last executing test programs: 28.875400016s ago: executing program 0 (id=4246): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x925a, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_enter(r2, 0x3513, 0x217, 0xa1, 0x0, 0x0) close_range(r0, r1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d78707437", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x10, 0x3, 0x22, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x40, 0x10, 0x40}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r6, 0x58, &(0x7f0000000700)}, 0x10) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000007c0)={0x0, @loopback, @broadcast}, &(0x7f0000000800)=0xc) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 28.770969126s ago: executing program 0 (id=4250): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 28.713074028s ago: executing program 0 (id=4251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_POLICE={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x800) 28.618647439s ago: executing program 0 (id=4256): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000180)=0x10001) r0 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') preadv(r2, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendto$packet(r4, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7e96e28d23d3e39a}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) 28.248331844s ago: executing program 0 (id=4265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x488, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x45c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff1e5b, 0x2, 0x3, 0x2, 0xfffffff2, {0x8, 0x1, 0x2, 0x101, 0x1, 0xffffffff}, {0x3, 0x3, 0x1, 0x7, 0x93f8, 0x2}, 0x2, 0xd74, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8b6, 0x7, 0xfbcc, 0x7, 0x7, 0x7, 0x3, 0x3, 0x8, 0x157, 0x5, 0x1, 0x78, 0x6, 0x6, 0x4, 0x8000, 0x1, 0xfec, 0xa, 0x4, 0xfffffffd, 0xa20, 0x2, 0x4, 0x5, 0x2, 0x9, 0x800, 0x4, 0x1, 0x3, 0x5, 0x0, 0x2, 0x5, 0x20c, 0x6, 0x4, 0xa, 0x4, 0x4, 0x100, 0x80000000, 0x9, 0x1, 0x2, 0x9, 0x623311c9, 0x10001, 0x6, 0xa, 0x1, 0xffffffff, 0x4, 0x3, 0x3, 0x400, 0xa2, 0x401, 0x3, 0x1, 0x7d, 0x401, 0x6, 0x800, 0xfffffffa, 0x3bb12bd3, 0xfffffffd, 0xfa, 0x11, 0xf, 0xfffffffc, 0x4, 0x79b2, 0xc, 0x6, 0x7ff, 0x6, 0x80000000, 0x9, 0xc6, 0x8, 0x80000001, 0x9, 0x0, 0x5, 0x1000, 0x0, 0x5, 0x4, 0x0, 0xfffffff8, 0x7f, 0x0, 0x401, 0x3, 0x0, 0x3b8, 0x2, 0x6, 0x0, 0xfffffffd, 0x1, 0x3, 0x100, 0x8, 0x1, 0x10, 0x1, 0x4, 0x3, 0x5, 0x6, 0xfffffff9, 0x4, 0x25, 0x8001, 0x5, 0x3, 0xc99, 0x7f, 0x1, 0x7, 0x2, 0x1, 0x5, 0x2, 0x2, 0x4, 0x8, 0xfff, 0x286, 0x400, 0x10001, 0xb, 0x5, 0xf, 0x3, 0x7fff, 0x4e, 0x9, 0xfff, 0x4c, 0x5, 0x73, 0x1, 0xad21, 0x3, 0x6fe82e33, 0xd2ab, 0x8000, 0x3, 0x5, 0x9, 0x2, 0x4, 0x0, 0x3, 0x9, 0x3, 0x7, 0x3, 0x44c000, 0x1, 0x2dbff327, 0xf, 0xf130, 0x9, 0x4, 0x0, 0x5, 0x5, 0x28, 0x1, 0xc, 0x6, 0x4, 0x3, 0x2, 0xc5, 0x800000, 0x2, 0x2, 0x5, 0x81, 0x8000, 0xb, 0x9, 0x4, 0x6, 0x4, 0x3, 0x4, 0x5, 0x3700000, 0x800, 0x20, 0x5, 0xb7fb, 0x1000, 0x7fffffff, 0x3, 0x8, 0x3, 0xa3d, 0x7, 0x3, 0x400, 0x800, 0xf, 0x4, 0xffffe1fa, 0x8ce4, 0x5, 0xf9, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0x1, 0x5, 0x2, 0x7, 0x0, 0x9, 0x6d, 0xea3, 0x8, 0x36, 0x800, 0x3, 0x7fffffff, 0x100, 0x80000001, 0xffffffff, 0x5d0e, 0x9, 0xd50, 0x9, 0x10001, 0x7, 0x8, 0x1907, 0x0, 0x9, 0x8484, 0x2, 0x18, 0x2, 0xc, 0x6, 0x69, 0x5]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x81}, 0x800) 27.979226037s ago: executing program 0 (id=4270): syz_emit_ethernet(0x64, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffffaa5eaaaaaa1e08004eb4005600650000ff069078ac14f2a9ac1414bb0723b5ac1e0101ac1414150a0101027f000001ffffffffac1414bb7f000001e0000002000000000000000000000000000000000400004e2200004e21000000000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00'}, 0x18) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b0000000300000004000006040000000700000000000000030000000000000000000000000000000000000000000000000000000000000d00000000001706eb9a000005000000000000002e61615f2e"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) io_setup(0x5, &(0x7f0000000180)) timerfd_create(0x0, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 27.978989877s ago: executing program 32 (id=4270): syz_emit_ethernet(0x64, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffffaa5eaaaaaa1e08004eb4005600650000ff069078ac14f2a9ac1414bb0723b5ac1e0101ac1414150a0101027f000001ffffffffac1414bb7f000001e0000002000000000000000000000000000000000400004e2200004e21000000000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00'}, 0x18) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b0000000300000004000006040000000700000000000000030000000000000000000000000000000000000000000000000000000000000d00000000001706eb9a000005000000000000002e61615f2e"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) io_setup(0x5, &(0x7f0000000180)) timerfd_create(0x0, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.287600383s ago: executing program 3 (id=4847): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae091f75cd9701ffa62891f686bfbb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003875c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9e"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r1, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r2, 0x15) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x158c8a00, 0x0, 0xf, 0x0, 0x0, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x4) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x204080, 0x22) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x9, [@enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x3, [{0xa, 0x5, 0x80000000}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x4, 0x4}]}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x3, [{0xf, 0x1, 0x45}, {0x9, 0x4, 0xcd}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8}}, @fwd={0x6}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x2e, 0x30, 0x30, 0x5f, 0x0, 0x30]}}, &(0x7f0000001540)=""/229, 0xb5, 0xe5, 0x0, 0x4, 0x0, @void, @value}, 0x28) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x101, 0x4, 0x9, 0x1b900, r5, 0x8001, '\x00', r6, r7, 0x5, 0x1, 0xffff, 0x0, @value=r8, @void, @value=r9}, 0x50) write$selinux_user(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 1.109402225s ago: executing program 3 (id=4851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 1.049923326s ago: executing program 2 (id=4855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r1, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 1.032896337s ago: executing program 4 (id=4857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0x7, 0x0, 0x0, 0x0, 0x1000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r9, r8, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='/\x00\x00\x00\x00 '], 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r11, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0xfffffffc, {"00000000000000000000000000000001"}}}}, 0x118) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.030286057s ago: executing program 3 (id=4858): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x52c5, &(0x7f0000000040)={0x0, 0x17c9, 0x40, 0x0, 0x3c8}) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, 0x0, 0x1) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) getrandom(0x0, 0x0, 0x2) r12 = syz_genetlink_get_family_id$nl80211(0x0, r8) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000c00000000000000256f00000008c09240b2e5f5a9f982d4e8c024c80100000000000000f9c0d7087e708d8c20a3", @ANYRES32=r13, @ANYBLOB="0c009900050000001e0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x108, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x5c}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xfa}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x8e}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x34}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x60bef2f1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xce}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffff8}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x12}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe3}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffffffff}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x46}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfb}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x1f}}]}, 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="174800004000020071e8780cb183bc7c0000000000000000000000a97ddf55fa3afea2e915b0a06402d4aec1daeb1d31232f91bb6d6575e23c874e71b10bb5d0b2b023be921800c1901bcdd084a450f9e9f0f0eadaba", @ANYRES32=r2, @ANYBLOB="6d82000020800600"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.021451077s ago: executing program 2 (id=4859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ustat(0x3, &(0x7f0000000000)) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x1, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 914.750228ms ago: executing program 2 (id=4862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200080, &(0x7f0000000100)={[{@jqfmt_vfsv1}]}, 0xfe, 0x57c, &(0x7f0000001440)="$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") symlink(&(0x7f0000000c00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 892.134118ms ago: executing program 4 (id=4863): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xa000, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81ea033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 869.858188ms ago: executing program 4 (id=4864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x800) 861.493529ms ago: executing program 3 (id=4865): getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) 854.991839ms ago: executing program 1 (id=4866): futex(&(0x7f00000006c0), 0xb, 0x0, &(0x7f0000000700), &(0x7f0000000740)=0x2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000001cc0)=""/215, 0xd7}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0xc5) fchownat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) close(r3) 830.74883ms ago: executing program 1 (id=4867): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) (fail_nth: 4) 771.04771ms ago: executing program 4 (id=4868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 770.4915ms ago: executing program 3 (id=4869): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000046, &(0x7f0000000fc0)={[{@init_itable}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@resgid}, {@dax_inode}, {@delalloc}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@journal_checksum}, {@noquota}]}, 0x1, 0x56b, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="9110c3ff0000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semop(0x0, &(0x7f0000002480)=[{}], 0x1) 520.659083ms ago: executing program 5 (id=4871): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xae5a2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) semget(0x1, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000d3b420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x4002}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 436.812445ms ago: executing program 4 (id=4872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ustat(0x3, &(0x7f0000000000)) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x1, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 409.451845ms ago: executing program 1 (id=4873): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a78000000060a0b040000000000000000020000004c000480240001800a000100717565756500000014000280060001400000000006000140000000002400018009000100686173680000000014000280090007400000000108000740000000010900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r6, @ANYBLOB="0000000008000200cf01000014"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_newnexthop={0x30, 0x68, 0x2, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x3, 0x0, 0x14}, [@NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44011}, 0x4040800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) sendfile(r9, r9, &(0x7f00000000c0)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 408.311125ms ago: executing program 2 (id=4874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0x7, 0x0, 0x0, 0x0, 0x1000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r9, r8, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='/\x00\x00\x00\x00 '], 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r11, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0xfffffffc, {"00000000000000000000000000000001"}}}}, 0x118) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 341.628296ms ago: executing program 5 (id=4875): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) (fail_nth: 6) 76.390149ms ago: executing program 1 (id=4876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) 75.629199ms ago: executing program 5 (id=4877): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xa000, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81ea033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 75.045579ms ago: executing program 5 (id=4878): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xa000, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81ea033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 74.570099ms ago: executing program 1 (id=4879): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 64.989629ms ago: executing program 3 (id=4880): socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) fchown(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 53.107109ms ago: executing program 2 (id=4881): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x2e, 0x0) 50.853809ms ago: executing program 5 (id=4882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 28.77373ms ago: executing program 4 (id=4883): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000013c0)=""/208, 0xd0, 0x800) 25.85134ms ago: executing program 1 (id=4884): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700840000"}}}}}}}, 0x0) pread64(r0, &(0x7f00000013c0)=""/208, 0xd0, 0x800) 22.46339ms ago: executing program 2 (id=4885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000d011b8f5fa001900f22a3add910000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000020000000020a01010000000000000000070000070900010073797a310000000014000000100001"], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fdatasync(r4) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x5, 0x3, 0xa, 0x2, 0xffffffffffffffff}], &(0x7f0000000340)='GPL\x00', 0x10, 0x67, &(0x7f0000000380)=""/103, 0x41100, 0x1, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0xe, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, r4, r2, r9, 0xffffffffffffffff, r2, r4], 0x0, 0x10, 0x7fff, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bed91379", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25260000000c0099000000000036000000040093002c00f2008f650f0c359171be67ffa761fc261b11de7ba88f10c058aac9ab695dc7ed2a153a21b4c393c1b9861f003400293bac686a10ba079c6686c2c225a27448831098cb1e114584861c00"], 0x70}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004081) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000000050002db93372a06000000"], 0x48) connect$unix(r2, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000280), 0x1, 0x105000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='f2fs_shutdown\x00', r10}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, 0x0, 0x0) 0s ago: executing program 5 (id=4886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x488, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x45c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff1e5b, 0x2, 0x3, 0x2, 0xfffffff2, {0x8, 0x1, 0x2, 0x101, 0x1, 0xffffffff}, {0x3, 0x3, 0x1, 0x7, 0x93f8, 0x2}, 0x2, 0xd74, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0xfff, 0x5, 0x8, 0x2, 0x1, 0x2, 0x401, 0x8, 0xfffffff9, 0x80000001, 0x2400000, 0x2, 0x9, 0x400, 0x5005, 0x114, 0x1ff, 0x43, 0xf, 0x2, 0x6488, 0xfffffffc, 0x4, 0xba79, 0x1, 0x2, 0x8, 0x7, 0x0, 0x7, 0x8, 0x1, 0x10, 0x6, 0x534, 0xf, 0x7, 0x8000, 0x63f8, 0x8ef1, 0x0, 0x8, 0x9, 0x2d2c, 0x100000, 0x3ff, 0xc44, 0x3, 0x6, 0x40, 0xfffffffd, 0x46d62a98, 0x4, 0x9b, 0x17, 0x2, 0x3d09, 0x81, 0x1f, 0x3, 0x8517, 0x2, 0x3, 0x40, 0x0, 0xc9, 0x10, 0x6, 0x0, 0x2, 0x7, 0x8c, 0x12c, 0xfffffe01, 0xe8, 0x5, 0x9, 0xcaf4, 0x480000, 0x8, 0x7, 0x14, 0x10001, 0x10001, 0x3, 0x7, 0xffffffc2, 0x40, 0x9, 0x9, 0x0, 0x85, 0x399, 0xfff, 0x9, 0x8000, 0x3ff, 0x7, 0x3, 0x87e3, 0x330, 0x0, 0x5, 0x7, 0x2, 0xe00f, 0x6, 0x2771000, 0x8, 0x4, 0x1, 0x1, 0x2, 0xfffffffb, 0x9, 0xffff, 0x9, 0xfffffff7, 0x7, 0x9, 0x0, 0x8000, 0x7fff, 0x3, 0xc, 0xa, 0x3, 0x8, 0xf3, 0x9, 0x6, 0xf1, 0x1, 0x1400, 0x0, 0x2, 0x0, 0xcc4f, 0xbd1, 0x7, 0x81, 0x7, 0x8000, 0xe95c, 0x3, 0x8, 0x7fffffff, 0xeff6, 0x3b1e6bae, 0x0, 0x77a, 0x80, 0x1, 0x8, 0x3, 0x1000, 0x4, 0xfffffff7, 0x0, 0xfffffe01, 0x15a3a7e8, 0x3, 0x2, 0x3, 0xf, 0x1ff, 0x1000, 0xfffffffe, 0x2, 0xfc9, 0x9, 0x5, 0x8, 0x3, 0x4, 0x9, 0x400, 0x9, 0xe, 0x2, 0x9, 0x2, 0x5, 0x7f, 0x80000001, 0x0, 0x4, 0x7f, 0x5, 0x100, 0xffffffff, 0x3, 0x3, 0xfffffe01, 0x6, 0x5, 0x80000001, 0x7, 0x8, 0x101, 0x1, 0x2, 0x10000, 0x100, 0xa, 0x3, 0x3, 0x3, 0x2, 0x5, 0x9b5, 0x8001, 0x4, 0x6, 0xe503, 0x13e, 0x2, 0xa000, 0x7f, 0x6, 0x10001, 0x3, 0x2, 0x10, 0xb77, 0x2, 0x7, 0x3, 0x8000, 0xdd01d556, 0x5, 0x9, 0x8bf, 0xf7, 0x2, 0x9, 0xffffffff, 0x3, 0xffff8001, 0xfc, 0xb2aa, 0x1, 0xd820, 0xd, 0x6, 0x5, 0x7, 0x3, 0x9, 0xffff, 0x6, 0xf4, 0x594, 0xffff]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x81}, 0x800) kernel console output (not intermixed with test programs): mode [ 290.564783][T29389] macvlan2: entered promiscuous mode [ 290.571342][T29389] bridge0: port 3(macvlan2) entered blocking state [ 290.577920][T29389] bridge0: port 3(macvlan2) entered disabled state [ 290.584736][T29389] macvlan2: entered allmulticast mode [ 290.590131][T29389] bridge0: entered allmulticast mode [ 290.596087][T29389] macvlan2: left allmulticast mode [ 290.601352][T29389] bridge0: left allmulticast mode [ 290.606979][T29389] bridge0: left promiscuous mode [ 290.607527][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.625692][T29383] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.743679][T29383] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.842602][T29383] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.909620][ T29] kauditd_printk_skb: 7245 callbacks suppressed [ 290.909638][ T29] audit: type=1326 audit(1746766915.804:33260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29416 comm="syz.1.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8210a4e969 code=0x7ffc0000 [ 290.912953][T29433] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 290.916637][ T29] audit: type=1326 audit(1746766915.804:33261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29416 comm="syz.1.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8210a4e969 code=0x7ffc0000 [ 290.972739][ T29] audit: type=1326 audit(1746766915.804:33262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29416 comm="syz.1.4145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8210a4e969 code=0x0 [ 290.998406][ T29] audit: type=1326 audit(1746766915.894:33263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 291.058300][ T29] audit: type=1326 audit(1746766915.894:33264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 291.081935][ T29] audit: type=1326 audit(1746766915.894:33265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 291.105603][ T29] audit: type=1326 audit(1746766915.894:33266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 291.129279][ T29] audit: type=1400 audit(1746766915.894:33267): avc: denied { tracepoint } for pid=29434 comm="syz.4.4150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 291.149311][ T29] audit: type=1326 audit(1746766915.944:33268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 291.173008][ T29] audit: type=1326 audit(1746766915.944:33269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 291.202727][T29439] loop2: detected capacity change from 0 to 8192 [ 291.256346][T29383] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.264864][T29439] loop2: p1 p2[DM] p4 [ 291.269157][T29439] loop2: p1 size 196608 extends beyond EOD, truncated [ 291.271436][T29383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.279883][T29439] loop2: p2 start 4292936063 is beyond EOD, truncated [ 291.288126][T29383] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.291110][T29439] loop2: p4 size 50331648 extends beyond EOD, truncated [ 291.327410][T29383] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.488377][T29491] bridge0: entered promiscuous mode [ 291.493815][T29491] macvlan2: entered promiscuous mode [ 291.500186][T29491] bridge0: port 3(macvlan2) entered blocking state [ 291.506825][T29491] bridge0: port 3(macvlan2) entered disabled state [ 291.513839][T29491] macvlan2: entered allmulticast mode [ 291.519257][T29491] bridge0: entered allmulticast mode [ 291.525431][T29491] macvlan2: left allmulticast mode [ 291.530667][T29491] bridge0: left allmulticast mode [ 291.536383][T29491] bridge0: left promiscuous mode [ 291.637563][T29494] netlink: 'syz.2.4155': attribute type 39 has an invalid length. [ 291.658742][T29507] __nla_validate_parse: 3 callbacks suppressed [ 291.658757][T29507] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4159'. [ 291.827610][T29522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.836106][T29522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4162'. [ 291.849395][T29522] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4162'. [ 291.988667][T29524] loop3: detected capacity change from 0 to 512 [ 292.003289][T29524] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4163: bg 0: block 248: padding at end of block bitmap is not set [ 292.018304][T29524] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4163: Failed to acquire dquot type 1 [ 292.030429][T29524] EXT4-fs (loop3): 1 truncate cleaned up [ 292.037285][T29524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.050300][T29524] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.075980][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.096987][T29567] FAULT_INJECTION: forcing a failure. [ 292.096987][T29567] name failslab, interval 1, probability 0, space 0, times 0 [ 292.109714][T29567] CPU: 1 UID: 0 PID: 29567 Comm: syz.3.4166 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 292.109739][T29567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 292.109792][T29567] Call Trace: [ 292.109798][T29567] [ 292.109803][T29567] __dump_stack+0x1d/0x30 [ 292.109822][T29567] dump_stack_lvl+0xe8/0x140 [ 292.109839][T29567] dump_stack+0x15/0x1b [ 292.109853][T29567] should_fail_ex+0x265/0x280 [ 292.109953][T29567] should_failslab+0x8c/0xb0 [ 292.110034][T29567] kmem_cache_alloc_noprof+0x50/0x310 [ 292.110063][T29567] ? security_inode_alloc+0x37/0x100 [ 292.110082][T29567] security_inode_alloc+0x37/0x100 [ 292.110099][T29567] inode_init_always_gfp+0x4b7/0x500 [ 292.110142][T29567] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 292.110163][T29567] alloc_inode+0x58/0x170 [ 292.110183][T29567] new_inode+0x1d/0xe0 [ 292.110212][T29567] hugetlbfs_get_inode+0x7b/0x370 [ 292.110250][T29567] hugetlb_file_setup+0x192/0x3d0 [ 292.110268][T29567] ksys_mmap_pgoff+0x157/0x310 [ 292.110291][T29567] x64_sys_call+0x1602/0x2fb0 [ 292.110388][T29567] do_syscall_64+0xd0/0x1a0 [ 292.110407][T29567] ? clear_bhb_loop+0x25/0x80 [ 292.110430][T29567] ? clear_bhb_loop+0x25/0x80 [ 292.110457][T29567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.110501][T29567] RIP: 0033:0x7f864527e969 [ 292.110518][T29567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.110539][T29567] RSP: 002b:00007f86438e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 292.110562][T29567] RAX: ffffffffffffffda RBX: 00007f86454a5fa0 RCX: 00007f864527e969 [ 292.110578][T29567] RDX: 0000000003000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 292.110652][T29567] RBP: 00007f86438e7090 R08: ffffffffffffffff R09: 0000000000000000 [ 292.110668][T29567] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 292.110755][T29567] R13: 0000000000000000 R14: 00007f86454a5fa0 R15: 00007fff8b225208 [ 292.110779][T29567] [ 292.364637][T29569] team0 (unregistering): Port device team_slave_0 removed [ 292.373793][T29569] team0 (unregistering): Port device team_slave_1 removed [ 292.392073][T29573] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 292.467631][T29612] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 292.483368][T29571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.492002][T29571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.050453][T29672] netlink: 'syz.1.4178': attribute type 39 has an invalid length. [ 293.083443][T29676] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 293.143618][T29680] loop2: detected capacity change from 0 to 512 [ 293.151076][T29680] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.162854][T29680] EXT4-fs (loop2): 1 truncate cleaned up [ 293.169135][T29680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.193033][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.268704][T29687] loop2: detected capacity change from 0 to 512 [ 293.282586][T29687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4183: bg 0: block 248: padding at end of block bitmap is not set [ 293.297317][T29687] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4183: Failed to acquire dquot type 1 [ 293.309386][T29687] EXT4-fs (loop2): 1 truncate cleaned up [ 293.315666][T29687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.328310][T29687] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.350884][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.370943][T29718] FAULT_INJECTION: forcing a failure. [ 293.370943][T29718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.384156][T29718] CPU: 1 UID: 0 PID: 29718 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 293.384190][T29718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 293.384239][T29718] Call Trace: [ 293.384245][T29718] [ 293.384298][T29718] __dump_stack+0x1d/0x30 [ 293.384317][T29718] dump_stack_lvl+0xe8/0x140 [ 293.384334][T29718] dump_stack+0x15/0x1b [ 293.384414][T29718] should_fail_ex+0x265/0x280 [ 293.384444][T29718] should_fail+0xb/0x20 [ 293.384469][T29718] should_fail_usercopy+0x1a/0x20 [ 293.384560][T29718] _copy_from_user+0x1c/0xb0 [ 293.384579][T29718] ___sys_sendmsg+0xc1/0x1d0 [ 293.384619][T29718] __x64_sys_sendmsg+0xd4/0x160 [ 293.384640][T29718] x64_sys_call+0x2999/0x2fb0 [ 293.384660][T29718] do_syscall_64+0xd0/0x1a0 [ 293.384718][T29718] ? clear_bhb_loop+0x25/0x80 [ 293.384737][T29718] ? clear_bhb_loop+0x25/0x80 [ 293.384756][T29718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.384775][T29718] RIP: 0033:0x7f27840be969 [ 293.384788][T29718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.384824][T29718] RSP: 002b:00007f2782727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.384840][T29718] RAX: ffffffffffffffda RBX: 00007f27842e5fa0 RCX: 00007f27840be969 [ 293.384851][T29718] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 293.384861][T29718] RBP: 00007f2782727090 R08: 0000000000000000 R09: 0000000000000000 [ 293.384871][T29718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.384932][T29718] R13: 0000000000000000 R14: 00007f27842e5fa0 R15: 00007fff4553b658 [ 293.384949][T29718] [ 293.633587][T29731] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.641803][T29731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4186'. [ 293.656156][T29731] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4186'. [ 293.677814][T29728] block device autoloading is deprecated and will be removed. [ 293.685627][T29728] +}[@: attempt to access beyond end of device [ 293.685627][T29728] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 293.756026][T29738] loop1: detected capacity change from 0 to 1024 [ 293.763041][T29738] EXT4-fs: Ignoring removed oldalloc option [ 293.769061][T29738] ext4: Unknown parameter 'euid<00000000000000000000' [ 293.792613][T29738] loop1: detected capacity change from 0 to 2048 [ 293.803178][T29738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.836792][T29752] loop3: detected capacity change from 0 to 512 [ 293.845040][T29752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.865059][T29752] EXT4-fs (loop3): orphan cleanup on readonly fs [ 293.878814][T29752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4192: bg 0: block 248: padding at end of block bitmap is not set [ 293.894943][T29752] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4192: Failed to acquire dquot type 1 [ 293.896469][T29757] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 293.916274][T29752] EXT4-fs (loop3): 1 truncate cleaned up [ 293.922709][T29752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.028035][T29764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4196'. [ 294.037100][T29764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4196'. [ 294.118859][T29758] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 294.133885][T29758] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 294.146353][T29758] EXT4-fs (loop1): This should not happen!! Data will be lost [ 294.146353][T29758] [ 294.156047][T29758] EXT4-fs (loop1): Total free blocks count 0 [ 294.162237][T29758] EXT4-fs (loop1): Free/Dirty block details [ 294.168289][T29758] EXT4-fs (loop1): free_blocks=2415919104 [ 294.174087][T29758] EXT4-fs (loop1): dirty_blocks=8224 [ 294.179451][T29758] EXT4-fs (loop1): Block reservation details [ 294.185795][T29758] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 294.197432][T29766] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.252254][T29766] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.264403][T18091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.277816][T29769] loop4: detected capacity change from 0 to 512 [ 294.293120][T29769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 294.306000][T29769] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.331201][T29782] FAULT_INJECTION: forcing a failure. [ 294.331201][T29782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.344375][T29782] CPU: 1 UID: 0 PID: 29782 Comm: syz.1.4199 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 294.344400][T29782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 294.344412][T29782] Call Trace: [ 294.344418][T29782] [ 294.344425][T29782] __dump_stack+0x1d/0x30 [ 294.344444][T29782] dump_stack_lvl+0xe8/0x140 [ 294.344483][T29782] dump_stack+0x15/0x1b [ 294.344497][T29782] should_fail_ex+0x265/0x280 [ 294.344528][T29782] should_fail+0xb/0x20 [ 294.344554][T29782] should_fail_usercopy+0x1a/0x20 [ 294.344656][T29782] _copy_from_user+0x1c/0xb0 [ 294.344675][T29782] btf_new_fd+0x20a/0x790 [ 294.344704][T29782] bpf_btf_load+0x112/0x130 [ 294.344797][T29782] __sys_bpf+0x561/0x790 [ 294.344829][T29782] __x64_sys_bpf+0x41/0x50 [ 294.344851][T29782] x64_sys_call+0x2478/0x2fb0 [ 294.344871][T29782] do_syscall_64+0xd0/0x1a0 [ 294.344954][T29782] ? clear_bhb_loop+0x25/0x80 [ 294.344976][T29782] ? clear_bhb_loop+0x25/0x80 [ 294.345064][T29782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.345093][T29782] RIP: 0033:0x7f8210a4e969 [ 294.345107][T29782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.345122][T29782] RSP: 002b:00007f820f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.345138][T29782] RAX: ffffffffffffffda RBX: 00007f8210c75fa0 RCX: 00007f8210a4e969 [ 294.345149][T29782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 294.345159][T29782] RBP: 00007f820f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 294.345170][T29782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.345236][T29782] R13: 0000000000000000 R14: 00007f8210c75fa0 R15: 00007ffc483e6fe8 [ 294.345253][T29782] [ 294.533659][T29766] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.589288][ T3389] kernel write not supported for file /745/attr/exec (pid: 3389 comm: kworker/0:3) [ 294.601218][T29766] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.622922][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.661503][T29766] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.673769][T29802] loop2: detected capacity change from 0 to 764 [ 294.684607][T29806] bridge0: entered promiscuous mode [ 294.689995][T29806] macvlan2: entered promiscuous mode [ 294.696861][T29806] bridge0: port 3(macvlan2) entered blocking state [ 294.703595][T29806] bridge0: port 3(macvlan2) entered disabled state [ 294.710886][T29806] macvlan2: entered allmulticast mode [ 294.715793][T29802] Symlink component flag not implemented [ 294.716288][T29806] bridge0: entered allmulticast mode [ 294.722361][T29802] Symlink component flag not implemented (116) [ 294.733745][T29806] macvlan2: left allmulticast mode [ 294.738916][T29806] bridge0: left allmulticast mode [ 294.744608][T29806] bridge0: left promiscuous mode [ 294.774948][T29766] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.793597][T29766] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.806456][T29766] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.894590][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 294.924897][T29850] loop2: detected capacity change from 0 to 512 [ 294.932174][T29850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.943667][T29850] EXT4-fs (loop2): 1 truncate cleaned up [ 294.949705][T29850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.963706][T29863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.973220][T29863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4211'. [ 294.992685][T29863] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4211'. [ 295.013126][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.035458][T29874] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.036716][T29875] Invalid ELF header magic: != ELF [ 295.116474][T29906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4219'. [ 295.222646][T29918] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.296234][T29925] infiniband syz!: set active [ 295.301080][T29925] infiniband syz!: added team_slave_0 [ 295.312433][T29925] RDS/IB: syz!: added [ 295.316472][T29925] smc: adding ib device syz! with port count 1 [ 295.323525][T29925] smc: ib device syz! port 1 has pnetid [ 295.325874][T29937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29937 comm=syz.2.4225 [ 295.385732][T29939] loop3: detected capacity change from 0 to 512 [ 295.398672][T29939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.423184][T29939] EXT4-fs (loop3): 1 truncate cleaned up [ 295.433216][T29939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.476697][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.537269][T29957] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.694712][T29995] netlink: 'syz.0.4232': attribute type 39 has an invalid length. [ 295.762131][T29991] loop2: detected capacity change from 0 to 512 [ 295.774294][T30013] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.834229][T29991] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4233: bg 0: block 248: padding at end of block bitmap is not set [ 295.849114][T29991] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4233: Failed to acquire dquot type 1 [ 295.861831][T29991] EXT4-fs (loop2): 1 truncate cleaned up [ 295.868191][T29991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.881263][T29991] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.910921][ T29] kauditd_printk_skb: 697 callbacks suppressed [ 295.910940][ T29] audit: type=1400 audit(1746766920.814:33959): avc: denied { unmount } for pid=23153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 295.938633][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.990903][ T29] audit: type=1400 audit(1746766920.884:33960): avc: denied { create } for pid=30033 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 296.043301][ T29] audit: type=1400 audit(1746766920.894:33961): avc: denied { write } for pid=30033 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 296.053785][T30038] loop1: detected capacity change from 0 to 512 [ 296.064212][ T29] audit: type=1400 audit(1746766920.894:33962): avc: denied { ioctl } for pid=30033 comm="syz.2.4239" path="socket:[69590]" dev="sockfs" ino=69590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 296.096801][ T29] audit: type=1400 audit(1746766920.894:33963): avc: denied { create } for pid=30033 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.117816][ T29] audit: type=1400 audit(1746766920.894:33964): avc: denied { write } for pid=30033 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.122385][T30038] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.138537][ T29] audit: type=1400 audit(1746766920.914:33965): avc: denied { write } for pid=30037 comm="syz.1.4241" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 296.175184][ T29] audit: type=1400 audit(1746766920.944:33966): avc: denied { name_bind } for pid=30037 comm="syz.1.4241" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 296.197316][ T29] audit: type=1400 audit(1746766920.944:33967): avc: denied { node_bind } for pid=30037 comm="syz.1.4241" saddr=10.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 296.204556][T30038] EXT4-fs (loop1): 1 truncate cleaned up [ 296.219635][ T29] audit: type=1400 audit(1746766921.004:33968): avc: denied { append } for pid=30033 comm="syz.2.4239" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.227201][T30038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.276961][T18091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.417401][T30051] batadv0: entered promiscuous mode [ 296.423842][T30051] team0: entered promiscuous mode [ 296.428963][T30051] team_slave_0: entered promiscuous mode [ 296.434837][T30051] team_slave_1: entered promiscuous mode [ 296.441741][T30051] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 296.482139][T30066] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 296.614027][T30097] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 296.757219][T30116] __nla_validate_parse: 9 callbacks suppressed [ 296.757239][T30116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4253'. [ 296.762628][T30118] pim6reg: entered allmulticast mode [ 296.763582][T30116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4253'. [ 296.788557][T30118] pim6reg: left allmulticast mode [ 296.808116][T30123] loop0: detected capacity change from 0 to 128 [ 296.819552][T30123] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 296.827523][T30123] FAT-fs (loop0): Filesystem has been set read-only [ 296.834405][T30123] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 296.842498][T30123] syz.0.4256: attempt to access beyond end of device [ 296.842498][T30123] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 296.907125][T30131] netlink: 'syz.3.4255': attribute type 39 has an invalid length. [ 296.945543][T30133] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 297.094014][T30148] bridge0: entered promiscuous mode [ 297.099327][T30148] macvlan2: entered promiscuous mode [ 297.106216][T30148] bridge0: port 3(macvlan2) entered blocking state [ 297.113150][T30148] bridge0: port 3(macvlan2) entered disabled state [ 297.121152][T30148] macvlan2: entered allmulticast mode [ 297.126565][T30148] bridge0: entered allmulticast mode [ 297.138429][T30148] macvlan2: left allmulticast mode [ 297.143705][T30148] bridge0: left allmulticast mode [ 297.154493][T30148] bridge0: left promiscuous mode [ 297.390468][T30170] loop2: detected capacity change from 0 to 512 [ 297.398227][T30170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 297.410092][T30170] EXT4-fs (loop2): 1 truncate cleaned up [ 297.417117][T30170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.443762][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.603858][T30220] syz!: rxe_newlink: already configured on team_slave_0 [ 297.650045][T30176] chnl_net:caif_netlink_parms(): no params data found [ 297.702627][T30176] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.709767][T30176] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.717203][T30176] bridge_slave_0: entered allmulticast mode [ 297.723784][T30176] bridge_slave_0: entered promiscuous mode [ 297.734091][T30366] pim6reg: entered allmulticast mode [ 297.740265][T30176] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.747505][T30176] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.754788][T30176] bridge_slave_1: entered allmulticast mode [ 297.761513][T30176] bridge_slave_1: entered promiscuous mode [ 297.768009][T30366] pim6reg: left allmulticast mode [ 297.805865][T30176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.817443][T30176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.847163][T30176] team0: Port device team_slave_0 added [ 297.857612][T30176] team0: Port device team_slave_1 added [ 297.900279][T30176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.907677][T30176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.933748][T30176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.945503][T30176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.952519][T30176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.978766][T30176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.017205][T30176] hsr_slave_0: entered promiscuous mode [ 298.023816][T30176] hsr_slave_1: entered promiscuous mode [ 298.029822][T30176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.037493][T30176] Cannot create hsr debugfs directory [ 298.048037][T30487] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 298.065842][T30503] netlink: 'syz.2.4288': attribute type 39 has an invalid length. [ 298.173197][T30176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.193575][T30176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.206399][T30568] loop3: detected capacity change from 0 to 512 [ 298.216593][T30176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.223813][T30568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.238813][T30176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.247351][T30568] EXT4-fs (loop3): 1 truncate cleaned up [ 298.253792][T30568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.254803][T30574] pim6reg: entered allmulticast mode [ 298.283218][T30574] pim6reg: left allmulticast mode [ 298.306091][T30568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4292: bg 0: block 256: padding at end of block bitmap is not set [ 298.317117][T30176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.331539][T30568] EXT4-fs (loop3): Remounting filesystem read-only [ 298.342409][T30176] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.352097][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.359263][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.378695][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.385892][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.400416][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.477069][T30591] loop3: detected capacity change from 0 to 1024 [ 298.484690][T30591] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 298.494608][T30591] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 298.504593][T30591] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 298.529194][T30176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.538236][T30591] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.4298: unexpected bad inode w/o EXT4_IGET_BAD [ 298.557600][T30597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4299'. [ 298.565000][T30591] EXT4-fs (loop3): no journal found [ 298.571847][T30591] EXT4-fs (loop3): can't get journal size [ 298.581318][T30591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.623290][T30591] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.663075][T30591] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.673121][T30617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.682030][T30617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.712640][T30591] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.726784][T30176] veth0_vlan: entered promiscuous mode [ 298.735250][T30176] veth1_vlan: entered promiscuous mode [ 298.751712][T30176] veth0_macvtap: entered promiscuous mode [ 298.758988][T30591] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.771798][T30176] veth1_macvtap: entered promiscuous mode [ 298.783566][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.794139][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.804140][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.814814][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.824950][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.835557][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.845514][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.856034][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.865943][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.876439][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.888181][T30176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.900846][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.911474][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.921325][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.931799][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.941696][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.952157][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.961997][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.972536][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.982371][T30176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.992897][T30176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.003691][T30176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.012336][T30176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.021127][T30176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.029912][T30176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.038653][T30176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.053421][T30591] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.067561][T30591] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.085687][T30591] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.101508][T30591] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.148860][T30649] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 