last executing test programs: 1.969480056s ago: executing program 3 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0xffffffe9}]}}, @TCA_RATE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000200)={0x5d, 0x8, 0x6, 0xa, 0x8f4c}) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000006c0), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44040) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)}, 0x4008084) 1.842151441s ago: executing program 3 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x1000090, &(0x7f0000003240)=ANY=[], 0x6, 0x368, &(0x7f0000000680)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000240)={0xf0ff, 0x0, 0x0, 0x0, 0x100, r2, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1000a, 0x0, 0x1, r2}]) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 1.768490074s ago: executing program 1 (id=1324): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffce, 0x8200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xd7b27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) recvfrom(r5, 0x0, 0x0, 0x40000102, 0x0, 0x0) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r5, &(0x7f0000002340)=""/232, 0xe8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) 1.656631179s ago: executing program 4 (id=1327): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xffffffcb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000480)=[{&(0x7f00000006c0)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb6", 0x92}, {&(0x7f0000001040)="3e0cccd8eada1dcbb6550973263da755b8c2aa4a669216ab545ea7ffc1fb2879423644c2ae1c81fa93261eea2152c8623feb647c955aad39c071856f95d0d01e86742274881b8179fe34982f31f51112112d76f64a76805638a7de68bec716aa6d2f9553e26c1d1f096912a59a1e5df1d8d8bcbb00e82fb46cdc6f21c4fa5c1b5d07f2eb7cedcf0b03b2246561330d8db61e5b360fff5a3d9a7080dc7902f6add813b01cf6be75591290de4de255b7482228ea3c30637c263c5ea4d6f29ab9b5880632f36bf66708585acc63aab578a358c55944893b89cbc5e56b47ceb9dda8353bce66e4a6c7ac98c10d6033972aaf5cc6dfae3088c65d1e366bca96aec686413e613f3263446842e222161e0ed16275ef5ff95320b41b590989584d84ce12380362380b1e470c9d5a4e92b6e846bb4f513d5de65ef8c53bb262bfdccad65e39b4c44f7a8c42032c561d78a3ea5a24f1d64898043bb24cf5d9feac4dfa044fb8845ff0b34265a0612ff9522f5d56b2ae917294aece437c2cc25b863c5dd9797068316ac8ee55c3bf98e554cd3f1a010c34dcb44a00f8d340e6cddb331cab2209eb93c0c8b3c2393bc841b70f3c5e1e722359981fd2de5e5c8c6f060f83ec46899a873b4b8c74e64f22b36cbcac864fa3a78eb9b3a5152aeb788fe5ab26eaa4e299ca6b58077c15c545d68d8fd7ad7e02ee4b6502f8adac51253259840f930ce40059d5f51d148693a91337181885b68eb45100bc4edadf2725f7a093fffaa1e3d97d47258d648feb332653d2a3c0bfe98bb1aeabf936e70f952e7a3b18d2bbc77d0075504ac2a6ceae2b901a243d3f6eedcf3dde192e20417063b4ac49b89831beae3272220669a2ff4d25e9f44fbd1162cec683caeebaff092fbb4e57d799e8f35320b130c9d7a24bad7cd804bf1965d5e4c7c47528163444087b249d5da0762ea864d0cb7af607d916fed0442fbc4f7fe1dd37490afae01a31ff7e26e7cc4d08773b043df2e8c86f3109246c74c41e455688237a40e1c3bf44776719c8e35795920aa683b118dc0fddf019b8b4a1c23ed0da6bb24417854621509085858692b20a41237852bf3c307215af3c58b534cf3c8a38714350e4387f06d2d2cd0dbdc0a7bdf624573339f389a1550ca353663d1e0682af582975567af40daf4cf5fab8f2965573a5cfa81cf5621266c72f82a62c31fe16a8e1dd3979c13ee0ab7f7dcf2d01a022827002648681c37dab2e8890b80153273e5f722b589aa9b80687c0749bdae4cad68b144d9be5a4951326ea25513a7ea9f5048a040b8947af63f9cd2a255f540779546c52bcac667fc24f77bec7ada082186fd0068663f8d494e741ae7095209de96c29da6d605dd5d8955dbf9d250a48b91eab23f56e66fde6e52c4faf1e76793eff7aa81311b7811bd4183349dd0a9e57f2fea9ea110dc4dabe8d56fe998e2dec80dfc6fd318cefa3f8aaeb4b2a1402d6af4bac3682999b82e150bc0a8716ad58937398a53cb2582171b54b7a5b630b4f42abc9d834c840b086ec31a9770effc41e6f4be409ccbb2d4ee4451df58f0220f7f4db767a72a572ac30dc7c214e129d3b8af07191d9c3963933cfcfea507b02a996f9041a81be1e8f0705d8de8fb7b62a93987f2a3e6977f013722347d31bb2e62042c7d7fe7651daa4eb9ba1844150c4b2b59525ae84eed1e79d6704788227bac4d00769f51e18f40e25f139d0a6ebba6f1d2b70574792a54a1075f35f0e57e8755995bbb7346fc089b1e04f55d3205c6a58a0cd7226174cbb111774949e907244822437af15229103c0971aa884955ecb14a8bb553c812a3e6e3436e29827cc9a10c67c5873bbf10021264f6806ea9f1e7db55bee0e60a026a6442e02578e1b52b7100c557a3c7806485520de14242b5289b9f2ed7ce173c4bd0b152952164964919c748f5242bf01ef87416de1c15c2866f125b6ca5ba77c6c66b592926381730af64363a7d153fada8dc60ea7ae3c9d1f9a5a26241185cc260c5b8de7e12c800e8d8dd98a5f71a9050978bb79ea5a0215a5d93dc5a6d381d01c9ab82d222efd2b76d3055a036ca0149e0726fbf32a1e4b51cbe7a04ca085c72744610e065ee6c7b8d5285ecf531ae5ea5abe369a6c35113f3951cb5b5ae6dbeb5ff84bd7aa6175e2e77cd520e576e1706b7c0ef3fcc5012e8ab772659950ca6d379dc0f465645277a090e924c2d9ae0454d3cb0451a708702352300919b09e463097222595c313eb1c59d5f38df0d6c5bba8405608c366c9c88e704f54ab502560bf350622d53d9ac7b6c83a6ec9c356994215d2f61062c32864324aecab4d199b4344910c085ee98ac139acab6486f47c62ea26d61a1946a99c8418869f7536f0d15eea5a057653639bd7abfeb7769d1a5a5206517765175a4807d944b7c6fa987bdb71df367890177faf72d6affef16bac5568ac1e6fbc50979c94363c6fffef8328a589242365d389062f54a65da5b6fc173899f765f1f63f9f4fe3c63d2dbe75701dbaaefde83db0a2a5ff45827c70a0490f8a60f69a916b6ba70882dde5e9eda4c8b7cdcc6a23a9cf6674bf42043dde887a638390c2cfe8228f6fd34ea264632bb479aa3cc42858c2f193ca91ed9c03b77e8fee63e15d437021af9f074b5a5a38b39a8ae89e78ddb1015315436acee55494d2367df8f00437f279ddfdf939316ae26d06d6df1b9c1f234b0dd19c82a22de3af8abebad79822d9d352a9b5f7d3f005798d2b259b23d9fc1fcff4951404f68a3ce4bf6840df7d4a6fbcc28bc76d719c6ae213daa7ac8ac7db333e07687a3c389946279e46e2da57ee4316b383fe10d7dcb715b320f769f08f11c9350d96326542a9bf7d8cf89b8cfc7ab2b8339ede44b9a785f2cb809f11f8e8cfb5e83860cb1fd054d72503567527d0621c359dc2770db6d6caa0eb6fd8471d21e50be5e1cee7031f9751c4f66feb3be787654ce5e7612b3b65ea2eb875a955bea8609bfd97ea8ae97615f3b41cd76eb5f0e6e7db62e005d14a5e33635598901073c8684d35789bb97255eb434b521e827b078fd9baf924ae1e88da29facb27e252cd0535bb8a7577fa324ca538d4ea530234a4c7c3a7c375db13ad8cafcaaa17645e382af9c9df57f3b40c732da870f455554a0b185f797f861e091aec1333135bcddd4067accca63c3edaf77772284dda4bad0b4940f82fb25f7f8e85bb753893156e24e6f2f5fdbe50a410ef8f0448ba076c808d6ab9fd221963a399437218cd1385a42fbb1ebfdf3bd25ae3c8bfe36730c3a93f0198606b56d5752d2526c1cdc88a066f967d7227613c80a615b71c1069348a6bf20a69f22157f44a1549e19e837d847fdec61c32a48a7d9b3be6827c1ed1b8b846e7732626b799b46159ea269030f766c2d6a062b6cadb6cd77575f9616c3005034406dd1b2451b70a9422c059900a3d3e89e67e06aa6998cd1aca46b6f8b9af66c63aa053f43d380365d7f006ec2357b20aa4d31e83cf3b4fd2f671bf96ebc584b17dcfd1650ec642ebdac33aaadedd4fdd716f8a56fb93c9112d4c8d37bfae6e83acc1d95efe428444c5cf7c7991bad3ffb2074a815962d7642b2f6706739d741d1b99e229a130bf849a5cbefdf6bd7129213e0196ad135505fddf3b84220f12cff8678bc69a351706c74ce26dfb42862837a74d302c64703bd945cbd862e326ac30931fca2c0fb8dfed2aa69b99cc14b188f5eabce4f0c5c802143d62c13d2763b9e8b3439b76840a9c6ab47e9cd8889abe982a7d2cc184c37520c353a8051c99a0414e26a22389f95b81de423b180822dc58a112943df3f21b880d3f776b687aefd0acbe2013ee8bc32be2b490a33a4f3c4f94071014a7b956bed8e14e035d8355020782d967cb5f45beda0ccc64613d24d3bb14d30bb060e4c566e2521465d701fefbfa49b351c6bbac64fa51c3f34924e67ede0d7e96d22cd846f974443d387d48dac5b4d731240cefc9896891ff3d7dcb10d0a5565649a0b3d9efa7ca165536f0af40471c82c1466961cbbc7beccfdcb90c3741833d0d5d65e012f9edb73c3ab5da9727dcb6e7d9a8cfefb4f0bf54d9236b80372fbabb140099f5962728048512d4a1598e562762dd96159ae2927d5ce642f5bb0d2763356772cd2e5ebe9d71e906146ea0ab52e746913eabcac23f828fc0027dcecdb8daa509c4b668ad2e227215fdb0955caa87d4909f0691be563285ad945b2a5a5bfa7008e1fc9a6cd68bad7663062ebc716d91dfe7eecf4711dafde60ccce2eeb1dd4158a62b0b12cfa9671a40f70dccbbf50786c0735c51a361e87c02a4b34c1ee185f31af30b735a105e86d1d24ab79a3804c84ce5979cef42221cf948831380f603618820545784effb9be136b41c99357b76149a86a76532a85f3a9742af4cd273b5ee037c2a5a52887ae5953fc5c25122345d8b8aa88a3bedbc2519813f8d4c05d836f5288d3471f4bc4ea9d9607940ae5d58f38ce4992da750d53807a1ab2c60bdd19abcf1a54d554ecebb55423e6afcb3543a29a044c6a89054459a041b8dc18c5d170dade8ebb222dfccaade8597c8cfaf5f5035c2e0ab67ffb99485227289e9ce01c8cfe5baeb6e60d7f6a0de6696dbbd5f9972f5714945a1e032f04035e3b2a33a96d464aa7a3e34326f0577aa38c237e866231bf186bfbc528c4abfae109093ffebc8ba1e50b928c0c4c63aaaa4b1d5ce83afada94dad1bd9e25f5e538fc2a12e349af9739824237b22eadfdf3bc23b95ecb8b8c113ce56f6e715005f9c5ec928ff5ea9642ea2a9ede8096bf8376e07b2f6c64e40d16788642c12f29a981ca9a1c8c326d316b271fc4aa54b7c158e40c8f5650bff81c562a40023002d199e04220ae21b8adce898f2bac8e7158e2b794d868ccd5e5a8c8f51f963a0a34b0fad42f166dbf9a03fb830fb82dec45cb0404dd762860b57335a0f8766f28631be66d78854bbd4b44dc18d0fbbe800099f84b094452cccfde1296dff59d645d964091b1d36e4df775eb3418b84d787c7225d6dfcd557f36a7dbc02ff27df1db3fd799f9595468d06836f51af36d2943eaf9625bd41fa40cbe514531b20c0abb285ad6f3b5a3a5a20b0b34a9554cdf03376b070764574f759a4f1056ad3c72038e2ed46a7bc621fdc53c563c2a20a08e55dd1267aa3bf91e030475c3a07ebf1eb5161132550d6acc7a339d31cc64af763e502403db80648ef10fbf40fcb9b4fde9daf941f7a54069b63fb16c09a597ba42d388aca7015c4ea167fdba2069b5bca7d2ef577e0df56d83f22ce17bbb5c3d8a89b38ea7ca2c8b6c559396f88cee39d93a668db0bd37bc8a5dd336f00a6a0e389b1f3bc218162258a85c82fbbe848bddb3941a13993811acb9d7fb03dc3d2f92e9e33bb62fc8c6fcba34e45a712981324396a1ae4c109154a4967e085bfa8ed635cc9d55875f1f5063d04d7d1a95b7e0db15ef4a3fbe5ae2bbc0af3f98757866fe546e231cb83a0c191e6", 0xf2e}], 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0x2}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24018f0001dd673014"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x2005c844) 1.610871161s ago: executing program 4 (id=1328): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.61041545s ago: executing program 3 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 1) 1.608499951s ago: executing program 4 (id=1330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000000000ffffffff952d96e7d800000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) r6 