163][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.021180][ T6596] Call Trace: [ 99.021190][ T6596] [ 99.021199][ T6596] __dump_stack+0x1d/0x30 [ 99.021226][ T6596] dump_stack_lvl+0xe8/0x140 [ 99.021251][ T6596] dump_stack+0x15/0x1b [ 99.021271][ T6596] should_fail_ex+0x265/0x280 [ 99.021312][ T6596] should_failslab+0x8c/0xb0 [ 99.021336][ T6596] kmem_cache_alloc_noprof+0x50/0x480 [ 99.021361][ T6596] ? vm_area_dup+0x33/0x2c0 [ 99.021388][ T6596] vm_area_dup+0x33/0x2c0 [ 99.021414][ T6596] __split_vma+0xe9/0x650 [ 99.021434][ T6596] ? __rcu_read_unlock+0x4f/0x70 [ 99.021456][ T6596] ? mntput_no_expire+0x6f/0x440 [ 99.021486][ T6596] ? __rcu_read_unlock+0x4f/0x70 [ 99.021508][ T6596] vma_modify+0x21e/0xc80 [ 99.021526][ T6596] ? avc_has_perm+0xf7/0x180 [ 99.021556][ T6596] vma_modify_flags+0x101/0x130 [ 99.021580][ T6596] mprotect_fixup+0x2cc/0x570 [ 99.021603][ T6596] do_mprotect_pkey+0x6d6/0x980 [ 99.021636][ T6596] __x64_sys_mprotect+0x48/0x60 [ 99.021658][ T6596] x64_sys_call+0x2752/0x3000 [ 99.021677][ T6596] do_syscall_64+0xd2/0x200 [ 99.021699][ T6596] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.021723][ T6596] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.021743][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.021763][ T6596] RIP: 0033:0x7fdaecc2efc9 [ 99.021776][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.021792][ T6596] RSP: 002b:00007fdaeb66e038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 99.021810][ T6596] RAX: ffffffffffffffda RBX: 00007fdaece86090 RCX: 00007fdaecc2efc9 [ 99.021821][ T6596] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 99.021834][ T6596] RBP: 00007fdaeb66e090 R08: 0000000000000000 R09: 0000000000000000 [ 99.021847][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.021860][ T6596] R13: 00007fdaece86128 R14: 00007fdaece86090 R15: 00007ffe69a1cab8 [ 99.021877][ T6596] [ 99.473926][ T6603] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1102'. [ 99.619699][ T6607] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1104'. [ 99.628774][ T6607] 0ªX¹¦À: renamed from 61ªX¹¦À [ 99.640978][ T6607] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.076641][ T6639] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1115'. [ 100.295932][ T6644] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1118'. [ 100.305105][ T6644] 1ªX¹¦À: renamed from 60ªX¹¦À [ 100.315347][ T6644] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.375639][ T29] kauditd_printk_skb: 1914 callbacks suppressed [ 100.375657][ T29] audit: type=1326 audit(1760757660.491:16315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcdce85e67 code=0x7ffc0000 [ 100.405643][ T29] audit: type=1326 audit(1760757660.491:16316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcdce2b099 code=0x7ffc0000 [ 100.429306][ T29] audit: type=1326 audit(1760757660.491:16317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7efcdce8efc9 code=0x7ffc0000 [ 100.453182][ T29] audit: type=1400 audit(1760757660.501:16318): avc: denied { map_create } for pid=6653 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.472486][ T29] audit: type=1400 audit(1760757660.501:16319): avc: denied { prog_load } for pid=6653 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.491727][ T29] audit: type=1400 audit(1760757660.501:16320): avc: denied { prog_load } for pid=6653 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.510997][ T29] audit: type=1400 audit(1760757660.521:16321): avc: denied { read write } for pid=6653 comm="syz.4.1121" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.535129][ T29] audit: type=1400 audit(1760757660.521:16322): avc: denied { write } for pid=6653 comm="syz.4.1121" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=0 [ 100.558609][ T29] audit: type=1400 audit(1760757660.521:16323): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.583647][ T29] audit: type=1400 audit(1760757660.551:16324): avc: denied { create } for pid=6660 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 100.631682][ T6666] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1126'. [ 100.975346][ T6681] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1133'. [ 100.984463][ T6681] 0ªX¹¦À: renamed from 61ªX¹¦À [ 100.991158][ T6681] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 101.443759][ T6708] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1142'. [ 101.693935][ T6719] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1146'. [ 101.703032][ T6719] 1ªX¹¦À: renamed from 60ªX¹¦À [ 101.709393][ T6719] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 102.249648][ T6759] 0ªX¹¦À: renamed from 61ªX¹¦À [ 102.256088][ T6759] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 102.685346][ T6769] FAULT_INJECTION: forcing a failure. [ 102.685346][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 