299.163458][T30651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4302'. [ 299.173052][T30651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4302'. [ 299.239935][T30657] loop2: detected capacity change from 0 to 512 [ 299.248403][T30657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 299.275893][T30667] loop1: detected capacity change from 0 to 512 [ 299.292245][T30657] EXT4-fs (loop2): 1 truncate cleaned up [ 299.302459][T30657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.316696][T30667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.334406][T30667] ext4 filesystem being mounted at /319/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 299.358377][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.367901][T30667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.396774][T30667] loop1: detected capacity change from 0 to 512 [ 299.411402][T30683] netlink: 'syz.5.4309': attribute type 39 has an invalid length. [ 299.414071][T30667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30667 comm=syz.1.4308 [ 299.434590][T30683] veth1_macvtap: left promiscuous mode [ 299.447293][T30688] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4312'. [ 299.492783][T30696] netlink: 'syz.4.4313': attribute type 4 has an invalid length. [ 299.533349][T30703] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 299.674871][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.091609][T30733] loop3: detected capacity change from 0 to 512 [ 300.128257][T30744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4324'. [ 300.142721][T30733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 300.252641][T30733] EXT4-fs (loop3): 1 truncate cleaned up [ 300.259199][T30733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.395052][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.566747][T30757] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4328'. [ 300.699553][T30768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4329'. [ 300.840405][T30787] loop3: detected capacity change from 0 to 1024 [ 300.881360][T30787] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 300.891199][T30787] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 300.930632][T30787] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 300.958209][T30787] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.4330: unexpected bad inode w/o EXT4_IGET_BAD [ 301.010653][T30787] EXT4-fs (loop3): no journal found [ 301.015932][T30787] EXT4-fs (loop3): can't get journal size [ 301.051291][T30787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.117140][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 301.117158][ T29] audit: type=1400 audit(1746766926.014:34514): avc: denied { create } for pid=30786 comm="syz.3.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 301.175395][T30787] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.211295][ T29] audit: type=1400 audit(1746766926.044:34515): avc: denied { append } for pid=30786 comm="syz.3.4330" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 301.237130][T30807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.241240][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 301.245631][T30807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.291975][T30787] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.310567][ T29] audit: type=1400 audit(1746766926.134:34516): avc: denied { write } for pid=30786 comm="syz.3.4330" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.333971][ T29] audit: type=1400 audit(1746766926.134:34517): avc: denied { ioctl } for pid=30786 comm="syz.3.4330" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.424422][T30787] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.452266][T30815] loop4: detected capacity change from 0 to 512 [ 301.470554][T30815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.489665][T30815] EXT4-fs (loop4): 1 truncate cleaned up [ 301.497047][T30815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.511219][T30787] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.530102][ T29] audit: type=1400 audit(1746766926.424:34518): avc: denied { setopt } for pid=30816 comm="syz.5.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 301.544375][T30822] loop2: detected capacity change from 0 to 512 [ 301.558931][ T29] audit: type=1400 audit(1746766926.424:34519): avc: denied { ioctl } for pid=30816 comm="syz.5.4337" path="socket:[71962]" dev="sockfs" ino=71962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.586466][ T29] audit: type=1400 audit(1746766926.484:34520): avc: granted { setsecparam } for pid=30816 comm="syz.5.4337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 301.586776][T30822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.619524][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.656708][T30822] EXT4-fs (loop2): 1 truncate cleaned up [ 301.662930][T30822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.690648][ T29] audit: type=1400 audit(1746766926.584:34521): avc: denied { setattr } for pid=30821 comm="syz.2.4338" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.718649][T30839] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 301.738384][ T29] audit: type=1400 audit(1746766926.614:34522): avc: denied { mac_admin } for pid=30838 comm="syz.4.4341" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.759897][ T29] audit: type=1400 audit(1746766926.634:34523): avc: denied { relabelto } for pid=30838 comm="syz.4.4341" name="236" dev="tmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 301.955334][T30857] loop2: detected capacity change from 0 to 512 [ 301.978394][T30857] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 302.002129][T30857] EXT4-fs (loop2): 1 truncate cleaned up [ 302.114716][T30869] loop4: detected capacity change from 0 to 512 [ 302.125097][T30873] __nla_validate_parse: 3 callbacks suppressed [ 302.125112][T30873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4351'. [ 302.148104][T30869] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4349: bg 0: block 248: padding at end of block bitmap is not set [ 302.172644][T30869] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4349: Failed to acquire dquot type 1 [ 302.184596][T30869] EXT4-fs (loop4): 1 truncate cleaned up [ 302.192094][T30869] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.249578][T30904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4354'. [ 302.258668][T30904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4354'. [ 302.287532][T30904] gretap0: entered promiscuous mode [ 302.294388][T30904] gretap0: left promiscuous mode [ 302.380257][T30916] bridge0: entered promiscuous mode [ 302.395099][T30916] macvlan2: entered promiscuous mode [ 302.404509][T30916] bridge0: port 3(macvlan2) entered blocking state [ 302.411202][T30916] bridge0: port 3(macvlan2) entered disabled state [ 302.419792][T30916] macvlan2: entered allmulticast mode [ 302.425355][T30916] bridge0: entered allmulticast mode [ 302.436626][T30916] macvlan2: left allmulticast mode [ 302.441871][T30916] bridge0: left allmulticast mode [ 302.451531][T30916] bridge0: left promiscuous mode [ 302.476240][T30921] bridge0: entered promiscuous mode [ 302.483724][T30921] macvlan2: entered promiscuous mode [ 302.493166][T30921] bridge0: port 3(macvlan2) entered blocking state [ 302.499751][T30921] bridge0: port 3(macvlan2) entered disabled state [ 302.506560][T30921] macvlan2: entered allmulticast mode [ 302.512090][T30921] bridge0: entered allmulticast mode [ 302.520190][T30921] macvlan2: left allmulticast mode [ 302.525464][T30921] bridge0: left allmulticast mode [ 302.531167][T30921] bridge0: left promiscuous mode [ 302.567031][T30933] pim6reg: entered allmulticast mode [ 302.635655][T30944] loop4: detected capacity change from 0 to 512 [ 302.644675][T30944] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.654645][T30942] loop5: detected capacity change from 0 to 512 [ 302.663092][T30944] EXT4-fs (loop4): 1 truncate cleaned up [ 302.676810][T30942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.697542][T30942] EXT4-fs (loop5): 1 truncate cleaned up [ 302.733215][T30957] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4365'. [ 302.767089][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 302.829593][T30971] loop5: detected capacity change from 0 to 512 [ 302.836545][T30971] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.852707][T30971] EXT4-fs (loop5): 1 truncate cleaned up [ 302.881957][T30966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4367'. [ 302.891021][T30966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4367'. [ 302.925970][T30977] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 302.943178][T30966] batadv0: entered promiscuous mode [ 302.965646][T30983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4371'. [ 302.966128][T30966] team0: entered promiscuous mode [ 302.974652][T30983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4371'. [ 302.988777][T30966] team_slave_0: entered promiscuous mode [ 302.994654][T30966] team_slave_1: entered promiscuous mode [ 303.011525][T30966] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 303.020065][T30966] Cannot create hsr debugfs directory [ 303.026398][T30966] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 303.091505][T30787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.137508][T30787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.172838][T30787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.204235][T30787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.227926][T31003] loop5: detected capacity change from 0 to 512 [ 303.258851][T31003] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4372: bg 0: block 248: padding at end of block bitmap is not set [ 303.281649][T31017] pim6reg: entered allmulticast mode [ 303.282463][T31003] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4372: Failed to acquire dquot type 1 [ 303.343495][T31003] EXT4-fs (loop5): 1 truncate cleaned up [ 303.390637][T31003] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.448963][T31043] netlink: 'syz.4.4374': attribute type 39 has an invalid length. [ 303.612895][T31060] bridge0: entered promiscuous mode [ 303.632430][T31060] macvlan2: entered promiscuous mode [ 303.638768][T31060] bridge0: port 3(macvlan2) entered blocking state [ 303.645642][T31060] bridge0: port 3(macvlan2) entered disabled state [ 303.672107][T31060] macvlan2: entered allmulticast mode [ 303.677549][T31060] bridge0: entered allmulticast mode [ 303.684175][T31060] macvlan2: left allmulticast mode [ 303.689329][T31060] bridge0: left allmulticast mode [ 303.708186][T31060] bridge0: left promiscuous mode [ 303.782431][T31072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4378'. [ 304.253875][T31090] bridge0: entered promiscuous mode [ 304.259187][T31090] macvlan0: entered promiscuous mode [ 304.271303][T31090] bridge0: port 3(macvlan0) entered blocking state [ 304.277942][T31090] bridge0: port 3(macvlan0) entered disabled state [ 304.294862][T31090] macvlan0: entered allmulticast mode [ 304.300290][T31090] bridge0: entered allmulticast mode [ 304.324932][T31090] macvlan0: left allmulticast mode [ 304.330108][T31090] bridge0: left allmulticast mode [ 304.351106][T31090] bridge0: left promiscuous mode [ 304.414713][T31106] loop2: detected capacity change from 0 to 512 [ 304.453059][T31106] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 304.482110][T31118] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 304.496048][T31106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 304.528299][T31106] System zones: 1-12 [ 304.547650][T31106] EXT4-fs (loop2): orphan cleanup on readonly fs [ 304.611212][T31106] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4389: bg 0: block 361: padding at end of block bitmap is not set [ 304.660889][T31135] loop4: detected capacity change from 0 to 128 [ 304.686173][T31106] EXT4-fs (loop2): Remounting filesystem read-only [ 304.703394][T31106] EXT4-fs (loop2): 1 truncate cleaned up [ 304.907422][T31151] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 304.982655][T31154] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 304.995538][T31156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.043490][T21690] FAT-fs (loop4): error, invalid access to FAT (entry 0x000008ff) [ 305.051397][T21690] FAT-fs (loop4): Filesystem has been set read-only [ 305.113131][T31177] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 305.152556][T31168] loop3: detected capacity change from 0 to 512 [ 305.173503][T31168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.195670][T31187] bridge0: entered promiscuous mode [ 305.201022][T31187] macvlan2: entered promiscuous mode [ 305.207222][T31187] bridge0: port 3(macvlan2) entered blocking state [ 305.213816][T31187] bridge0: port 3(macvlan2) entered disabled state [ 305.240125][T31168] EXT4-fs (loop3): 1 truncate cleaned up [ 305.247370][T31187] macvlan2: entered allmulticast mode [ 305.252827][T31187] bridge0: entered allmulticast mode [ 305.292878][T31187] macvlan2: left allmulticast mode [ 305.298065][T31187] bridge0: left allmulticast mode [ 305.303700][T31187] bridge0: left promiscuous mode [ 305.358446][T31204] loop2: detected capacity change from 0 to 1024 [ 305.365905][T31204] EXT4-fs: Ignoring removed oldalloc option [ 305.371941][T31204] ext4: Unknown parameter 'euid<00000000000000000000' [ 305.403403][T31204] loop2: detected capacity change from 0 to 2048 [ 305.424095][T31214] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 305.439604][T31206] loop3: detected capacity change from 0 to 512 [ 305.454293][T31206] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4415: bg 0: block 248: padding at end of block bitmap is not set [ 305.508224][T31206] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4415: Failed to acquire dquot type 1 [ 305.554518][T31206] EXT4-fs (loop3): 1 truncate cleaned up [ 305.561837][T31206] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.593805][T31238] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 305.784365][T31262] loop1: detected capacity change from 0 to 512 [ 305.795769][T31262] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 305.827811][T31280] FAULT_INJECTION: forcing a failure. [ 305.827811][T31280] name failslab, interval 1, probability 0, space 0, times 0 [ 305.840640][T31280] CPU: 1 UID: 0 PID: 31280 Comm: syz.3.4430 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 305.840668][T31280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 305.840680][T31280] Call Trace: [ 305.840687][T31280] [ 305.840696][T31280] __dump_stack+0x1d/0x30 [ 305.840740][T31280] dump_stack_lvl+0xe8/0x140 [ 305.840760][T31280] dump_stack+0x15/0x1b [ 305.840776][T31280] should_fail_ex+0x265/0x280 [ 305.840807][T31280] should_failslab+0x8c/0xb0 [ 305.840850][T31280] kmem_cache_alloc_noprof+0x50/0x310 [ 305.840938][T31280] ? security_file_alloc+0x32/0x100 [ 305.840973][T31280] security_file_alloc+0x32/0x100 [ 305.841005][T31280] init_file+0x5c/0x1d0 [ 305.841068][T31280] alloc_empty_file+0x8b/0x200 [ 305.841108][T31280] path_openat+0x68/0x2170 [ 