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) write$P9_RCREATE(r6, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x20, 0x4, 0x3}, 0x3}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc4, 0x6}}]}, 0x6c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x62}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) socket$unix(0x1, 0x1, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.553982583s ago: executing program 3 (id=1331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x102, 0x108) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x200000000}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x41) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.553374033s ago: executing program 3 (id=1332): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0xffffff00, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.534416424s ago: executing program 3 (id=1333): statx(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4000, 0x400, &(0x7f0000000a00)) socket$netlink(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@resgid}, {@auto_da_alloc}, {@noquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffffffffffb8}, 0x1, 0x0, 0x0, 0x800}, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706240400000000000000000500000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000600)=0x7) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x200000000000023c}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x2, 0x401}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000840)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5e7, &(0x7f0000001400)="$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") lchown(0x0, 0x0, 0xee01) 1.456237997s ago: executing program 4 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB="13887c9be08827e2c95e5366b89bf049e4e18505155c165f0babdcb942c097f4318dd511a0af36a88f1f657e66cd971126aeeaadaf78f267e7e634a869689e01a1a6cfa64cafd7afa0896e42e158e5b4c16e63dbeb"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0xfffffffd, @loopback, 0x2}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$unix(r3, &(0x7f0000000440)="01d78bf6e7a6a72b959a608acf6ca9e2e6754108a1c1592522b123a283fef7a82bf2f6040a18", 0x26, 0x801, 0x0, 0x0) r5 = dup3(r3, r4, 0x0) sendmsg$inet6(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)="e041c6845b8ef826b504a1b736f24b878a482512b55b63705d0d635eb03a2015139d39828d56583b235ac370afd8d3b168c8a4bfea79a4b219562d7517d943353687f7198b49bf841eeb6b58b5d8dde82ff881e0166b24ef225c36f5b94a3a9075dac96cfb7ee469eb4908b88e2100feddd15d6e61beae24bdbfced348ee8a2bfe2aa72cce89e185b9315d03d1e9aaceb39963d148b56854aee37ea9f5d0a4d922311d057ad3c7ec752762b88d01b57d2415fe7316df69ccbdce5495fbc69c0f6f7ab85721fe1925760c0c35f5f8ba81c54d5a36dc9ce28ce7dd27fac37266d8fd86e38f96a1c5cf8e240104eddbe18bac779be1bd459898ae2080ad91722f1beb5f430ee86792d5ea02d97dd650867f6fb3bbcd20f88b016b62ced88fc10e3c41674bffc70aeddd80d2cf193f0e73514cc58da911f1cd59e05ca89e7e9e8f82df11663d4f3f97ab71aa6407373443d791b2a9a26b6f581e30d574a9e21cad26dd5275be942e46b0cb7db9c6f4b5fff1239485a7de3e0e011369fc061f468b8002a543f85eda815f01eefdae7e5112b72ee00c5c9ce5fbc06b2c5784e308d228bb79c06063fe2441fae101f177cf0e902caec56227b44e407aca3a57e385924e21832ed714fea2de4026cd1560f41d99681d7150d93b5e42fbd3ba39450070a4a3226ffe3dbb8c9dbeaa0e5f07cb553e288902838720952ca320d1a08b40e382159010aa87db9d43292038b604cd9b10780b2f0f5e8c87555e00f9d56e8714a44482779281b8b2753531325c6f96296e0ea14fcae7513415397f9d28955b306fdd0e829acfd5b74e531ce04bb408ad232d6cdb8ac63cac7924431934241d1823195837043063960e22d18caa9b2ea3376f03652b1af89ea3be2fdb6a0115cb128e5c1613fe367a325bd6daabdef2f7f348a6642e71028c9bb52f631488c286483e26f998a55b691aabd6840c5cc0f101213c5ad6cc88ed479d31d6ba3cb25f836bf61ac1e10c1d398a8383c879e384701f7ef28f95c2225f9d0ff91503ea201cc4104a3fdabbc1177458d68c23efce243e07f4b8b4a50f3a813c540330aca47870468f7d574e0d0b5406d95ea241bd07981303268af1a85b127db5347da0dd0b8a3163500d78b2fe626b36eece2808d9f29eb9542e64459a535d2cf6cfd56f26f5f131e66bad20c33a3b838a0477e7dde678f040df676e656fd4c971bde4239983717ac3f25811967cfdc0ef84aa9c88d7d42557fcbc650271f1aa1b6ca96ae59fbb032c3608d61f768e481b78746717d81c052804cb905a8e037558496e74d704afe4b46d09aefe461a369a49cb9918fbe8c86407fe7a9aef2080672909e7ce5497fbee041239b9c457f7cb703ba38218f09df900ef0d30a38689a20e04638716637750691722234d9abd786716a24ffdd06ce624d57b2c43ccddba95f518899dfe6857b6d9e6091b822ecbd33e3cd12636a9b731a58f88d68e5dbce43590de8bc6ea18242ccfe881df9316289b394529fb813c8c6cbaadd11da47bef3ecdacfc619df60fba01034461bc34c2251397b0f775b80601dac3e30bdc0fcae7fafc6df723781b7dab9786a88acd3e59f49ca4b280d95079ad6f9775d32e76984fe10b4e67a710af319a34a34e19b295187986ee85ea7d6a1e0f9e13b7de76a9e345265ab6d4febb1ae4766e4f2a60f792a144e039aaf01982d2415f4e5ab862efb27032ecf9c89d0d9c6c7ccb1b96cd4057d2b9c215e6a2b6f7e9a0c1f9e13b4e32df2e039b2f7a2269077d31689406f8ac2d7a91e852f6b3d753b1af463aed5ee175f66812428eef2702c8d8397b86f73ac6f7d434e0a420843af23c6b7e33c1a7c740f78ac34fdf190b5956d69f69a5b05d7d5580da468b6cf77bf5970148b8fd55733b5bf84d832f06a8a9c76bbe620bb4f019529b1ef583409865ece0679d84de3f75cd07130d2ec9bc6a7e5087ef9210711dad69c3d8bd153bdc086e1b647fcd07038e51027710dbce64a2577f724180c4a2950b554984f760991def22bc0d6bb7d4f1989e2d584b229ebb555e86cabd169a963c6c218ab83fdf0c0e84901513bfa32b0301b0ffd0024ed30554eac787968ae9b52da07e8e169837c500b2df12d5e6f91dbcc12d8632bb3a6d4953264ee4570866c0d4b06d7cd67bd709defd5b112efef200f4faf2894cf912d4065ac93e5b7011bc28df478330024362544bd1c1e6d847195de4db32beada722b5d9986539f779d17f83a095fc65db03f0bb13d5cebf97fc6ad907b5f35cada397b5cec15a6031737ac7fbe3633ebd844800091c48d02b822811056f64382b1d38c3ba87f6a673969be4bd27784fb3e0667b58fa8942da38ab599da85105a4a7618d7b4f448ffa0caf492d804954e0252b6ea31dbab2500d598ee6b4945c4303b96c05e06fdbf372621164273169a34f5bf4c1e18eb513e703a732430d1e66032035c79398f4a4b1714875a331c56b5435f515ef3d9b98e7c7d422dc304accdd7938ce98c064633bcc60403d1132e3518e798105b855c481a44b1fbca7377269ab23dd95bc1f1874d3365940e4045b0187778cb538230e1e59955b129ec6cf83b9270594d7cc7bfe1147859d2ca0e8f55495089c0069719c3a8701d1fd906cd3af1e36a5bd21b54bd4bd8ab7fb2e4a0b840dac37d49cef219b7d8fd41cdec4b5be0ef8de5128744b06630442dae26cecc40004b111baf652b0a73d13fe18b85990c4f9ae7b648966a5a3d5923f524e5ca5b601b6aa3ddd7e3cb6f2d648b5124330e05fbd7056d145909a274ca175c3e08798ac7aae76ef01a12ccdcea682f193e16b65df8ef879eba418e30f4c7b3aca82ed3dcb22eaf61cc14d16d9468844de96b5b9b88549f1e26cbf34bcf91f6c89ebe5f0a28a580291941783dff966916a1c4b901b9bf4c1e50b5d8bffc9b5bb037fbee281c0bf20c974a338a813e95845c80f0d179fee50ae9de7abf34964c78263ccfceb8df5893d2b977941d79ae93c1ca27960a46729464da704d74dd49a4ad00b3065a4b022aa45c647d7b00e0350654d4c07a8e5581800e200c0d75f4019008fd0deb69842d230e296c2ef810521c65d653da88b8b76d6503c3a79da1ca915a499c76e1361f33fad59c9eeecf6e61174785b17dcb057453799551506395b433afca88d9bd9fa5796098b85cc92fba3411fa321210d8ae55e53461e5962580f3a66ef216930254541c13514f0239b58fe3c825b1df6a666eecd602e26ad704d3ad3746ad6574a705273c9183d2326f5f0c5607d7ecb64a3f83fb5489cb6ec5ede2d1fd1aedcc58d3da1981d2fb9db3847527b7565719211e947696e7f3e8e3bdefe4bb238d51882c0c3dc3d164141bb3164bc4ff131559d6cd58a73bbec77b69da832b668e8ce916c63ab0ec03e456eada0ed84bd25f5e09f072bdb0b108ac8f203842ab604b1ad5bf59e87a6e3fa400623a8ab31965319b57fc362d87659b7cff965a71a27c5fdd72239cbe5adcbc84b4957e9245e35b1ca6455f839f87af3bdac4cf706fe4bd4d50cb633d9bbf76a3b184ed001e7e05d5bd8e36ef1b957fba7f2305d1773bd322372525fd7b3f31c08e8e153aacfd6c81bd40087624cc95259b4e7bf389b325c59c515154069de50acf843cb3b1be7e5979e143fdb1daabea26a73d76c7f6c9070c7e53739309858c4bdbc174b9a80de704cee1458fa3cc8761275656b8232df28c38df1b25dd543f4978494a31b41d7b77cbdfcaa9f2c26abd4ef145183c56c214bcef1042508c346b94327784ef42c1c6b2c61cac3bd03502e61ada586999818471b153351d999d50aa3727b64a199584f3e024e2947c63df1b19d346fc2ea93f6565d4c1592fc30309ecdd160746d02af6f0e65307ed7f8b0ed070bcea3fcf8a11563fb8a5ec83fc55432501efe2ed495e31674f3bc873a1acfe613d418c2f41dc865731380b460e59bbbe88d490e6e5dec2c7b80c897b6d056f4b49e0f8322e4c3ec7e485e3dcab5cbc4708fe16af6aeda1b4e9cad184d5485dfa435737eee2324e0d2d7c1ecdd458b94e4f765cbe4b7e53f9a913fd3beb3df254870e0c29fa561de38f4523a05f86d925c11e921ac88f1b39f23aa0f1669015aebee8b944b8195fa1fd1951dec0c516de0b626bdacd6946ba8f184e7f0658bf2033ddb31ceb5895c1aa5fc0555cca4c71e379882e081b59a53c28cb79820bcdc4894e7615c358d554490e4792bf940a2ce890c2ec01e6a1149c3cb30a462e607b69ff1e1d0adbe2f4daa9e2c78e535aa2c00ae4203247c2173855250ccc4ef0a3602cb5a23731d8afa6f34c2aae3c5017d66edce41b780a1dccdca4faec68cb5e3ae8a2130a829d1da474814e00db97a53e94fd9e877dcfce5f83c1ce917add2c2bb64b677ace2b4d64606e9309b2587c78493ce57d291159929d368df0ea2a208a229893d3617bcf28dae48bb9f068af41e38fb96a02dc32b0146acefecb8a62e8e6e42e7c29e321d7d7357085a353d76d3d323335fc07117ca8f388760e3beed4c469784910ece9c414948a4ac7dd68c841c4b7ebccae156576e7218ca310f495117c0466d7368f82905814e1cb560f7896c9ede193137f571b78f4d1b0e922593f62e7a8f0f6f37528612e9e8895e55aacc0e4cfd0f88f30badef5bd992da31c599c78a1e39b0734c1f275b6f376b6ed79b24a962756cb4423671b35c80f9703f5181c59815cdb66fc9fa804c945e16581b8cd09fb78e02591e41c5ce15c449f6e6487bfedad78643c17ce13d4afdf0c0ea384c5bc357a893cd41030082385bdf4788ec1f37052819de344e7aca8b2f52b098e62963923cbb2564181294bb2804a25adf5a8dab0c893e1162bbb0283510f964f1c1deedcecb96c0ac8d3ada73e951c14657409249d8b66d7d13f5c8b552182b4f69d0a860db1407fb84d2c5466c46bcf1e09a02d6a991736b855d8e213372c4483721138ba2391ceb5076a14e821db71f741350088b8ea39b9f88ee484c51a2040efbb860bb39777874da8d9b30dc9ac4d6592a2def1003bcffa0b012c948794940b98d72ff04b848184b7fff5639f85936b8bafc98bb626bf4fe4f837d6d119f2faa5e90819f6e5d66534afd0739ec3a8fcf0438a1859626fa7941c5f739e96df8204e5dd9938d40d1488000bc1b0dab69e6bdc6dc557824c801ff9f49ad893f6dc113d2f2698dfbdb30ad39ba73e0410ffb3eda85cf0672d28de7a578de8bd2bc5672a448a528290f8d73e49ac67011d476b533d4b4c75cd115015e06b7a994d86cdabc1c41957b20b5fd6adfdb55626626c2360e23cfa7020ec7e47f68dd5c1ea3c5041c568060232c8c1c8f765987e76a3f91fffa4177208dec7522a55017e0e52b1a98c315037f5d763b8fe3d53313dc97f9aa03de23f54b6711b87c5b568eb8b0819b6228cded0fea022a8a8fe6bda9b1b6788152d5fe7842086bf418118b6ead2bb327097d7a8624e379abe7a0ae9fe2b017948956e7c4a9f5ca1685e94a17c210e691e170b9d5aa075ebfc408a7a9939b7d00effd773cb6589be1c56f21d59a00fd4e09d4a5c1713ef0ca7321543a78829cede9da8f39460555474480f99efe97f9c694d58796d6de8bc1598aad94ddb565c48666730c7e33ced213cbd42b1e480116b7c7de0a70e1a68fa3c9cbdd94f49b508f0f46abe5501b78c27fc5f9637e5b733ce23cbd37cb87da4837eac9b04f422eb83c104b629c16f4671b65d4", 