102.698086][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.3.1165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.698113][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.698177][ T6769] Call Trace: [ 102.698182][ T6769] [ 102.698189][ T6769] __dump_stack+0x1d/0x30 [ 102.698207][ T6769] dump_stack_lvl+0xe8/0x140 [ 102.698224][ T6769] dump_stack+0x15/0x1b [ 102.698238][ T6769] should_fail_ex+0x265/0x280 [ 102.698304][ T6769] should_failslab+0x8c/0xb0 [ 102.698327][ T6769] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 102.698352][ T6769] ? __d_alloc+0x3d/0x340 [ 102.698378][ T6769] __d_alloc+0x3d/0x340 [ 102.698420][ T6769] d_alloc_pseudo+0x1e/0x80 [ 102.698445][ T6769] alloc_file_pseudo+0x71/0x160 [ 102.698475][ T6769] aio_setup_ring+0x133/0x760 [ 102.698518][ T6769] ioctx_alloc+0x2c4/0x4e0 [ 102.698545][ T6769] __se_sys_io_setup+0x6b/0x1b0 [ 102.698644][ T6769] __x64_sys_io_setup+0x31/0x40 [ 102.698666][ T6769] x64_sys_call+0x2f0e/0x3000 [ 102.698684][ T6769] do_syscall_64+0xd2/0x200 [ 102.698706][ T6769] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.698798][ T6769] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.698817][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.698837][ T6769] RIP: 0033:0x7f62e50fefc9 [ 102.698850][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.698936][ T6769] RSP: 002b:00007f62e3b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 102.698952][ T6769] RAX: ffffffffffffffda RBX: 00007f62e5355fa0 RCX: 00007f62e50fefc9 [ 102.698968][ T6769] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 102.698981][ T6769] RBP: 00007f62e3b67090 R08: 0000000000000000 R09: 0000000000000000 [ 102.698991][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.699001][ T6769] R13: 00007f62e5356038 R14: 00007f62e5355fa0 R15: 00007fff5a2fc558 [ 102.699017][ T6769] [ 102.978866][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.989479][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.045639][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.056271][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.115339][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.125913][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.236629][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.246972][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.323721][ T52] bridge_slave_1: left allmulticast mode [ 103.329551][ T52] bridge_slave_1: left promiscuous mode [ 103.335306][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.351831][ T52] bridge_slave_0: left allmulticast mode [ 103.357594][ T52] bridge_slave_0: left promiscuous mode [ 103.363286][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.526851][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.539099][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.560584][ T52] bond0 (unregistering): Released all slaves [ 103.601788][ T6794] 1ªX¹¦À: renamed from 60ªX¹¦À [ 103.608564][ T6794] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 103.627445][ T52] hsr_slave_0: left promiscuous mode [ 103.638620][ T52] hsr_slave_1: left promiscuous mode [ 103.647390][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.654835][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.662773][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.670208][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.682491][ T52] veth1_macvtap: left promiscuous mode [ 103.688346][ T52] veth0_macvtap: left promiscuous mode [ 103.694100][ T52] veth1_vlan: left promiscuous mode [ 103.699494][ T52] veth0_vlan: left promiscuous mode [ 103.776247][ T52] team0 (unregistering): Port device team_slave_1 removed [ 103.788696][ T52] team0 (unregistering): Port device team_slave_0 removed [ 104.019141][ T6806] sctp: [Deprecated]: syz.1.1178 (pid 6806) Use of int in maxseg socket option. [ 104.019141][ T6806] Use struct sctp_assoc_value instead [ 105.382700][ T29] kauditd_printk_skb: 19046 callbacks suppressed [ 105.382716][ T29] audit: type=1400 audit(1760757665.501:35287): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.390965][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.410576][ T29] audit: type=1400 audit(1760757665.501:35288): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.417106][ T3043] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 105.417125][ T3043] audit: backlog limit exceeded [ 105.430273][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.440187][ T29] audit: type=1400 audit(1760757665.501:35289): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.446201][ T3043] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 105.446220][ T3043] audit: backlog limit exceeded [ 105.447174][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.264167][ T6830] __nla_validate_parse: 4 callbacks suppressed [ 106.264184][ T6830] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1189'. [ 106.361031][ T6828] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1188'. [ 106.370359][ T6828] 1ªX¹¦À: renamed from 60ªX¹¦À [ 106.377562][ T6828] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 107.183767][ T6844] sctp: [Deprecated]: syz.3.1192 (pid 6844) Use of int in maxseg socket option. [ 107.183767][ T6844] Use struct sctp_assoc_value instead [ 107.223739][ T135] ================================================================== [ 107.231883][ T135] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 107.240436][ T135] [ 107.242762][ T135] write to 0xffff88811a358908 of 44 bytes by task 6846 on cpu 0: [ 107.250481][ T135] tty_set_termios+0xc0/0x8c0 [ 107.255184][ T135] set_termios+0x490/0x4d0 [ 107.259621][ T135] tty_mode_ioctl+0x379/0x5c0 [ 107.264317][ T135] n_tty_ioctl_helper+0x91/0x210 [ 107.269264][ T135] n_tty_ioctl+0x101/0x200 [ 107.273700][ T135] tty_ioctl+0x83f/0xb80 [ 107.277952][ T135] __se_sys_ioctl+0xce/0x140 [ 107.282543][ T135] __x64_sys_ioctl+0x43/0x50 [ 107.287137][ T135] x64_sys_call+0x1816/0x3000 [ 107.291828][ T135] do_syscall_64+0xd2/0x200 [ 107.296342][ T135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.302245][ T135] [ 107.304567][ T135] read to 0xffff88811a358922 of 1 bytes by task 135 on cpu 1: [ 107.312018][ T135] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 107.317927][ T135] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 107.323487][ T135] tty_port_default_lookahead_buf+0x91/0xc0 [ 107.329394][ T135] flush_to_ldisc+0x288/0x340 [ 107.334081][ T135] process_scheduled_works+0x4ce/0x9d0 [ 107.339553][ T135] worker_thread+0x582/0x770 [ 107.344142][ T135] kthread+0x489/0x510 [ 107.348222][ T135] ret_from_fork+0x122/0x1b0 [ 107.352825][ T135] ret_from_fork_asm+0x1a/0x30 [ 107.357623][ T135] [ 107.359944][ T135] value changed: 0x13 -> 0x00 [ 107.364615][ T135] [ 107.366938][ T135] Reported by Kernel Concurrency Sanitizer on: [ 107.373094][ T135] CPU: 1 UID: 0 PID: 135 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.382908][ T135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.392971][ T135] Workqueue: events_unbound flush_to_ldisc [ 107.398795][ T135] ================================================================== [ 108.247389][ T1780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.324710][ T1780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.405117][ T1780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.464748][ T1780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.555145][ T1780] bridge_slave_1: left allmulticast mode [ 108.560859][ T1780] bridge_slave_1: left promiscuous mode [ 108.566677][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.575466][ T1780] bridge_slave_0: left allmulticast mode [ 108.581294][ T1780] bridge_slave_0: left promiscuous mode [ 108.587075][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.685256][ T1780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.695000][ T1780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.704914][ T1780] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 108.713999][ T1780] bond0 (unregistering): Released all slaves [ 108.764781][ T1780] hsr_slave_0: left promiscuous mode [ 108.770568][ T1780] hsr_slave_1: left promiscuous mode [ 108.776430][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.783857][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.791694][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.799108][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.808961][ T1780] veth0_macvtap: left promiscuous mode [ 109.148322][ T1780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.158820][ T1780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.216465][ T1780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.226792][ T1780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.285810][ T1780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.296205][ T1780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.355628][ T1780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.365966][ T1780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.466662][ T1780] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.504814][ T1780] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.565151][ T1780] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.625876][ T1780] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.949547][ T1780] bridge_slave_1: left allmulticast mode [ 109.955316][ T1780] bridge_slave_1: left promiscuous mode [ 109.961253][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.970234][ T1780] bridge_slave_0: left promiscuous mode [ 109.976023][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.985562][ T1780] bridge_slave_1: left allmulticast mode [ 109.991285][ T1780] bridge_slave_1: left promiscuous mode [ 109.997198][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.005634][ T1780] bridge_slave_0: left allmulticast mode [ 110.011413][ T1780] bridge_slave_0: left promiscuous mode [ 110.017141][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.026197][ T1780] bridge_slave_1: left allmulticast mode [ 110.031875][ T1780] bridge_slave_1: left promiscuous mode [ 110.037633][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.045508][ T1780] bridge_slave_0: left allmulticast mode [ 110.051207][ T1780] bridge_slave_0: left promiscuous mode [ 110.056978][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.184582][ T1780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.196823][ T1780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.206655][ T1780] bond0 (unregistering): Released all slaves [ 110.215675][ T1780] bond1 (unregistering): Released all slaves [ 110.324517][ T1780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.334384][ T1780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.344581][ T1780] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 110.353669][ T1780] bond0 (unregistering): Released all slaves [ 110.363559][ T1780] bond1 (unregistering): Released all slaves [ 110.372148][ T1780] bond2 (unregistering): Released all slaves [ 110.392286][ T29] kauditd_printk_skb: 46525 callbacks suppressed [ 110.392303][ T29] audit: type=1400 audit(1760757670.501:76539): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.410671][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.420024][ T29] audit: type=1400 audit(1760757670.511:76540): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.426329][ T3043] audit: audit_lost=1795 audit_rate_limit=0 audit_backlog_limit=64 [ 110.426349][ T3043] audit: backlog limit exceeded [ 110.447523][ T29] audit: type=1400 audit(1760757670.511:76541): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.455944][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.460270][ T29] audit: type=1400 audit(1760757670.511:76542): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.460298][ T29] audit: type=1400 audit(1760757670.511:76543): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.481509][ T3043] audit: audit_lost=1796 audit_rate_limit=0 audit_backlog_limit=64 [ 110.541297][ T1780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.550589][ T1780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.559638][ T1780] bond0 (unregistering): Released all slaves [ 110.599003][ T1780] tipc: Left network mode [ 110.606772][ T1780] hsr_slave_0: left promiscuous mode [ 110.612504][ T1780] hsr_slave_1: left promiscuous mode [ 110.618096][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.625592][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.633618][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.641061][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.651457][ T1780] hsr_slave_0: left promiscuous mode [ 110.657181][ T1780] hsr_slave_1: left promiscuous mode [ 110.662955][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.670365][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.678132][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.685565][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.694114][ T1780] hsr_slave_0: left promiscuous mode [ 110.699705][ T1780] hsr_slave_1: left promiscuous mode [ 110.705515][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.713114][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.724593][ T1780] veth1_macvtap: left promiscuous mode [ 110.730092][ T1780] veth0_macvtap: left promiscuous mode [ 110.735789][ T1780] veth1_vlan: left promiscuous mode [ 110.741037][ T1780] veth0_vlan: left promiscuous mode [ 110.746968][ T1780] veth1_macvtap: left promiscuous mode [ 110.752529][ T1780] veth0_macvtap: left promiscuous mode [ 110.758039][ T1780] veth1_vlan: left promiscuous mode [ 110.763553][ T1780] veth0_vlan: left promiscuous mode [ 115.402298][ T29] kauditd_printk_skb: 47345 callbacks suppressed [ 115.402316][ T29] audit: type=1400 audit(1760757675.511:123846): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.419600][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.430042][ T29] audit: type=1400 audit(1760757675.521:123847): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.436521][ T3043] audit: audit_lost=1811 audit_rate_limit=0 audit_backlog_limit=64 [ 115.457699][ T29] audit: type=1400 audit(1760757675.521:123848): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.465600][ T3043] audit: backlog limit exceeded [ 115.486791][ T29] audit: type=1400 audit(1760757675.521:123849): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.492521][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.512825][ T29] audit: type=1400 audit(1760757675.521:123850): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.512856][ T29] audit: type=1400 audit(1760757675.521:123851): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0