305.841127][T31280] ? try_charge_memcg+0x174/0x870 [ 305.841160][T31280] ? page_counter_charge+0x207/0x230 [ 305.841244][T31280] ? cgroup_rstat_updated+0xa3/0x510 [ 305.841276][T31280] ? refill_obj_stock+0x155/0x220 [ 305.841307][T31280] ? __mod_memcg_lruvec_state+0x13e/0x290 [ 305.841404][T31280] do_filp_open+0x109/0x230 [ 305.841434][T31280] io_openat2+0x272/0x390 [ 305.841465][T31280] io_openat+0x1b/0x30 [ 305.841495][T31280] io_issue_sqe+0x1a8/0xb70 [ 305.841577][T31280] io_submit_sqes+0x64c/0x1000 [ 305.841621][T31280] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 305.841662][T31280] ? __rcu_read_unlock+0x4f/0x70 [ 305.841688][T31280] ? get_pid_task+0x96/0xd0 [ 305.841714][T31280] ? proc_fail_nth_write+0x12d/0x160 [ 305.841746][T31280] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.841834][T31280] ? vfs_write+0x75e/0x8d0 [ 305.841864][T31280] ? __rcu_read_unlock+0x4f/0x70 [ 305.841890][T31280] ? __fget_files+0x184/0x1c0 [ 305.841925][T31280] ? fput+0x8f/0xc0 [ 305.842017][T31280] __x64_sys_io_uring_enter+0x78/0x90 [ 305.842190][T31280] x64_sys_call+0x28c8/0x2fb0 [ 305.842211][T31280] do_syscall_64+0xd0/0x1a0 [ 305.842295][T31280] ? clear_bhb_loop+0x25/0x80 [ 305.842317][T31280] ? clear_bhb_loop+0x25/0x80 [ 305.842338][T31280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.842362][T31280] RIP: 0033:0x7f864527e969 [ 305.842380][T31280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.842433][T31280] RSP: 002b:00007f86438e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 305.842457][T31280] RAX: ffffffffffffffda RBX: 00007f86454a5fa0 RCX: 00007f864527e969 [ 305.842473][T31280] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 305.842489][T31280] RBP: 00007f86438e7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.842504][T31280] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 305.842520][T31280] R13: 0000000000000000 R14: 00007f86454a5fa0 R15: 00007fff8b225208 [ 305.842538][T31280] [ 305.998585][T31262] EXT4-fs (loop1): 1 truncate cleaned up [ 306.022170][T31234] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 306.133521][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 306.133542][ T29] audit: type=1326 audit(1746766931.014:34986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.136143][T31234] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 306.136343][T31234] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 306.149117][ T29] audit: type=1326 audit(1746766931.044:34987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.150620][T31234] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.150620][T31234] [ 306.229203][T31234] EXT4-fs (loop2): Total free blocks count 0 [ 306.235234][T31234] EXT4-fs (loop2): Free/Dirty block details [ 306.241191][T31234] EXT4-fs (loop2): free_blocks=2415919104 [ 306.242086][ T29] audit: type=1326 audit(1746766931.044:34988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.246920][T31234] EXT4-fs (loop2): dirty_blocks=8224 [ 306.246938][T31234] EXT4-fs (loop2): Block reservation details [ 306.270510][ T29] audit: type=1326 audit(1746766931.074:34989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.275771][T31234] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 306.281735][ T29] audit: type=1326 audit(1746766931.094:34990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.305978][T31255] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 306.311381][ T29] audit: type=1326 audit(1746766931.124:34991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.334993][T31255] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.334993][T31255] [ 306.390165][ T29] audit: type=1326 audit(1746766931.284:34992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31277 comm="syz.5.4429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 306.413802][ T29] audit: type=1326 audit(1746766931.284:34993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31282 comm="syz.4.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 306.437413][ T29] audit: type=1326 audit(1746766931.284:34994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31282 comm="syz.4.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f77dbe969 code=0x7ffc0000 [ 306.461041][ T29] audit: type=1326 audit(1746766931.284:34995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31282 comm="syz.4.4431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f77dbe969 code=0x0 [ 306.513113][T31295] loop1: detected capacity change from 0 to 1024 [ 306.522051][T31295] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 306.531865][T31295] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 306.552715][T31297] netlink: 'syz.4.4431': attribute type 39 has an invalid length. [ 306.577109][T31278] rdma_op ffff8881188b7980 conn xmit_rdma 0000000000000000 [ 306.587116][T31295] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 306.611417][T31295] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.4432: unexpected bad inode w/o EXT4_IGET_BAD [ 306.638360][T31295] EXT4-fs (loop1): no journal found [ 306.643686][T31295] EXT4-fs (loop1): can't get journal size [ 306.731443][T31295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.751032][T31315] loop5: detected capacity change from 0 to 512 [ 306.758546][T31315] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 306.772816][T31295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.783785][T31315] EXT4-fs (loop5): 1 truncate cleaned up [ 306.788475][T31326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.798442][T31326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.842986][T31295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.875124][T31343] loop3: detected capacity change from 0 to 1024 [ 306.882426][T31343] EXT4-fs: Ignoring removed oldalloc option [ 306.888380][T31343] ext4: Unknown parameter 'euid<00000000000000000000' [ 306.898412][T31295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.910029][T31343] loop3: detected capacity change from 0 to 2048 [ 306.948619][T31295] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.995100][T31295] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.007222][T31295] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.020636][T31295] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.064537][T31378] rdma_op ffff888143401180 conn xmit_rdma 0000000000000000 [ 307.145674][T31387] loop5: detected capacity change from 0 to 512 [ 307.159491][T31392] loop4: detected capacity change from 0 to 512 [ 307.166926][T31392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.178560][T31387] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 307.190409][T31392] EXT4-fs (loop4): 1 truncate cleaned up [ 307.217477][T31387] EXT4-fs (loop5): 1 truncate cleaned up [ 307.277240][T31407] netlink: 'syz.2.4458': attribute type 39 has an invalid length. [ 307.323803][T31367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 307.338952][T31367] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 307.351304][T31367] EXT4-fs (loop3): This should not happen!! Data will be lost [ 307.351304][T31367] [ 307.361199][T31367] EXT4-fs (loop3): Total free blocks count 0 [ 307.367266][T31367] EXT4-fs (loop3): Free/Dirty block details [ 307.373299][T31367] EXT4-fs (loop3): free_blocks=2415919104 [ 307.379031][T31367] EXT4-fs (loop3): dirty_blocks=8224 [ 307.384558][T31367] EXT4-fs (loop3): Block reservation details [ 307.390655][T31367] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 307.392149][T31417] __nla_validate_parse: 12 callbacks suppressed [ 307.392167][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.400600][T31389] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 307.403069][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.411886][T31389] EXT4-fs (loop3): This should not happen!! Data will be lost [ 307.411886][T31389] [ 307.446240][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.456935][T31419] FAULT_INJECTION: forcing a failure. [ 307.456935][T31419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.470114][T31419] CPU: 0 UID: 0 PID: 31419 Comm: syz.4.4466 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 307.470148][T31419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 307.470164][T31419] Call Trace: [ 307.470173][T31419] [ 307.470183][T31419] __dump_stack+0x1d/0x30 [ 307.470241][T31419] dump_stack_lvl+0xe8/0x140 [ 307.470259][T31419] dump_stack+0x15/0x1b [ 307.470277][T31419] should_fail_ex+0x265/0x280 [ 307.470326][T31419] should_fail+0xb/0x20 [ 307.470358][T31419] should_fail_usercopy+0x1a/0x20 [ 307.470376][T31419] _copy_from_user+0x1c/0xb0 [ 307.470397][T31419] ___sys_sendmsg+0xc1/0x1d0 [ 307.470440][T31419] __x64_sys_sendmsg+0xd4/0x160 [ 307.470571][T31419] x64_sys_call+0x2999/0x2fb0 [ 307.470599][T31419] do_syscall_64+0xd0/0x1a0 [ 307.470626][T31419] ? clear_bhb_loop+0x25/0x80 [ 307.470653][T31419] ? clear_bhb_loop+0x25/0x80 [ 307.470675][T31419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.470709][T31419] RIP: 0033:0x7f5f77dbe969 [ 307.470727][T31419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.470750][T31419] RSP: 002b:00007f5f76427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.470773][T31419] RAX: ffffffffffffffda RBX: 00007f5f77fe5fa0 RCX: 00007f5f77dbe969 [ 307.470790][T31419] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 307.470803][T31419] RBP: 00007f5f76427090 R08: 0000000000000000 R09: 0000000000000000 [ 307.470815][T31419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.470899][T31419] R13: 0000000000000000 R14: 00007f5f77fe5fa0 R15: 00007fff92dfcc58 [ 307.470985][T31419] [ 307.653321][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.662398][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.671930][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.702007][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.707864][T31427] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 307.710979][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.711891][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 307.770984][T31433] pim6reg: entered allmulticast mode [ 307.864705][T31447] bridge0: entered promiscuous mode [ 307.870047][T31447] macvlan2: entered promiscuous mode [ 307.876709][T31447] bridge0: port 3(macvlan2) entered blocking state [ 307.883502][T31447] bridge0: port 3(macvlan2) entered disabled state [ 307.890388][T31447] macvlan2: entered allmulticast mode [ 307.895848][T31447] bridge0: entered allmulticast mode [ 307.915600][T31447] macvlan2: left allmulticast mode [ 307.920963][T31447] bridge0: left allmulticast mode [ 307.926570][T31447] bridge0: left promiscuous mode [ 307.998348][T31471] loop4: detected capacity change from 0 to 512 [ 308.029413][T31471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.047725][T31482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4478'. [ 308.071879][T31471] EXT4-fs (loop4): 1 truncate cleaned up [ 308.082027][T31481] loop2: detected capacity change from 0 to 512 [ 308.090552][T31481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 308.128432][T31481] EXT4-fs (loop2): 1 truncate cleaned up [ 308.318087][T31544] netlink: 'syz.3.4488': attribute type 39 has an invalid length. [ 308.380179][T31556] 9pnet_virtio: no channels available for device 127.0.0.1 [ 308.535330][T31562] loop1: detected capacity change from 0 to 512 [ 308.557579][T31587] rdma_op ffff888143402d80 conn xmit_rdma 0000000000000000 [ 308.565223][T31562] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4504: bg 0: block 248: padding at end of block bitmap is not set [ 308.565576][T31562] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4504: Failed to acquire dquot type 1 [ 308.602820][T31562] EXT4-fs (loop1): 1 truncate cleaned up [ 308.609592][T31562] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.851982][T31627] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 308.862579][T31620] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.888681][T31627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31627 comm=syz.1.4517 [ 308.914720][T31636] syz!: rxe_newlink: already configured on team_slave_0 [ 308.945108][T31636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31636 comm=syz.2.4519 [ 308.966788][T31620] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.024545][T31620] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.066214][T31640] rdma_op ffff8881022ce980 conn xmit_rdma 0000000000000000 [ 309.092755][T31620] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.102955][T31652] 9pnet_virtio: no channels available for device 127.0.0.1 [ 309.149566][T31620] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.163279][T31620] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.181117][T31620] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.202377][T31676] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 309.212522][T31620] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.241405][T31629] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.252887][T31681] loop5: detected capacity change from 0 to 1024 [ 309.268146][T31690] netlink: 'syz.1.4532': attribute type 13 has an invalid length. [ 309.279691][T31681] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 309.289670][T31681] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 309.329983][T31681] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 309.345188][T31681] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.4530: unexpected bad inode w/o EXT4_IGET_BAD [ 309.358729][T31681] EXT4-fs (loop5): no journal found [ 309.364137][T31681] EXT4-fs (loop5): can't get journal size [ 309.570364][T31714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.581439][T31714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.617597][T31690] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.624968][T31690] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.895544][T31690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.906648][T31690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.971235][T31690] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.979841][T31690] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.988351][T31690] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.997135][T31690] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.018700][T31629] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.047069][T31712] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.084803][T31629] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.123186][T31760] loop1: detected capacity change from 0 to 512 [ 310.139009][T31760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 310.158331][T31712] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.194187][T31765] rdma_op ffff888101047d80 conn xmit_rdma 0000000000000000 [ 310.216602][T31760] EXT4-fs (loop1): 1 truncate cleaned up [ 310.233573][T31629] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.313286][T31712] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.391477][T31787] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31787 comm=syz.3.4542 [ 310.415104][T31712] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.435849][T31798] netlink: 'syz.1.4544': attribute type 2 has an invalid length. [ 310.494334][T31807] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 