0xfda}], 0x1}, 0x4004000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffeaf, 0x0, 0x0}, &(0x7f0000000140)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020040fffdff060000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000a000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b70200000200"], &(0x7f0000000780)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xdc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000500)='inet_sock_set_state\x00', r1, 0x0, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x8, 0x1, 0x0, 0x40, {{0x22, 0x4, 0x1, 0x3, 0x88, 0x65, 0x0, 0xed, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x44, 0xa4, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x6}, {@empty, 0x59}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@multicast1, 0x3}, {@multicast2, 0x3ff}, {@rand_addr=0x64010101, 0x80}, {@multicast2, 0x5}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x90, 0x1, 0x5, [{@rand_addr=0x64010101, 0x2}, {@empty, 0x3}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@private=0xa010101, 0x401}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000004c0)={@loopback, 0xf, r9}) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000000)={'netdevsim0\x00', 0xf}) 1.432454289s ago: executing program 4 (id=1335): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x8001}}, {@auto_da_alloc}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018510000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x6}, 0x18) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) unlinkat(r0, &(0x7f0000000880)='./file1\x00', 0x200) 1.043346685s ago: executing program 2 (id=1337): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00@\x00'/17], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00@\x00'/17], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff000000000000000000000007000000000000000000000009faff00000000000000000009040000000000000000000009060000000000778805b427ac0e1a76df9051449ef9e6d0e61854924ce23e7fad2d40d6d395771d010515537086af7ed972503d07263d"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) signalfd(r2, &(0x7f0000000180)={[0x2]}, 0x8) (async) r3 = signalfd(r2, &(0x7f0000000180)={[0x2]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00yO$']) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x26, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}, @exit, @generic={0x9, 0x0, 0x7, 0x200, 0xa}, @call={0x85, 0x0, 0x0, 0xba}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x406, 0x0, 0x10, 0x7fc00100}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r9, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000001c0)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) sendmmsg$inet(r11, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) (async) sendmmsg$inet(r11, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 885.256042ms ago: executing program 2 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x2, 0x805, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x8}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x7ffff088) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x53, 0x2, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x80, 0x7, 0xe, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x43, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x200}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff56f}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xe3, &(0x7f0000000800)=""/227, 0x40f00, 0x2, '\x00', r7, @sched_cls=0x36, r5, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x8, 0x2, 0x2}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000500)=[r0, r5], &(0x7f0000000900)=[{0x0, 0x3, 0x0, 0x7}], 0x10, 0x1ff}, 0x94) 722.028269ms ago: executing program 1 (id=1341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x803302ab4ecc4943, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 649.316032ms ago: executing program 1 (id=1343): mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000cd0d3814426b6db17e80824266c155046930068d3c9f956c61f20700a2ddd293649e0548b750c3b2c4c739527434c85eb8c19c379589535c370356ff9f6e6693493e6afa6963640e09ebaa4a55c13eb987b5fd22e534894e4391305dffdf", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000cd0d3814426b6db17e80824266c155046930068d3c9f956c61f20700a2ddd293649e0548b750c3b2c4c739527434c85eb8c19c379589535c370356ff9f6e6693493e6afa6963640e09ebaa4a55c13eb987b5fd22e534894e4391305dffdf", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) (async) 576.661575ms ago: executing program 2 (id=1345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x11ff, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 576.325095ms ago: executing program 1 (id=1346): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 541.019897ms ago: executing program 4 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001800018014"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) r2 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000003c0)={0x101, 0x31b, 0x4cb3, 0x9, 0x0, 0x7fffffffffffffff, 0x8000000000000001, 0x5, 0x80000000}) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "ed426d436179868323920a5adc54a31b3a64a11b7374298d6245e8c488f527db189552c04e929ebde52f12a660c99a8d8493c5dca674a46be2fb61d699aee7af", 0x39}, 0x48, r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000000)) keyctl$read(0xb, r2, &(0x7f0000000140)=""/4, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x2808080, &(0x7f0000000000), 0x2c, 0x541, &(0x7f0000000c80)="$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") r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r3) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="4f7bbb6c", @ANYRES16=r5, @ANYBLOB="000126bd7000fedbdf250800000006001a004e24000008001700", @ANYRES32=r3, @ANYBLOB="0500210001000000050005000000000008000c000200000005001400010000000c000f00000000001e00000006000e0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x40048c1) mount$9p_rdma(&(0x7f0000000580), &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,rq=0x00']) lsetxattr$security_capability(&(0x7f0000000740)='./cgroup\x00', &(0x7f00000002c0), &(0x7f0000000c00)=@v3={0x3000000, [{0x6, 0xfffffffb}, {0x401, 0x800}]}, 0x18, 0x2) getresuid(&(0x7f0000000380), &(0x7f00000004c0), &(0x7f0000000500)) 426.540581ms ago: executing program 2 (id=1350): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 307.808757ms ago: executing program 0 (id=1351): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd4}], 0x1}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8aef}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xfe}, [@RTA_DPORT={0x6}, @RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r8}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 277.779238ms ago: executing program 1 (id=1352): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xac5}, 0x18) write$selinux_access(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="7301fbfb785bc2924a773f269158de1c38288f9aa1e21b709f5659d39b8c0a5b115ab24f9ac5db223a4cdb1ed90c865f2c5829dc0d337c97750d3589b1629ea83cce4ea97d341d07a1b87f155d63a2e5487c9fd65f5bc08febd3883eec7e6a120ab599338939731d1ff60c1dda41e8924ff30dfa4dc51af2838a6da653f69c53fdfc8f5e47d2ef4e1c2f80e4dc4ccc41c6bcc22ccc9f430a25c6d0516edf08e8281f7e07a774a521e0adff132e6726dd21d744bd42a46f510f1cda2241ce469744cc9882155f55d4a5"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078cf75009675f3aede8176ac1e0001640101020304907812fe183f2500000000680000000100027f0000017f000001"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r13}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='xen_mmu_flush_tlb_multi\x00', r9}, 0x39) 198.001292ms ago: executing program 1 (id=1353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x9c0}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) unshare(0x2c020400) msgget$private(0x0, 0x0) (async) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) fcntl$setown(r6, 0x8, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) (async) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000580)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f02f15d3830ed037115ecd800ff000000000000000058000b4819ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400", 0x58}], 0x1) (async) writev(r8, &(0x7f0000000580)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f02f15d3830ed037115ecd800ff000000000000000058000b4819ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400", 0x58}], 0x1) 147.165733ms ago: executing program 0 (id=1354): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 142.992174ms ago: executing program 2 (id=1355): r0 = syz_clone(0x0, &(0x7f00000001c0)="67183dcafc03fa7e67ac00a32dc791874c995b23ea0c87add9d4be65f1927ede8f5f68461d15dde14cba530a97a2b0dc0b5072e2613ef6cde2f91b1ee9d180f375b56cedb7180ce776656fa660198e8769257db49c229a71847da60296e309e8b7222fbfd09b23a8135d4e6b127213977e33250edf4afeccff1b33023e0bb359c023947b3028fe2bd82119d8dba2e771", 0x90, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000980)="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") capset(&(0x7f00000002c0)={0x20080522, r0}, &(0x7f0000000300)={0x8, 0x719, 0x9, 0x8, 0xf7, 0xe5f}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x5}}, &(0x7f0000000180), 0x1600) 126.075475ms ago: executing program 0 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 92.912326ms ago: executing program 2 (id=1357): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x12, 