310.498704][T31712] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.521949][T31712] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.539244][T31712] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.553280][T31712] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.595222][T31829] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 310.624978][T31829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31829 comm=syz.1.4549 [ 310.691406][T31846] rdma_op ffff8881188b5180 conn xmit_rdma 0000000000000000 [ 310.787226][T31857] loop1: detected capacity change from 0 to 2048 [ 310.977029][T31864] netlink: 'syz.3.4554': attribute type 39 has an invalid length. [ 311.158343][T31887] loop1: detected capacity change from 0 to 512 [ 311.162464][ T29] kauditd_printk_skb: 947 callbacks suppressed [ 311.162483][ T29] audit: type=1400 audit(1746766936.054:35941): avc: denied { read } for pid=31882 comm="syz.2.4561" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 311.166118][T31887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 311.170887][ T29] audit: type=1400 audit(1746766936.054:35942): avc: denied { open } for pid=31882 comm="syz.2.4561" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 311.175223][T31883] bridge0: entered promiscuous mode [ 311.198001][T31887] EXT4-fs (loop1): 1 truncate cleaned up [ 311.206857][ T29] audit: type=1400 audit(1746766936.064:35943): avc: denied { mounton } for pid=31885 comm="syz.1.4562" path="/372/file2" dev="tmpfs" ino=1978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 311.233302][T31883] macvlan2: entered promiscuous mode [ 311.238468][ T29] audit: type=1400 audit(1746766936.074:35944): avc: denied { ioctl } for pid=31882 comm="syz.2.4561" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 311.264345][T31883] bridge0: port 3(macvlan2) entered blocking state [ 311.266560][ T29] audit: type=1400 audit(1746766936.104:35945): avc: denied { module_request } for pid=31888 comm="syz.5.4563" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 311.291618][T31883] bridge0: port 3(macvlan2) entered disabled state [ 311.329454][T31883] macvlan2: entered allmulticast mode [ 311.334950][T31883] bridge0: entered allmulticast mode [ 311.350963][T31883] macvlan2: left allmulticast mode [ 311.356146][T31883] bridge0: left allmulticast mode [ 311.362347][ T29] audit: type=1400 audit(1746766936.124:35946): avc: denied { mount } for pid=31885 comm="syz.1.4562" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 311.364202][T31883] bridge0: left promiscuous mode [ 311.384474][ T29] audit: type=1400 audit(1746766936.244:35947): avc: denied { sys_module } for pid=31888 comm="syz.5.4563" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 311.410635][ T29] audit: type=1400 audit(1746766936.244:35948): avc: denied { setattr } for pid=31885 comm="syz.1.4562" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 311.433212][ T29] audit: type=1400 audit(1746766936.244:35949): avc: denied { write } for pid=31885 comm="syz.1.4562" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.455085][ T29] audit: type=1400 audit(1746766936.244:35950): avc: denied { remove_name } for pid=31885 comm="syz.1.4562" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.585982][T31915] FAULT_INJECTION: forcing a failure. [ 311.585982][T31915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.599126][T31915] CPU: 0 UID: 0 PID: 31915 Comm: syz.2.4569 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 311.599163][T31915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.599179][T31915] Call Trace: [ 311.599187][T31915] [ 311.599196][T31915] __dump_stack+0x1d/0x30 [ 311.599244][T31915] dump_stack_lvl+0xe8/0x140 [ 311.599269][T31915] dump_stack+0x15/0x1b [ 311.599291][T31915] should_fail_ex+0x265/0x280 [ 311.599357][T31915] should_fail+0xb/0x20 [ 311.599393][T31915] should_fail_usercopy+0x1a/0x20 [ 311.599418][T31915] _copy_to_user+0x20/0xa0 [ 311.599449][T31915] simple_read_from_buffer+0xb5/0x130 [ 311.599477][T31915] proc_fail_nth_read+0x100/0x140 [ 311.599509][T31915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.599553][T31915] vfs_read+0x19d/0x6f0 [ 311.599578][T31915] ? __rcu_read_unlock+0x4f/0x70 [ 311.599635][T31915] ? __rcu_read_unlock+0x4f/0x70 [ 311.599658][T31915] ? __fget_files+0x184/0x1c0 [ 311.599691][T31915] ksys_read+0xda/0x1a0 [ 311.599763][T31915] __x64_sys_read+0x40/0x50 [ 311.599791][T31915] x64_sys_call+0x2d77/0x2fb0 [ 311.599815][T31915] do_syscall_64+0xd0/0x1a0 [ 311.599941][T31915] ? clear_bhb_loop+0x25/0x80 [ 311.599965][T31915] ? clear_bhb_loop+0x25/0x80 [ 311.600056][T31915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.600079][T31915] RIP: 0033:0x7f27840bd37c [ 311.600098][T31915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 311.600118][T31915] RSP: 002b:00007f2782727030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.600194][T31915] RAX: ffffffffffffffda RBX: 00007f27842e5fa0 RCX: 00007f27840bd37c [ 311.600206][T31915] RDX: 000000000000000f RSI: 00007f27827270a0 RDI: 0000000000000006 [ 311.600218][T31915] RBP: 00007f2782727090 R08: 0000000000000000 R09: 0000000000000000 [ 311.600229][T31915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.600305][T31915] R13: 0000000000000000 R14: 00007f27842e5fa0 R15: 00007fff4553b658 [ 311.600332][T31915] [ 311.618128][T31908] rdma_op ffff8881188b7180 conn xmit_rdma 0000000000000000 [ 311.652832][T31918] 9pnet_virtio: no channels available for device 127.0.0.1 [ 311.890784][T31926] loop3: detected capacity change from 0 to 1024 [ 311.897592][T31926] EXT4-fs: Ignoring removed oldalloc option [ 311.903606][T31926] ext4: Unknown parameter 'euid<00000000000000000000' [ 311.924273][T31926] loop3: detected capacity change from 0 to 2048 [ 311.943760][T31926] EXT4-fs mount: 48 callbacks suppressed [ 311.943779][T31926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.017111][T31946] loop5: detected capacity change from 0 to 512 [ 312.024320][T31946] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 312.048208][T31951] loop1: detected capacity change from 0 to 1024 [ 312.056764][T31946] EXT4-fs (loop5): 1 truncate cleaned up [ 312.065418][T31946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.080178][T31951] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 312.090058][T31951] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 312.100643][T31951] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 312.122733][T31951] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.4577: unexpected bad inode w/o EXT4_IGET_BAD [ 312.139035][T30176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.156263][T31951] EXT4-fs (loop1): no journal found [ 312.161638][T31951] EXT4-fs (loop1): can't get journal size [ 312.171711][T31951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.188706][T31957] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 312.203691][T31957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31957 comm=syz.5.4578 [ 312.310193][T31970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.320042][T31970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.363712][T31950] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 312.379025][T31950] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 312.391409][T31950] EXT4-fs (loop3): This should not happen!! Data will be lost [ 312.391409][T31950] [ 312.401128][T31950] EXT4-fs (loop3): Total free blocks count 0 [ 312.407130][T31950] EXT4-fs (loop3): Free/Dirty block details [ 312.413123][T31950] EXT4-fs (loop3): free_blocks=2415919104 [ 312.418916][T31950] EXT4-fs (loop3): dirty_blocks=8224 [ 312.424222][T31950] EXT4-fs (loop3): Block reservation details [ 312.430202][T31950] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 312.437413][T31958] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 210 with error 28 [ 312.551685][T31992] loop3: detected capacity change from 0 to 512 [ 312.558883][T31992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.580771][T31992] EXT4-fs (loop3): 1 truncate cleaned up [ 312.587038][T31992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.609252][T31995] netlink: 'syz.5.4582': attribute type 39 has an invalid length. [ 312.622596][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.716783][T32001] rdma_op ffff8881187f8580 conn xmit_rdma 0000000000000000 [ 312.738672][T32009] loop2: detected capacity change from 0 to 1024 [ 312.746371][T32009] EXT4-fs: Ignoring removed oldalloc option [ 312.752629][T32009] ext4: Unknown parameter 'euid<00000000000000000000' [ 312.760114][T32012] loop3: detected capacity change from 0 to 1024 [ 312.767169][T32012] EXT4-fs: Ignoring removed oldalloc option [ 312.773258][T32012] ext4: Unknown parameter 'euid<00000000000000000000' [ 312.780252][T32009] loop2: detected capacity change from 0 to 2048 [ 312.793862][T32012] loop3: detected capacity change from 0 to 2048 [ 312.803122][T32009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.817125][T32012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.874211][T31629] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.904219][T31629] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.929927][T31629] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.954106][T31629] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.028513][T32037] __nla_validate_parse: 14 callbacks suppressed [ 313.028545][T32037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 313.280849][T32039] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 313.296910][T32039] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 313.301903][T32040] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 313.309388][T32039] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.309388][T32039] [ 313.333802][T32039] EXT4-fs (loop3): Total free blocks count 0 [ 313.339818][T32039] EXT4-fs (loop3): Free/Dirty block details [ 313.345762][T32039] EXT4-fs (loop3): free_blocks=2415919104 [ 313.351627][T32039] EXT4-fs (loop3): dirty_blocks=8224 [ 313.356976][T32039] EXT4-fs (loop3): Block reservation details [ 313.362993][T32039] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 313.369282][T32040] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 313.381703][T32040] EXT4-fs (loop2): This should not happen!! Data will be lost [ 313.381703][T32040] [ 313.391456][T32040] EXT4-fs (loop2): Total free blocks count 0 [ 313.397505][T32040] EXT4-fs (loop2): Free/Dirty block details [ 313.403447][T32040] EXT4-fs (loop2): free_blocks=2415919104 [ 313.409186][T32040] EXT4-fs (loop2): dirty_blocks=8224 [ 313.414532][T32040] EXT4-fs (loop2): Block reservation details [ 313.420588][T32040] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 313.505659][T32056] bridge0: entered promiscuous mode [ 313.521250][T32056] macvlan2: entered promiscuous mode [ 313.531414][T32056] bridge0: port 3(macvlan2) entered blocking state [ 313.538057][T32056] bridge0: port 3(macvlan2) entered disabled state [ 313.549176][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.561715][T32056] macvlan2: entered allmulticast mode [ 313.567196][T32056] bridge0: entered allmulticast mode [ 313.591108][T32056] macvlan2: left allmulticast mode [ 313.596301][T32056] bridge0: left allmulticast mode [ 313.606555][T32056] bridge0: left promiscuous mode [ 313.643290][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.727706][T32084] rdma_op ffff88810239b580 conn xmit_rdma 0000000000000000 [ 313.778694][T32087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4603'. [ 313.808951][T32089] loop2: detected capacity change from 0 to 512 [ 313.818582][T32089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.844875][T32089] EXT4-fs (loop2): 1 truncate cleaned up [ 313.853558][T32089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.960810][T32099] netlink: 'syz.5.4605': attribute type 39 has an invalid length. [ 313.981092][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.007812][T32098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4607'. [ 314.369025][T32144] netlink: 'syz.3.4615': attribute type 20 has an invalid length. [ 314.376941][T32144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 314.398086][T32146] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 314.457580][T32152] loop2: detected capacity change from 0 to 1024 [ 314.464857][T32152] EXT4-fs: Ignoring removed oldalloc option [ 314.470968][T32152] ext4: Unknown parameter 'euid<00000000000000000000' [ 314.488709][T32152] loop2: detected capacity change from 0 to 2048 [ 314.497707][T32157] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.507805][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4618'. [ 314.508074][T32152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.522258][T32157] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4618'. [ 314.580658][T32163] loop4: detected capacity change from 0 to 1024 [ 314.604085][T32163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.642948][T18091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.769021][T32183] pim6reg: entered allmulticast mode [ 314.777484][T32183] pim6reg: left allmulticast mode [ 314.930870][T32177] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 314.957776][T32193] netlink: 'syz.1.4628': attribute type 20 has an invalid length. [ 314.965670][T32193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4628'. [ 314.982822][T32177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 314.995338][T32177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 314.995338][T32177] [ 315.005029][T32177] EXT4-fs (loop2): Total free blocks count 0 [ 315.011043][T32177] EXT4-fs (loop2): Free/Dirty block details [ 315.016975][T32177] EXT4-fs (loop2): free_blocks=2415919104 [ 315.022734][T32177] EXT4-fs (loop2): dirty_blocks=8224 [ 315.028038][T32177] EXT4-fs (loop2): Block reservation details [ 315.034134][T32177] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 315.077686][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.178987][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'. [ 315.206593][T32208] rdma_op ffff88811dff4180 conn xmit_rdma 0000000000000000 [ 315.265751][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.315490][T32234] loop4: detected capacity change from 0 to 512 [ 315.323311][T32234] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 315.342091][T32234] EXT4-fs (loop4): 1 truncate cleaned up [ 315.347979][T32241] loop2: detected capacity change from 0 to 1024 [ 315.354840][T32234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.390363][T32241] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 315.400264][T32241] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 315.453240][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.467564][T32241] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 315.481537][T32241] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.4637: unexpected bad inode w/o EXT4_IGET_BAD [ 315.509957][T32241] EXT4-fs (loop2): no journal found [ 315.515293][T32241] EXT4-fs (loop2): can't get journal size [ 315.540315][T32252] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 315.557139][T32252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32252 comm=syz.4.4640 [ 315.572352][T32252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4640'. [ 315.582380][T32241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.643905][T32241] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.703970][T32266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.740644][T32266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.778773][T32278] loop5: detected capacity change from 0 to 1024 [ 315.786486][T32241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.801771][T32278] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 315.811649][T32278] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 315.834335][T32278] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 315.854188][T32284] loop4: detected capacity change from 0 to 512 [ 315.862134][T32241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.872718][T32284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 315.893055][T32284] EXT4-fs (loop4): 1 truncate cleaned up [ 315.899076][T32284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.932153][T32241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.932700][T32278] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.4646: unexpected bad inode w/o EXT4_IGET_BAD [ 315.993586][T32294] macvlan0: entered promiscuous mode [ 315.998927][T32294] bridge0: entered promiscuous mode [ 316.037739][T32278] EXT4-fs (loop5): no journal found [ 316.043057][T32278] EXT4-fs (loop5): can't get journal size [ 316.053257][T32294] bridge0: port 3(macvlan0) entered blocking state [ 316.059820][T32294] bridge0: port 3(macvlan0) entered disabled state [ 316.073996][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.083843][T32278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.103175][T32294] macvlan0: entered allmulticast mode [ 316.108720][T32294] bridge0: entered allmulticast mode [ 316.114582][T32294] macvlan0: left allmulticast mode [ 316.119776][T32294] bridge0: left allmulticast mode [ 316.131503][T32301] loop4: detected capacity change from 0 to 512 [ 316.140027][T32301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.159877][T32301] EXT4-fs (loop4): 1 truncate cleaned up [ 316.166105][T32301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.179945][T32294] bridge0: left promiscuous mode [ 316.199464][T32241] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.214036][T32241] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.233864][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.249529][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 316.249548][ T29] audit: type=1400 audit(1746766941.144:36565): avc: denied { relabelto } for pid=32312 comm="syz.3.4660" name="325" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 316.252505][T32316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.255883][ T29] audit: type=1400 audit(1746766941.144:36566): avc: denied { associate } for pid=32312 comm="syz.3.4660" name="325" dev="tmpfs" ino=1731 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 316.318207][ T29] audit: type=1400 audit(1746766941.144:36567): avc: denied { create } for pid=32312 comm="syz.3.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.337867][ T29] audit: type=1400 audit(1746766941.154:36568): avc: denied { setopt } for pid=32312 comm="syz.3.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.360163][ T29] audit: type=1326 audit(1746766941.184:36569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32312 comm="syz.3.4660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864527e969 code=0x7ffc0000 [ 316.383831][ T29] audit: type=1326 audit(1746766941.184:36570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32312 comm="syz.3.4660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f864527d1d7 code=0x7ffc0000 [ 316.393862][T32313] 9pnet_fd: Insufficient options for proto=fd [ 316.407635][ T29] audit: type=1400 audit(1746766941.184:36571): avc: denied { write } for pid=32312 comm="syz.3.4660" name="325" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 316.439949][ T29] audit: type=1400 audit(1746766941.184:36572): avc: denied { add_name } for pid=32312 comm="syz.3.4660" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 316.464714][ T29] audit: type=1400 audit(1746766941.184:36573): avc: denied { create } for pid=32312 comm="syz.3.4660" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 316.471055][T32241] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.485132][ T29] audit: type=1400 audit(1746766941.184:36574): avc: denied { associate } for pid=32312 comm="syz.3.4660" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.515454][T32316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.539191][T32326] pim6reg: entered allmulticast mode [ 316.560958][T32321] pim6reg: left allmulticast mode [ 316.577584][T32241] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.644499][T32353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4655'. [ 316.784290][T32368] pim6reg: entered allmulticast mode [ 316.802673][T32368] pim6reg: left allmulticast mode [ 316.831563][T32375] loop4: detected capacity change from 0 to 512 [ 316.838633][T32375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.857507][T32375] EXT4-fs (loop4): 1 truncate cleaned up [ 316.872468][T32375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.927714][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.989750][T32391] loop1: detected capacity change from 0 to 512 [ 317.003301][T32391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.034609][T32391] EXT4-fs (loop1): 1 truncate cleaned up [ 317.042124][T32395] rdma_op ffff8881188b7980 conn xmit_rdma 0000000000000000 [ 317.050927][T32391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.116846][T18091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.147617][T32408] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 317.189414][T30176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.220351][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.264543][T32434] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 317.660617][T32503] loop5: detected capacity change from 0 to 1024 [ 317.695829][T32503] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 317.705962][T32503] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 317.736231][T32503] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 317.768466][T32503] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.4683: unexpected bad inode w/o EXT4_IGET_BAD [ 317.792178][T32513] loop1: detected capacity change from 0 to 512 [ 317.818951][T32503] EXT4-fs (loop5): no journal found [ 317.824248][T32503] EXT4-fs (loop5): can't get journal size [ 317.854776][T32513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.861935][T32519] bridge0: entered promiscuous mode [ 317.865520][T32503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.899492][T32513] EXT4-fs (loop1): 1 truncate cleaned up [ 317.906549][T32519] macvlan0: entered promiscuous mode [ 317.911247][T32513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.932157][T32519] bridge0: port 3(macvlan0) entered blocking state [ 317.938802][T32519] bridge0: port 3(macvlan0) entered disabled state [ 317.975519][T32519] macvlan0: entered allmulticast mode [ 317.981069][T32519] bridge0: entered allmulticast mode [ 317.997860][T32519] macvlan0: left allmulticast mode [ 318.003093][T32519] bridge0: left allmulticast mode [ 318.017815][T18091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.028515][T32519] bridge0: left promiscuous mode [ 318.039682][T32530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.049625][T32530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.086988][T32540] pim6reg: entered allmulticast mode [ 318.094676][T32540] pim6reg: left allmulticast mode [ 318.293270][T32569] loop3: detected capacity change from 0 to 2048 [ 318.323747][T32569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.352802][T32570] rdma_op ffff8881188b4d80 conn xmit_rdma 0000000000000000 [ 318.603161][T32587] loop2: detected capacity change from 0 to 1024 [ 318.631230][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.652066][T30176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.652469][T32587] EXT4-fs: Ignoring removed oldalloc option [ 318.667195][T32587] ext4: Unknown parameter 'euid<00000000000000000000' [ 318.709385][T32596] loop5: detected capacity change from 0 to 1024 [ 318.727265][T32587] loop2: detected capacity change from 0 to 2048 [ 318.738743][T32596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.773029][T32587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.776100][T32608] pim6reg: entered allmulticast mode [ 318.792912][T32603] __nla_validate_parse: 2 callbacks suppressed [ 318.792927][T32603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4706'. [ 318.808127][T32603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4706'. [ 318.893973][T32611] pim6reg: left allmulticast mode [ 318.991684][T30176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.027883][T32628] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 319.050677][T32630] FAULT_INJECTION: forcing a failure. [ 319.050677][T32630] name failslab, interval 1, probability 0, space 0, times 0 [ 319.060747][T32631] xt_TPROXY: Can be used only with -p tcp or -p udp [ 319.063503][T32630] CPU: 1 UID: 0 PID: 32630 Comm: syz.1.4711 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 319.063542][T32630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 319.063560][T32630] Call Trace: [ 319.063584][T32630] [ 319.063595][T32630] __dump_stack+0x1d/0x30 [ 319.063622][T32630] dump_stack_lvl+0xe8/0x140 [ 319.063710][T32630] dump_stack+0x15/0x1b [ 319.063732][T32630] should_fail_ex+0x265/0x280 [ 319.063820][T32630] should_failslab+0x8c/0xb0 [ 319.063859][T32630] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 319.063887][T32630] ? sidtab_sid2str_get+0xa0/0x130 [ 319.063998][T32630] kmemdup_noprof+0x2b/0x70 [ 319.064022][T32630] sidtab_sid2str_get+0xa0/0x130 [ 319.064060][T32630] security_sid_to_context_core+0x1eb/0x2e0 [ 319.064172][T32630] security_sid_to_context+0x27/0x40 [ 319.064268][T32630] avc_audit_post_callback+0x9d/0x520 [ 319.064312][T32630] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 319.064392][T32630] common_lsm_audit+0x1b8/0x230 [ 319.064424][T32630] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 319.064470][T32630] slow_avc_audit+0x104/0x140 [ 319.064532][T32630] avc_has_extended_perms+0x6d0/0x940 [ 319.064620][T32630] ioctl_has_perm+0x289/0x2e0 [ 319.064664][T32630] selinux_file_ioctl+0x2e3/0x370 [ 319.064715][T32630] ? __fget_files+0x184/0x1c0 [ 319.064750][T32630] security_file_ioctl+0x48/0x90 [ 319.064862][T32630] __se_sys_ioctl+0x47/0x140 [ 319.064891][T32630] __x64_sys_ioctl+0x43/0x50 [ 319.064917][T32630] x64_sys_call+0x19a8/0x2fb0 [ 319.064946][T32630] do_syscall_64+0xd0/0x1a0 [ 319.065002][T32630] ? clear_bhb_loop+0x25/0x80 [ 319.065032][T32630] ? clear_bhb_loop+0x25/0x80 [ 319.065054][T32630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.065149][T32630] RIP: 0033:0x7f8210a4e969 [ 319.065168][T32630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.065192][T32630] RSP: 002b:00007f820f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.065217][T32630] RAX: ffffffffffffffda RBX: 00007f8210c75fa0 RCX: 00007f8210a4e969 [ 319.065233][T32630] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000005 [ 319.065273][T32630] RBP: 00007f820f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.065310][T32630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.065326][T32630] R13: 0000000000000000 R14: 00007f8210c75fa0 R15: 00007ffc483e6fe8 [ 319.065416][T32630] [ 319.288067][T32612] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 319.331495][T32612] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 319.343841][T32612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 319.343841][T32612] [ 319.353639][T32612] EXT4-fs (loop2): Total free blocks count 0 [ 319.359658][T32612] EXT4-fs (loop2): Free/Dirty block details [ 319.365602][T32612] EXT4-fs (loop2): free_blocks=2415919104 [ 319.371368][T32612] EXT4-fs (loop2): dirty_blocks=8224 [ 319.376707][T32612] EXT4-fs (loop2): Block reservation details [ 319.382763][T32612] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 319.389926][T32631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4710'. [ 319.405442][T32631] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4710'. [ 319.412657][T32622] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 319.498731][T32643] loop1: detected capacity change from 0 to 512 [ 319.516261][T32636] rdma_op ffff8881188b4d80 conn xmit_rdma 0000000000000000 [ 319.531632][T32643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.560334][T32643] EXT4-fs (loop1): 1 truncate cleaned up [ 319.567260][T32643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.619133][T32653] rdma_op ffff88811881a180 conn xmit_rdma 0000000000000000 [ 319.639330][T32655] bridge0: entered promiscuous mode [ 319.646524][T32655] macvlan0: entered promiscuous mode [ 319.652911][T32655] bridge0: port 3(macvlan0) entered blocking state [ 319.659490][T32655] bridge0: port 3(macvlan0) entered disabled state [ 319.666493][T32655] macvlan0: entered allmulticast mode [ 319.672049][T32655] bridge0: entered allmulticast mode [ 319.678941][T32655] macvlan0: left allmulticast mode [ 319.684156][T32655] bridge0: left allmulticast mode [ 319.691689][T32655] bridge0: left promiscuous mode [ 319.704655][T32663] loop2: detected capacity change from 0 to 512 [ 319.717837][T18091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.717946][T32663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.735330][T32671] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 319.748815][T32663] EXT4-fs (loop2): 1 truncate cleaned up [ 319.760806][T32663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.792872][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.805276][T32681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4724'. [ 319.814502][T32681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4724'. [ 319.933065][T32717] loop5: detected capacity change from 0 to 1024 [ 319.939901][T32717] EXT4-fs: Ignoring removed oldalloc option [ 319.946026][T32717] ext4: Unknown parameter 'euid<00000000000000000000' [ 319.965772][T32717] loop5: detected capacity change from 0 to 2048 [ 319.992406][T32717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.257738][T32744] bridge0: entered promiscuous mode [ 320.272386][T32744] macvlan2: entered promiscuous mode [ 320.288373][T32744] bridge0: port 3(macvlan2) entered blocking state [ 320.295243][T32744] bridge0: port 3(macvlan2) entered disabled state [ 320.303528][T32744] macvlan2: entered allmulticast mode [ 320.309357][T32744] bridge0: entered allmulticast mode [ 320.316014][T32744] macvlan2: left allmulticast mode [ 320.321278][T32744] bridge0: left allmulticast mode [ 320.327791][T32744] bridge0: left promiscuous mode [ 320.340212][T32750] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 320.350549][T32750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32750 comm=syz.2.4737 [ 320.391910][T32732] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 320.406914][T32732] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 320.419350][T32732] EXT4-fs (loop5): This should not happen!! Data will be lost [ 320.419350][T32732] [ 320.429013][T32732] EXT4-fs (loop5): Total free blocks count 0 [ 320.435054][T32732] EXT4-fs (loop5): Free/Dirty block details [ 320.441032][T32732] EXT4-fs (loop5): free_blocks=2415919104 [ 320.446827][T32732] EXT4-fs (loop5): dirty_blocks=8224 [ 320.452169][T32732] EXT4-fs (loop5): Block reservation details [ 320.458166][T32732] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 320.478388][T32741] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 320.519461][T32757] wireguard0: entered promiscuous mode [ 320.525083][T32757] wireguard0: entered allmulticast mode [ 320.595222][T32767] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 320.648640][ T308] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 320.705926][ T322] loop3: detected capacity change from 0 to 1024 [ 320.755442][ T344] loop4: detected capacity change from 0 to 512 [ 320.763202][ T322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.783427][ T349] loop2: detected capacity change from 0 to 512 [ 320.796058][ T344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.796985][ T349] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 320.836197][ T344] EXT4-fs (loop4): 1 truncate cleaned up [ 320.848275][ T344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.872954][ T345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 320.903757][ T349] EXT4-fs (loop2): 1 truncate cleaned up [ 320.937627][ T349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.974787][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.029079][ T378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4751'. [ 321.038276][ T378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4751'. [ 321.085342][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.099614][ T371] rdma_op ffff8881031f8180 conn xmit_rdma 0000000000000000 [ 321.143966][ T389] SELinux: failed to load policy [ 321.158651][ T391] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 321.251327][ T29] kauditd_printk_skb: 957 callbacks suppressed [ 321.251345][ T29] audit: type=1326 audit(1746766946.154:37532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.281071][ T29] audit: type=1326 audit(1746766946.154:37533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.304563][ T29] audit: type=1326 audit(1746766946.154:37534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.361231][ T403] rdma_op ffff8881031f8180 conn xmit_rdma 0000000000000000 [ 321.369009][ T29] audit: type=1326 audit(1746766946.154:37535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.392534][ T29] audit: type=1326 audit(1746766946.154:37536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.416117][ T29] audit: type=1326 audit(1746766946.154:37537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.439663][ T29] audit: type=1326 audit(1746766946.154:37538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.463238][ T29] audit: type=1326 audit(1746766946.154:37539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.486784][ T29] audit: type=1326 audit(1746766946.154:37540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.510260][ T29] audit: type=1326 audit(1746766946.154:37541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=400 comm="syz.5.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd389dbe969 code=0x7ffc0000 [ 321.623585][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.661372][ T430] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 321.704895][ T411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4761'. [ 321.819663][ T455] loop2: detected capacity change from 0 to 1024 [ 321.849971][ T457] loop3: detected capacity change from 0 to 2048 [ 321.889695][ T457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.890586][ T455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.182533][ T482] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 322.410215][ T505] pim6reg: entered allmulticast mode [ 322.452105][ T505] pim6reg: left allmulticast mode [ 322.459062][ T507] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 322.497659][ T507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=507 comm=syz.4.4789 [ 322.513354][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.544023][ T518] loop5: detected capacity change from 0 to 512 [ 322.561710][ T518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 322.591968][ T518] EXT4-fs (loop5): 1 truncate cleaned up [ 322.602177][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.632960][ T518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.677123][ T533] loop2: detected capacity change from 0 to 1024 [ 322.708818][ T533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.754216][T30176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.768827][ T533] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.789834][ T533] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 322.808137][ T533] EXT4-fs (loop2): orphan cleanup on readonly fs [ 322.830218][ T533] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.4798: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.849681][ T553] loop3: detected capacity change from 0 to 512 [ 322.858776][ T553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 322.900748][ T533] EXT4-fs (loop2): Remounting filesystem read-only [ 322.920938][ T533] EXT4-fs (loop2): 1 orphan inode deleted [ 322.927170][ T533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.962037][ T553] EXT4-fs (loop3): 1 truncate cleaned up [ 322.971018][ T553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.021961][T19921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.059996][T23153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.075426][ T570] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 323.095224][ T570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=570 comm=syz.5.4809 [ 323.135334][ T576] loop4: detected capacity change from 0 to 512 [ 323.163215][ T576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 323.213806][ T576] EXT4-fs (loop4): 1 truncate cleaned up [ 323.305716][ T580] rdma_op ffff88811881b980 conn xmit_rdma 0000000000000000 [ 323.379895][ T614] loop1: detected capacity change from 0 to 512 [ 323.388375][ T614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.456505][ T621] SELinux: syz.5.4826 (621) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 323.464490][ T614] EXT4-fs (loop1): 1 truncate cleaned up [ 323.718854][ T649] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 323.864741][ T665] __nla_validate_parse: 4 callbacks suppressed [ 323.864812][ T665] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4842'. [ 324.155822][ T678] rdma_op ffff88811881ad80 conn xmit_rdma 0000000000000000 [ 324.239872][ T687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4849'. [ 324.248935][ T687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4849'. [ 324.269980][ T682] SELinux: syz.3.4847 (682) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 324.305092][ T697] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 324.400329][ T713] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.415613][ T713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=713 comm=syz.3.4858 [ 324.450257][ T713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4858'. [ 324.515696][ T722] loop2: detected capacity change from 0 to 1024 [ 324.600896][ T742] SELinux: syz.1.4867 (742) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 324.620896][ T740] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 324.664955][ T742] FAULT_INJECTION: forcing a failure. [ 324.664955][ T742] name failslab, interval 1, probability 0, space 0, times 0 [ 324.677632][ T742] CPU: 0 UID: 0 PID: 742 Comm: syz.1.4867 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 324.677668][ T742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 324.677685][ T742] Call Trace: [ 324.677692][ T742] [ 324.677772][ T742] __dump_stack+0x1d/0x30 [ 324.677797][ T742] dump_stack_lvl+0xe8/0x140 [ 324.677820][ T742] dump_stack+0x15/0x1b [ 324.677840][ T742] should_fail_ex+0x265/0x280 [ 324.677885][ T742] should_failslab+0x8c/0xb0 [ 324.677916][ T742] __kmalloc_noprof+0xa5/0x3e0 [ 324.677937][ T742] ? sel_write_user+0x1ac/0x440 [ 324.677996][ T742] sel_write_user+0x1ac/0x440 [ 324.678015][ T742] selinux_transaction_write+0xc3/0x110 [ 324.678076][ T742] ? __pfx_selinux_transaction_write+0x10/0x10 [ 324.678128][ T742] vfs_write+0x266/0x8d0 [ 324.678158][ T742] ? __rcu_read_unlock+0x4f/0x70 [ 324.678253][ T742] ? __fget_files+0x184/0x1c0 [ 324.678282][ T742] ksys_write+0xda/0x1a0 [ 324.678389][ T742] __x64_sys_write+0x40/0x50 [ 324.678421][ T742] x64_sys_call+0x2cdd/0x2fb0 [ 324.678448][ T742] do_syscall_64+0xd0/0x1a0 [ 324.678540][ T742] ? clear_bhb_loop+0x25/0x80 [ 324.678562][ T742] ? clear_bhb_loop+0x25/0x80 [ 324.678584][ T742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.678612][ T742] RIP: 0033:0x7f8210a4e969 [ 324.678628][ T742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.678746][ T742] RSP: 002b:00007f820f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.678764][ T742] RAX: ffffffffffffffda RBX: 00007f8210c75fa0 RCX: 00007f8210a4e969 [ 324.678776][ T742] RDX: 0000000000000027 RSI: 00002000000000c0 RDI: 0000000000000003 [ 324.678788][ T742] RBP: 00007f820f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.678800][ T742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.678812][ T742] R13: 0000000000000000 R14: 00007f8210c75fa0 R15: 00007ffc483e6fe8 [ 324.678834][ T742] [ 324.957693][ T749] rdma_op ffff888118819580 conn xmit_rdma 0000000000000000 [ 324.979683][ T751] netlink: 'syz.1.4873': attribute type 7 has an invalid length. [ 324.987590][ T751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 325.025741][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4873'. [ 325.072894][ T762] FAULT_INJECTION: forcing a failure. [ 325.072894][ T762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.086045][ T762] CPU: 0 UID: 0 PID: 762 Comm: syz.5.4875 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 325.086078][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 325.086091][ T762] Call Trace: [ 325.086096][ T762] [ 325.086103][ T762] __dump_stack+0x1d/0x30 [ 325.086187][ T762] dump_stack_lvl+0xe8/0x140 [ 325.086211][ T762] dump_stack+0x15/0x1b [ 325.086232][ T762] should_fail_ex+0x265/0x280 [ 325.086268][ T762] should_fail+0xb/0x20 [ 325.086345][ T762] should_fail_usercopy+0x1a/0x20 [ 325.086364][ T762] _copy_from_user+0x1c/0xb0 [ 325.086390][ T762] __se_sys_mount+0x10d/0x2e0 [ 325.086418][ T762] ? fput+0x8f/0xc0 [ 325.086437][ T762] ? ksys_write+0x16e/0x1a0 [ 325.086463][ T762] __x64_sys_mount+0x67/0x80 [ 325.086490][ T762] x64_sys_call+0xd36/0x2fb0 [ 325.086553][ T762] do_syscall_64+0xd0/0x1a0 [ 325.086576][ T762] ? clear_bhb_loop+0x25/0x80 [ 325.086596][ T762] ? clear_bhb_loop+0x25/0x80 [ 325.086619][ T762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.086705][ T762] RIP: 0033:0x7fd389dbe969 [ 325.086719][ T762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.086776][ T762] RSP: 002b:00007fd388427038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.086800][ T762] RAX: ffffffffffffffda RBX: 00007fd389fe5fa0 RCX: 00007fd389dbe969 [ 325.086814][ T762] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000100 [ 325.086831][ T762] RBP: 00007fd388427090 R08: 00002000000003c0 R09: 0000000000000000 [ 325.086843][ T762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.086854][ T762] R13: 0000000000000000 R14: 00007fd389fe5fa0 R15: 00007ffd81244a98 [ 325.086941][ T762] [ 325.281013][ T762] 9pnet_fd: p9_fd_create_tcp (762): problem connecting socket to 127.0.0.1 [ 325.367317][ T778] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 325.432675][ T784] ================================================================== [ 325.440806][ T784] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 325.448552][ T784] [ 325.450877][ T784] read-write to 0xffff88810100e218 of 4 bytes by task 783 on cpu 0: [ 325.458857][ T784] vmalloc_info_show+0x481/0x790 [ 325.463809][ T784] traverse+0x141/0x3a0 [ 325.467966][ T784] seq_read_iter+0x853/0x940 [ 325.472563][ T784] proc_reg_read_iter+0x10d/0x180 [ 325.477604][ T784] vfs_read+0x5ca/0x6f0 [ 325.481764][ T784] __x64_sys_pread64+0xfd/0x150 [ 325.486637][ T784] x64_sys_call+0x296d/0x2fb0 [ 325.491327][ T784] do_syscall_64+0xd0/0x1a0 [ 325.495838][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.501737][ T784] [ 325.504059][ T784] read-write to 0xffff88810100e218 of 4 bytes by task 784 on cpu 1: [ 325.512032][ T784] vmalloc_info_show+0x481/0x790 [ 325.516983][ T784] traverse+0x141/0x3a0 [ 325.521140][ T784] seq_read_iter+0x853/0x940 [ 325.525731][ T784] proc_reg_read_iter+0x10d/0x180 [ 325.530773][ T784] vfs_read+0x5ca/0x6f0 [ 325.534939][ T784] __x64_sys_pread64+0xfd/0x150 [ 325.539796][ T784] x64_sys_call+0x296d/0x2fb0 [ 325.544476][ T784] do_syscall_64+0xd0/0x1a0 [ 325.548983][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.554879][ T784] [ 325.557198][ T784] value changed: 0x000000ea -> 0x00000155 [ 325.562911][ T784] [ 325.565236][ T784] Reported by Kernel Concurrency Sanitizer on: [ 325.571384][ T784] CPU: 1 UID: 0 PID: 784 Comm: syz.4.4883 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 325.583729][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 325.593787][ T784] ================================================================== [ 325.613556][ T784] ================================================================== [ 325.621850][ T784] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 325.629605][ T784] [ 325.631932][ T784] write to 0xffff88810100e218 of 4 bytes by task 783 on cpu 0: [ 325.639504][ T784] vmalloc_info_show+0x421/0x790 [ 325.644459][ T784] traverse+0x141/0x3a0 [ 325.648611][ T784] seq_read_iter+0x853/0x940 [ 325.653240][ T784] proc_reg_read_iter+0x10d/0x180 [ 325.658282][ T784] vfs_read+0x5ca/0x6f0 [ 325.662446][ T784] __x64_sys_pread64+0xfd/0x150 [ 325.667316][ T784] x64_sys_call+0x296d/0x2fb0 [ 325.672018][ T784] do_syscall_64+0xd0/0x1a0 [ 325.676545][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.682451][ T784] [ 325.684781][ T784] read-write to 0xffff88810100e218 of 4 bytes by task 784 on cpu 1: [ 325.692763][ T784] vmalloc_info_show+0x481/0x790 [ 325.697723][ T784] traverse+0x141/0x3a0 [ 325.701892][ T784] seq_read_iter+0x853/0x940 [ 325.706493][ T784] proc_reg_read_iter+0x10d/0x180 [ 325.711532][ T784] vfs_read+0x5ca/0x6f0 [ 325.715699][ T784] __x64_sys_pread64+0xfd/0x150 [ 325.720560][ T784] x64_sys_call+0x296d/0x2fb0 [ 325.725248][ T784] do_syscall_64+0xd0/0x1a0 [ 325.729753][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.735657][ T784] [ 325.737981][ T784] value changed: 0x00000358 -> 0x00000004 [ 325.743706][ T784] [ 325.746033][ T784] Reported by Kernel Concurrency Sanitizer on: [ 325.752195][ T784] CPU: 1 UID: 0 PID: 784 Comm: syz.4.4883 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 325.764536][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 325.774594][ T784] ================================================================== [ 326.026682][ T786] bridge0: entered promiscuous mode [ 326.031995][ T786] macvlan2: entered promiscuous mode [ 326.038477][ T786] bridge0: port 3(macvlan2) entered blocking state [ 326.045136][ T786] bridge0: port 3(macvlan2) entered disabled state [ 326.053326][ T786] macvlan2: entered allmulticast mode [ 326.058785][ T786] bridge0: entered allmulticast mode [ 326.065762][ T786] macvlan2: left allmulticast mode [ 326.071016][ T786] bridge0: left allmulticast mode [ 326.078038][ T786] bridge0: left promiscuous mode