0x16, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "03cf335263bd9bffbcc2542ded710382591e14ef3dc177e9b48b0000001600", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0xc, 0x7fffffffffffffff]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x83, &(0x7f00000043c0)={'broute\x00', 0x0, 0x0, 0x30, [], 0x0, 0x0, 0xffefff1f00000000}, &(0x7f00000001c0)=0xa8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 90.637516ms ago: executing program 0 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c00050004000002000002000800010003000000050002000300000005000200080000"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='ext4_free_blocks\x00', r1}, 0x18) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 799.64µs ago: executing program 0 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a000000ed7f0000040000002704000002080100", @ANYRES32, @ANYBLOB="0600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000400"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=r7, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000004c0)='mem_return_failed\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0xc040ff0b, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000440)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r13, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r13) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d6f64653d30783030303030303030303030303030303700626c6f636b3d3078303030303030103030303030306130302c686964652c73657373696f6e3d3078303030303030303030303030303036322c6e6f6a6f6c69657441626c6f636b3d3078303030303030303030303030303030302c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c00"], 0xfa, 0x69f, &(0x7f0000000840)="$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") 0s ago: executing program 0 (id=1360): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x824c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x522, 0x10000, 0x33f8, 0x6, 0x8, 0x20007, 0xb, 0x0, 0xfffffffd, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r4, 0x9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) kernel console output (not intermixed with test programs): h could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.992803][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.020429][ T3325] hsr_slave_0: entered promiscuous mode [ 38.026678][ T3325] hsr_slave_1: entered promiscuous mode [ 38.033053][ T3323] team0: Port device team_slave_1 added [ 38.063667][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.074044][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.093861][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.100874][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.127032][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.144726][ T3319] hsr_slave_0: entered promiscuous mode [ 38.153890][ T3319] hsr_slave_1: entered promiscuous mode [ 38.159800][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.165531][ T3319] Cannot create hsr debugfs directory [ 38.182250][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.189253][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.215390][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.239478][ T3324] team0: Port device team_slave_0 added [ 38.246032][ T3324] team0: Port device team_slave_1 added [ 38.259346][ T3320] hsr_slave_0: entered promiscuous mode [ 38.265340][ T3320] hsr_slave_1: entered promiscuous mode [ 38.271231][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.276972][ T3320] Cannot create hsr debugfs directory [ 38.315888][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.322885][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.348930][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.384333][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.391417][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.417365][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.434698][ T3323] hsr_slave_0: entered promiscuous mode [ 38.441052][ T3323] hsr_slave_1: entered promiscuous mode [ 38.446890][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 38.452607][ T3323] Cannot create hsr debugfs directory [ 38.536396][ T3324] hsr_slave_0: entered promiscuous mode [ 38.542369][ T3324] hsr_slave_1: entered promiscuous mode [ 38.548483][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 38.554209][ T3324] Cannot create hsr debugfs directory [ 38.640071][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.650806][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.663816][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.677420][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.709805][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.718695][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.730580][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.740862][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.765529][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.775254][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.787778][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.800810][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.835790][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.845932][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.855975][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.870695][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.911595][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.921114][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.930196][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.940507][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.967829][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.978290][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.003355][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.017917][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.025062][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.035206][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.056042][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.063158][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.073044][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.080158][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.091202][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.111488][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.118634][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.131620][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.140725][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.162016][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.169131][ T1721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.185621][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.192719][ T1721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.205041][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.220123][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.227261][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.252727][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.259833][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.278242][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.290217][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.315362][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.322502][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.334336][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.341429][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.400529][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.413385][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.483539][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.514755][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.571232][ T3319] veth0_vlan: entered promiscuous mode [ 39.592425][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.610919][ T3319] veth1_vlan: entered promiscuous mode [ 39.647387][ T3319] veth0_macvtap: entered promiscuous mode [ 39.671089][ T3319] veth1_macvtap: entered promiscuous mode [ 39.683418][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.698125][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.722002][ T3325] veth0_vlan: entered promiscuous mode [ 39.739123][ T1857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.749890][ T3324] veth0_vlan: entered promiscuous mode [ 39.755502][ T1857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.768883][ T3325] veth1_vlan: entered promiscuous mode [ 39.775098][ T1857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.786256][ T1857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.801645][ T3320] veth0_vlan: entered promiscuous mode [ 39.813198][ T3324] veth1_vlan: entered promiscuous mode [ 39.825000][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.825016][ T29] audit: type=1400 audit(1764721071.533:81): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.oo9DT4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.832553][ T3323] veth0_vlan: entered promiscuous mode [ 39.861798][ T29] audit: type=1400 audit(1764721071.533:82): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.883831][ T29] audit: type=1400 audit(1764721071.533:83): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.oo9DT4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.890635][ T3324] veth0_macvtap: entered promiscuous mode [ 39.914849][ T29] audit: type=1400 audit(1764721071.573:84): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.936728][ T29] audit: type=1400 audit(1764721071.573:85): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.oo9DT4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.963280][ T29] audit: type=1400 audit(1764721071.573:86): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.oo9DT4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.974188][ T3323] veth1_vlan: entered promiscuous mode [ 39.990754][ T29] audit: type=1400 audit(1764721071.573:87): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.003260][ T3320] veth1_vlan: entered promiscuous mode [ 40.021317][ T29] audit: type=1400 audit(1764721071.623:88): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.044153][ T29] audit: type=1400 audit(1764721071.623:89): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=4489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.047760][ T3325] veth0_macvtap: entered promiscuous mode [ 40.076196][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.095761][ T3325] veth1_macvtap: entered promiscuous mode [ 40.102987][ T3324] veth1_macvtap: entered promiscuous mode [ 40.119370][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.126745][ T29] audit: type=1400 audit(1764721071.833:90): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.144768][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.172143][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.182097][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.192634][ T3320] veth0_macvtap: entered promiscuous mode [ 40.204459][ T1895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.217171][ T1895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.233289][ T3320] veth1_macvtap: entered promiscuous mode [ 40.255925][ T3323] veth0_macvtap: entered promiscuous mode [ 40.264549][ T1895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.284726][ T3323] veth1_macvtap: entered promiscuous mode [ 40.297101][ T1895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.310959][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.318296][ T1895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.332387][ T1895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.343962][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.355700][ T1721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.370871][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.387344][ T1721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.405239][ T1721] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.415781][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.428134][ T3502] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 40.433079][ T1721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.447574][ T3504] loop2: detected capacity change from 0 to 512 [ 40.483468][ T1721] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.486699][ T3504] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3: iget: bad extra_isize 90 (inode size 256) [ 40.492504][ T1721] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.510540][ T3504] EXT4-fs (loop2): Remounting filesystem read-only [ 40.514618][ T1721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.530016][ T1721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.531845][ T3504] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.538780][ T1721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.551778][ T3504] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 40.576147][ T1721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.579802][ T3504] EXT4-fs (loop2): 1 orphan inode deleted [ 40.613076][ T3512] loop4: detected capacity change from 0 to 128 [ 40.628829][ T3504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.828216][ T3504] syz.2.3 (3504) used greatest stack depth: 10600 bytes left [ 40.864647][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.745524][ T3548] 9pnet_fd: Insufficient options for proto=fd [ 41.812128][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 41.891432][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 41.900740][ T3562] Zero length message leads to an empty skb [ 41.912497][ T3556] loop3: detected capacity change from 0 to 8192 [ 42.058065][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 42.075059][ T3574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 42.089544][ T3574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 42.154979][ T3577] loop2: detected capacity change from 0 to 512 [ 42.162694][ T3572] loop3: detected capacity change from 0 to 512 [ 42.171063][ T3572] EXT4-fs: dax option not supported [ 42.178889][ T3577] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.23: iget: bad extra_isize 90 (inode size 256) [ 42.197501][ T3577] EXT4-fs (loop2): Remounting filesystem read-only [ 42.209666][ T3577] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 42.220149][ T3577] EXT4-fs (loop2): 1 orphan inode deleted [ 42.228375][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.279972][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.324538][ T3586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 42.340142][ T3586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27'. [ 42.363622][ T3589] netlink: 664 bytes leftover after parsing attributes in process `syz.3.28'. [ 42.774317][ T3602] loop0: detected capacity change from 0 to 8192 [ 42.987234][ T3612] loop1: detected capacity change from 0 to 512 [ 43.000469][ T3612] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.36: iget: bad extra_isize 90 (inode size 256) [ 43.017601][ T3612] EXT4-fs (loop1): Remounting filesystem read-only [ 43.039465][ T3612] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 43.116607][ T3612] EXT4-fs (loop1): 1 orphan inode deleted [ 43.122996][ T3612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.167782][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.372484][ T3619] loop1: detected capacity change from 0 to 512 [ 43.469600][ T3624] netlink: 'syz.4.40': attribute type 10 has an invalid length. [ 43.487747][ T3619] EXT4-fs: Ignoring removed oldalloc option [ 43.504432][ T3626] loop0: detected capacity change from 0 to 512 [ 43.505666][ T3624] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 43.520829][ T3626] journal_path: Non-blockdev passed as './bus' [ 43.522691][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.527180][ T3626] EXT4-fs: error: could not find journal device path [ 43.539923][ T3619] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.618208][ T3619] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.39: bg 0: block 217: padding at end of block bitmap is not set [ 43.707200][ T3619] EXT4-fs (loop1): Remounting filesystem read-only [ 43.739710][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.840003][ T3636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.861794][ T3640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 43.879554][ T3640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 43.886621][ T3636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.744113][ T3657] loop4: detected capacity change from 0 to 512 [ 44.778141][ T3657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.834315][ T3661] loop0: detected capacity change from 0 to 512 [ 44.849573][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.856816][ T3661] EXT4-fs: Ignoring removed i_version option [ 44.868599][ T3661] EXT4-fs: Ignoring removed bh option [ 44.876781][ T3657] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.912229][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 44.912244][ T29] audit: type=1400 audit(1764721076.623:359): avc: denied { write open } for pid=3656 comm="syz.4.51" path="/12/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.951763][ T3661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.974876][ T29] audit: type=1400 audit(1764721076.683:360): avc: denied { ioctl } for pid=3656 comm="syz.4.51" path="/12/bus/bus" dev="loop4" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.006385][ T3661] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.016461][ T29] audit: type=1400 audit(1764721076.683:361): avc: denied { read append } for pid=3656 comm="syz.4.51" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.039321][ T29] audit: type=1400 audit(1764721076.683:362): avc: denied { open } for pid=3656 comm="syz.4.51" path="/12/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.061936][ T29] audit: type=1400 audit(1764721076.683:363): avc: denied { write } for pid=3656 comm="syz.4.51" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.083860][ T29] audit: type=1400 audit(1764721076.693:364): avc: denied { create } for pid=3656 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.103194][ T29] audit: type=1400 audit(1764721076.693:365): avc: denied { ioctl } for pid=3656 comm="syz.4.51" path="socket:[5008]" dev="sockfs" ino=5008 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.153992][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.170941][ T3672] loop1: detected capacity change from 0 to 512 [ 45.178052][ T3672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.178909][ T3673] FAULT_INJECTION: forcing a failure. [ 45.178909][ T3673] name failslab, interval 1, probability 0, space 0, times 1 [ 45.191188][ T3672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.193012][ T29] audit: type=1326 audit(1764721076.883:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 45.204124][ T3673] CPU: 0 UID: 0 PID: 3673 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.204156][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.204184][ T3673] Call Trace: [ 45.204191][ T3673] [ 45.204200][ T3673] __dump_stack+0x1d/0x30 [ 45.204320][ T3673] dump_stack_lvl+0xe8/0x140 [ 45.204349][ T3673] dump_stack+0x15/0x1b [ 45.204374][ T3673] should_fail_ex+0x265/0x280 [ 45.204454][ T3673] ? audit_log_d_path+0x8d/0x150 [ 45.204493][ T3673] should_failslab+0x8c/0xb0 [ 45.204599][ T3673] __kmalloc_cache_noprof+0x4c/0x4a0 [ 45.204634][ T3673] audit_log_d_path+0x8d/0x150 [ 45.204735][ T3673] audit_log_d_path_exe+0x42/0x70 [ 45.204774][ T3673] audit_log_task+0x1e9/0x250 [ 45.204808][ T3673] ? kstrtouint+0x76/0xc0 [ 45.204851][ T3673] audit_seccomp+0x61/0x100 [ 45.204881][ T3673] ? __seccomp_filter+0x82d/0x1250 [ 45.204952][ T3673] __seccomp_filter+0x83e/0x1250 [ 45.204980][ T3673] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.205017][ T3673] ? vfs_write+0x7e8/0x960 [ 45.205055][ T3673] ? bpf_get_current_uid_gid+0x7a/0xa0 [ 45.205089][ T3673] ? __rcu_read_unlock+0x4f/0x70 [ 45.205131][ T3673] ? __fget_files+0x184/0x1c0 [ 45.205161][ T3673] __secure_computing+0x82/0x150 [ 45.205241][ T3673] syscall_trace_enter+0xcf/0x1e0 [ 45.205289][ T3673] do_syscall_64+0xb2/0x2a0 [ 45.205369][ T3673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.205410][ T3673] RIP: 0033:0x7f60eaddf749 [ 45.205432][ T3673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.205457][ T3673] RSP: 002b:00007f60e981e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 45.205488][ T3673] RAX: ffffffffffffffda RBX: 00007f60eb036090 RCX: 00007f60eaddf749 [ 45.205562][ T3673] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000200000b2c000 [ 45.205579][ T3673] RBP: 00007f60e981e090 R08: 0000000000000000 R09: 0000000000000000 [ 45.205596][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.205611][ T3673] R13: 00007f60eb036128 R14: 00007f60eb036090 R15: 00007fffbd828418 [ 45.205637][ T3673] [ 45.367897][ T3672] EXT4-fs error (device loop1): __ext4_iget:5439: inode #11: block 2: comm syz.1.56: invalid block [ 45.369996][ T29] audit: type=1326 audit(1764721076.883:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 45.376217][ T3672] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.56: couldn't read orphan inode 11 (err -117) [ 45.380337][ T29] audit: type=1326 audit(1764721076.883:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 45.400929][ T3672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.546058][ T3672] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.555202][ T3672] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.593586][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.688471][ T3683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=3683 comm=syz.4.60 [ 45.726779][ T3683] netem: change failed [ 45.797263][ T3687] loop4: detected capacity change from 0 to 512 [ 45.821852][ T3687] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.62: iget: bad extra_isize 90 (inode size 256) [ 45.896776][ T3687] EXT4-fs (loop4): Remounting filesystem read-only [ 45.903355][ T3687] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 45.996936][ T3687] EXT4-fs (loop4): 1 orphan inode deleted [ 46.003292][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.069358][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.857874][ T3714] __nla_validate_parse: 6 callbacks suppressed [ 46.857966][ T3714] netlink: 14 bytes leftover after parsing attributes in process `syz.1.74'. [ 46.881137][ T3714] hsr_slave_0: left promiscuous mode [ 46.906513][ T3714] hsr_slave_1: left promiscuous mode [ 46.921958][ T3711] SELinux: failed to load policy [ 47.006332][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 47.006634][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 47.125919][ T3731] loop3: detected capacity change from 0 to 512 [ 47.159150][ T3731] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.80: iget: bad extra_isize 90 (inode size 256) [ 47.173146][ T3731] EXT4-fs (loop3): Remounting filesystem read-only [ 47.180272][ T3731] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 47.190805][ T3731] EXT4-fs (loop3): 1 orphan inode deleted [ 47.197069][ T3731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.220379][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 47.229815][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.237739][ T3739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 47.354795][ T3750] loop2: detected capacity change from 0 to 512 [ 47.388174][ T3750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.401226][ T3750] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.422721][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.478382][ T3764] FAULT_INJECTION: forcing a failure. [ 47.478382][ T3764] name failslab, interval 1, probability 0, space 0, times 0 [ 47.491169][ T3764] CPU: 1 UID: 0 PID: 3764 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.491203][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.491214][ T3764] Call Trace: [ 47.491226][ T3764] [ 47.491233][ T3764] __dump_stack+0x1d/0x30 [ 47.491253][ T3764] dump_stack_lvl+0xe8/0x140 [ 47.491271][ T3764] dump_stack+0x15/0x1b [ 47.491286][ T3764] should_fail_ex+0x265/0x280 [ 47.491312][ T3764] should_failslab+0x8c/0xb0 [ 47.491330][ T3764] kmem_cache_alloc_noprof+0x50/0x480 [ 47.491348][ T3764] ? vm_area_alloc+0x2c/0xb0 [ 47.491370][ T3764] vm_area_alloc+0x2c/0xb0 [ 47.491389][ T3764] mmap_region+0xa99/0x15f0 [ 47.491426][ T3764] do_mmap+0x9b3/0xbe0 [ 47.491451][ T3764] aio_setup_ring+0x504/0x760 [ 47.491476][ T3764] ioctx_alloc+0x2b6/0x4d0 [ 47.491498][ T3764] __se_sys_io_setup+0x6b/0x1b0 [ 47.491518][ T3764] __x64_sys_io_setup+0x31/0x40 [ 47.491536][ T3764] x64_sys_call+0x2a8e/0x3000 [ 47.491555][ T3764] do_syscall_64+0xd8/0x2a0 [ 47.491581][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.491598][ T3764] RIP: 0033:0x7f22a1bcf749 [ 47.491611][ T3764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.491626][ T3764] RSP: 002b:00007f22a0637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 47.491643][ T3764] RAX: ffffffffffffffda RBX: 00007f22a1e25fa0 RCX: 00007f22a1bcf749 [ 47.491654][ T3764] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 47.491664][ T3764] RBP: 00007f22a0637090 R08: 0000000000000000 R09: 0000000000000000 [ 47.491675][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.491685][ T3764] R13: 00007f22a1e26038 R14: 00007f22a1e25fa0 R15: 00007ffdc9f69d98 [ 47.491701][ T3764] [ 47.696294][ T3766] loop2: detected capacity change from 0 to 512 [ 47.707177][ T3766] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.94: iget: bad extra_isize 90 (inode size 256) [ 47.720939][ T3766] EXT4-fs (loop2): Remounting filesystem read-only [ 47.727853][ T3766] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 47.738107][ T3766] EXT4-fs (loop2): 1 orphan inode deleted [ 47.744240][ T3766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.766983][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.809571][ T3772] loop2: detected capacity change from 0 to 512 [ 47.822438][ T3772] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.96: iget: bad extra_isize 90 (inode size 256) [ 47.838400][ T3772] EXT4-fs (loop2): Remounting filesystem read-only [ 47.847273][ T3772] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 47.857559][ T3772] EXT4-fs (loop2): 1 orphan inode deleted [ 47.864778][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.883809][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 47.885464][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.894878][ T3775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 47.918246][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.958644][ T3780] FAULT_INJECTION: forcing a failure. [ 47.958644][ T3780] name failslab, interval 1, probability 0, space 0, times 0 [ 47.971337][ T3780] CPU: 1 UID: 0 PID: 3780 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.971401][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.971416][ T3780] Call Trace: [ 47.971424][ T3780] [ 47.971433][ T3780] __dump_stack+0x1d/0x30 [ 47.971459][ T3780] dump_stack_lvl+0xe8/0x140 [ 47.971484][ T3780] dump_stack+0x15/0x1b [ 47.971506][ T3780] should_fail_ex+0x265/0x280 [ 47.971577][ T3780] should_failslab+0x8c/0xb0 [ 47.971600][ T3780] kmem_cache_alloc_noprof+0x50/0x480 [ 47.971701][ T3780] ? security_file_alloc+0x32/0x100 [ 47.971731][ T3780] security_file_alloc+0x32/0x100 [ 47.971757][ T3780] init_file+0x5c/0x1c0 [ 47.971804][ T3780] alloc_empty_file+0x8b/0x200 [ 47.971877][ T3780] path_openat+0x63/0x23b0 [ 47.971916][ T3780] ? try_charge_memcg+0x215/0xa10 [ 47.972048][ T3780] ? css_rstat_updated+0xb7/0x240 [ 47.972091][ T3780] ? css_rstat_updated+0xb7/0x240 [ 47.972123][ T3780] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 47.972200][ T3780] ? css_rstat_updated+0xb7/0x240 [ 47.972227][ T3780] do_filp_open+0x109/0x230 [ 47.972270][ T3780] do_sys_openat2+0xa6/0x150 [ 47.972306][ T3780] __x64_sys_openat+0xf2/0x120 [ 47.972359][ T3780] x64_sys_call+0x2b07/0x3000 [ 47.972387][ T3780] do_syscall_64+0xd8/0x2a0 [ 47.972421][ T3780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.972491][ T3780] RIP: 0033:0x7f22a1bcdf90 [ 47.972507][ T3780] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 47.972524][ T3780] RSP: 002b:00007f22a0634ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 47.972545][ T3780] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f22a1bcdf90 [ 47.972561][ T3780] RDX: 0000000000000002 RSI: 00007f22a1c53c6c RDI: 00000000ffffff9c [ 47.972612][ T3780] RBP: 00007f22a1c53c6c R08: 0000000000000000 R09: 0000000000000000 [ 47.972626][ T3780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 47.972638][ T3780] R13: 000000000000003f R14: 0000200000000400 R15: 00007ffdc9f69d98 [ 47.972656][ T3780] [ 47.973095][ T3781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=3781 comm=syz.0.98 [ 48.043888][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 48.132567][ T3792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'. [ 48.157601][ T3781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 48.221157][ T3781] netem: change failed [ 48.334152][ T3807] loop1: detected capacity change from 0 to 128 [ 48.535071][ T3836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=3836 comm=syz.1.122 [ 48.578651][ T3836] netem: change failed [ 48.648143][ T3844] 9pnet_fd: Insufficient options for proto=fd [ 50.517564][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 50.517582][ T29] audit: type=1326 audit(1764721338.236:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.625571][ T29] audit: type=1326 audit(1764721338.336:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.649000][ T29] audit: type=1326 audit(1764721338.336:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.683189][ T29] audit: type=1326 audit(1764721338.386:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.706621][ T29] audit: type=1326 audit(1764721338.386:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.729914][ T29] audit: type=1326 audit(1764721338.386:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.753271][ T29] audit: type=1326 audit(1764721338.386:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.776633][ T29] audit: type=1326 audit(1764721338.386:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.800066][ T29] audit: type=1326 audit(1764721338.386:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.823457][ T29] audit: type=1326 audit(1764721338.386:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 50.910980][ T3913] unsupported nla_type 52263 [ 50.972660][ T3923] loop1: detected capacity change from 0 to 512 [ 50.993981][ T3923] journal_path: Non-blockdev passed as './file0' [ 51.000436][ T3923] EXT4-fs: error: could not find journal device path [ 51.227184][ T3934] syz.3.158 uses obsolete (PF_INET,SOCK_PACKET) [ 51.478694][ T3951] loop0: detected capacity change from 0 to 512 [ 51.491006][ T3951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.499916][ T3951] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.519469][ T3951] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.165: Allocating blocks 41-42 which overlap fs metadata [ 51.546619][ T3951] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.165: Allocating blocks 41-42 which overlap fs metadata [ 51.561049][ T3951] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.165: Failed to acquire dquot type 1 [ 51.573055][ T3951] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.661155][ T3951] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #12: comm syz.0.165: corrupted inode contents [ 51.710746][ T3961] tipc: Started in network mode [ 51.716071][ T3961] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 51.726108][ T3951] EXT4-fs error (device loop0): ext4_dirty_inode:6513: inode #12: comm syz.0.165: mark_inode_dirty error [ 51.738567][ T3951] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #12: comm syz.0.165: corrupted inode contents [ 51.751238][ T3961] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 51.759521][ T3961] tipc: Enabled bearer , priority 10 [ 51.766460][ T3951] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.165: mark_inode_dirty error [ 51.781259][ T3951] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #12: comm syz.0.165: corrupted inode contents [ 51.858676][ T3951] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 51.878963][ T3951] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #12: comm syz.0.165: corrupted inode contents [ 51.899160][ T3951] EXT4-fs error (device loop0): ext4_truncate:4633: inode #12: comm syz.0.165: mark_inode_dirty error [ 51.910863][ T3951] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 51.921690][ T3951] EXT4-fs (loop0): 1 truncate cleaned up [ 51.929731][ T3951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.153108][ T3951] syz.0.165 (3951) used greatest stack depth: 9952 bytes left [ 52.172936][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.209965][ T3979] __nla_validate_parse: 10 callbacks suppressed [ 52.209981][ T3979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'. [ 52.368230][ T3996] loop3: detected capacity change from 0 to 128 [ 52.393278][ T3996] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.413340][ T3996] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.476848][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 52.663178][ T4013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4013 comm=syz.1.187 [ 52.679083][ T4012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 52.689649][ T4012] netem: change failed [ 52.776545][ T9] tipc: Node number set to 1 [ 52.820465][ T4021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25170 sclass=netlink_route_socket pid=4021 comm=syz.1.191 [ 52.841433][ T4021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4021 comm=syz.1.191 [ 52.903925][ T4033] netlink: 104 bytes leftover after parsing attributes in process `syz.4.194'. [ 52.946386][ T4037] sctp: [Deprecated]: syz.4.196 (pid 4037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 52.946386][ T4037] Use struct sctp_sack_info instead [ 53.075210][ T4051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4051 comm=syz.1.202 [ 53.091205][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 53.100604][ T4051] netem: change failed [ 53.213159][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.227953][ T4067] syz.0.206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.282385][ T4071] netlink: 104 bytes leftover after parsing attributes in process `syz.3.207'. [ 53.409822][ T4087] loop0: detected capacity change from 0 to 128 [ 53.420900][ T4087] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.451855][ T4087] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.967931][ T4112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.224'. [ 55.003219][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.259330][ T4136] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.329113][ T4146] netlink: 'syz.4.235': attribute type 13 has an invalid length. [ 55.389015][ T4146] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.396355][ T4146] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.401770][ T4154] mmap: syz.2.238 (4154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.448854][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.459828][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.520888][ T4153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.534740][ T1857] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.539146][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 55.544294][ T1857] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.561700][ T1857] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.571376][ T1857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.585031][ T4153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.690292][ T4153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.750123][ T4153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.885892][ T2420] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.924884][ T1895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.934023][ T1895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.983814][ T1895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.324294][ T4168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.242'. [ 56.345891][ T4171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 56.482180][ T29] kauditd_printk_skb: 987 callbacks suppressed [ 56.482194][ T29] audit: type=1326 audit(1764721344.196:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.540436][ T29] audit: type=1326 audit(1764721344.206:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.563941][ T29] audit: type=1326 audit(1764721344.226:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.587318][ T29] audit: type=1326 audit(1764721344.226:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.610661][ T29] audit: type=1326 audit(1764721344.226:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.633983][ T29] audit: type=1326 audit(1764721344.226:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.657349][ T29] audit: type=1326 audit(1764721344.226:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.680712][ T29] audit: type=1326 audit(1764721344.226:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.704129][ T29] audit: type=1326 audit(1764721344.226:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.727499][ T29] audit: type=1326 audit(1764721344.226:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 56.964132][ T4199] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 57.013175][ T4204] loop3: detected capacity change from 0 to 512 [ 57.020384][ T4204] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.029541][ T4204] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 57.039100][ T4204] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 57.048504][ T4204] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 57.057548][ T4204] System zones: 0-2, 18-18, 34-35 [ 57.063484][ T4204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.447529][ T4206] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 57.521433][ T4210] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660 [ 57.534736][ T4218] __nla_validate_parse: 4 callbacks suppressed [ 57.534753][ T4218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 57.951177][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 58.008250][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.127193][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 58.179518][ T4236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 58.231646][ T4240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4240 comm=syz.1.269 [ 58.257731][ T4240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 58.274711][ T4240] netem: change failed [ 58.317328][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 58.355190][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 58.382171][ T4251] loop0: detected capacity change from 0 to 128 [ 58.697718][ T4281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4281 comm=syz.1.285 [ 58.712590][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'. [ 58.721700][ T4281] netem: change failed [ 59.444749][ T4313] loop3: detected capacity change from 0 to 512 [ 59.453793][ T4315] netlink: 664 bytes leftover after parsing attributes in process `syz.0.298'. [ 59.465087][ T4313] ------------[ cut here ]------------ [ 59.470685][ T4313] EA inode 11 i_nlink=2 [ 59.470713][ T4313] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#0: syz.3.297/4313 [ 59.482475][ T4313] Modules linked in: [ 59.486434][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.3.297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.496091][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.506244][ T4313] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 59.512994][ T4313] Code: 21 67 9d ff 4c 8d 2d 4a 5d 21 05 49 8d 7e 40 e8 f1 a8 b8 ff 49 8b 6e 40 4c 89 e7 e8 05 a4 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 cc 4f b5 03 66 66 66 2e 0f 1f 84 [ 59.532687][ T4313] RSP: 0018:ffffc9000331f590 EFLAGS: 00010246 [ 59.538869][ T4313] RAX: ffff88810cd81b20 RBX: ffff88811b43b5c8 RCX: ffffffff81ba659b [ 59.546967][ T4313] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dbc2d0 [ 59.554956][ T4313] RBP: 000000000000000b R08: 000188811b43b57b R09: 0000000000000000 [ 59.562954][ T4313] R10: ffffc9000331f4c0 R11: 0001c9000331f4c0 R12: ffff88811b43b578 [ 59.571007][ T4313] R13: ffffffff86dbc2d0 R14: ffff88811b43b530 R15: 0000000000000001 [ 59.579022][ T4313] FS: 00007fed2423f6c0(0000) GS:ffff8882aedf4000(0000) knlGS:0000000000000000 [ 59.588019][ T4313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.594639][ T4313] CR2: 00007f7aec12e000 CR3: 000000011be7a000 CR4: 00000000003506f0 [ 59.602673][ T4313] Call Trace: [ 59.606069][ T4313] [ 59.609071][ T4313] ext4_xattr_set_entry+0x77f/0x1020 [ 59.614439][ T4313] ext4_xattr_ibody_set+0x184/0x3c0 [ 59.619725][ T4313] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 59.625615][ T4313] __ext4_expand_extra_isize+0x246/0x280 [ 59.631341][ T4313] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 59.636890][ T4313] ext4_evict_inode+0x7c4/0xd40 [ 59.641784][ T4313] ? __pfx_ext4_evict_inode+0x10/0x10 [ 59.647299][ T4313] evict+0x2af/0x510 [ 59.651333][ T4313] ? __dquot_initialize+0x146/0x7c0 [ 59.656585][ T4313] iput+0x4bd/0x650 [ 59.660518][ T4313] ext4_process_orphan+0x1a9/0x1c0 [ 59.665664][ T4313] ext4_orphan_cleanup+0x6a8/0xa00 [ 59.670851][ T4313] ext4_fill_super+0x3475/0x3800 [ 59.675828][ T4313] ? snprintf+0x86/0xb0 [ 59.680018][ T4313] ? set_blocksize+0x1a8/0x310 [ 59.684857][ T4313] ? sb_set_blocksize+0xfc/0x170 [ 59.689861][ T4313] ? setup_bdev_super+0x30e/0x370 [ 59.695018][ T4313] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.700447][ T4313] get_tree_bdev_flags+0x291/0x300 [ 59.705636][ T4313] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.710977][ T4313] get_tree_bdev+0x1f/0x30 [ 59.715420][ T4313] ext4_get_tree+0x1c/0x30 [ 59.719881][ T4313] vfs_get_tree+0x57/0x1d0 [ 59.724345][ T4313] do_new_mount+0x24d/0x6a0 [ 59.728955][ T4313] path_mount+0x4ab/0xb80 [ 59.733373][ T4313] ? user_path_at+0xbf/0x130 [ 59.738090][ T4313] __se_sys_mount+0x28c/0x2e0 [ 59.742846][ T4313] __x64_sys_mount+0x67/0x80 [ 59.747521][ T4313] x64_sys_call+0x2cca/0x3000 [ 59.752256][ T4313] do_syscall_64+0xd8/0x2a0 [ 59.756835][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.762749][ T4313] RIP: 0033:0x7fed257e0eea [ 59.767274][ T4313] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.787004][ T4313] RSP: 002b:00007fed2423ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.795558][ T4313] RAX: ffffffffffffffda RBX: 00007fed2423eef0 RCX: 00007fed257e0eea [ 59.803599][ T4313] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fed2423eeb0 [ 59.811631][ T4313] RBP: 0000200000000180 R08: 00007fed2423eef0 R09: 0000000000800700 [ 59.819675][ T4313] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 59.827701][ T4313] R13: 00007fed2423eeb0 R14: 000000000000046f R15: 000000000000002c [ 59.835700][ T4313] [ 59.838748][ T4313] ---[ end trace 0000000000000000 ]--- [ 59.844839][ T4313] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.297: iget: bad extra_isize 90 (inode size 256) [ 59.872795][ T4313] EXT4-fs (loop3): Remounting filesystem read-only [ 59.903300][ T4313] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 59.931560][ T4313] EXT4-fs (loop3): 1 orphan inode deleted [ 59.956922][ T4313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.067560][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.262558][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 60.665113][ T4409] lo speed is unknown, defaulting to 1000 [ 60.671122][ T4409] lo speed is unknown, defaulting to 1000 [ 60.677307][ T4409] lo speed is unknown, defaulting to 1000 [ 60.683602][ T4409] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.691495][ T4409] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.722179][ T4409] lo speed is unknown, defaulting to 1000 [ 60.736577][ T4409] lo speed is unknown, defaulting to 1000 [ 60.742843][ T4409] lo speed is unknown, defaulting to 1000 [ 60.749858][ T4409] lo speed is unknown, defaulting to 1000 [ 60.756024][ T4409] lo speed is unknown, defaulting to 1000 [ 61.027355][ T4434] lo speed is unknown, defaulting to 1000 [ 61.492278][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 61.492294][ T29] audit: type=1326 audit(1764721349.206:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.522407][ T29] audit: type=1326 audit(1764721349.226:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.545966][ T29] audit: type=1326 audit(1764721349.226:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.569324][ T29] audit: type=1326 audit(1764721349.226:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.592681][ T29] audit: type=1326 audit(1764721349.226:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.608437][ T4461] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.616070][ T29] audit: type=1326 audit(1764721349.226:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.689160][ T4461] netlink: 'syz.1.347': attribute type 12 has an invalid length. [ 61.740255][ T29] audit: type=1326 audit(1764721349.286:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.763688][ T29] audit: type=1326 audit(1764721349.286:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.787117][ T29] audit: type=1326 audit(1764721349.286:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 61.810564][ T29] audit: type=1326 audit(1764721349.286:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 62.042900][ T4488] loop3: detected capacity change from 0 to 1024 [ 62.067557][ T4490] IPv6: Can't replace route, no match found [ 62.119620][ T4488] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 62.129518][ T4488] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 62.919247][ T4498] lo speed is unknown, defaulting to 1000 [ 62.966832][ T4488] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.053691][ T4488] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #5: comm syz.3.358: unexpected bad inode w/o EXT4_IGET_BAD [ 63.128948][ T4488] EXT4-fs (loop3): no journal found [ 63.134238][ T4488] EXT4-fs (loop3): can't get journal size [ 63.246291][ T4503] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 63.271025][ T4488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.288113][ T4503] __nla_validate_parse: 9 callbacks suppressed [ 63.288132][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 63.333856][ T4508] loop0: detected capacity change from 0 to 128 [ 63.357042][ T4488] lo speed is unknown, defaulting to 1000 [ 63.480413][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.551529][ T4523] loop3: detected capacity change from 0 to 1024 [ 63.575917][ T4523] ======================================================= [ 63.575917][ T4523] WARNING: The mand mount option has been deprecated and [ 63.575917][ T4523] and is ignored by this kernel. Remove the mand [ 63.575917][ T4523] option from the mount to silence this warning. [ 63.575917][ T4523] ======================================================= [ 63.698888][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.880372][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.291691][ T4557] syz.0.378 (4557) used greatest stack depth: 9744 bytes left [ 64.317096][ T4563] loop0: detected capacity change from 0 to 128 [ 64.327356][ T4563] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 64.341706][ T4563] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.817555][ T4580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 64.826543][ T4580] netem: change failed [ 64.863830][ T4582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4582 comm=syz.2.387 [ 64.879339][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 64.888475][ T4582] netem: change failed [ 65.156842][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.233502][ T4607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 65.242828][ T4607] netem: change failed [ 65.362655][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 65.382320][ T4612] loop0: detected capacity change from 0 to 512 [ 65.390889][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 65.411966][ T4612] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.412960][ T4614] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 65.440593][ T4612] EXT4-fs (loop0): mount failed [ 65.499679][ T4614] lo speed is unknown, defaulting to 1000 [ 65.612112][ T4629] bridge0: entered promiscuous mode [ 65.619164][ T4629] bridge0: port 3(macsec1) entered blocking state [ 65.625654][ T4629] bridge0: port 3(macsec1) entered disabled state [ 65.632199][ T4629] macsec1: entered allmulticast mode [ 65.637558][ T4629] bridge0: entered allmulticast mode [ 65.643339][ T4629] macsec1: left allmulticast mode [ 65.648425][ T4629] bridge0: left allmulticast mode [ 65.653970][ T4629] bridge0: left promiscuous mode [ 65.677061][ T4614] lo speed is unknown, defaulting to 1000 [ 65.701457][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 65.710397][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 66.150992][ T4644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 66.201808][ T4648] lo speed is unknown, defaulting to 1000 [ 66.617899][ T4656] lo speed is unknown, defaulting to 1000 [ 66.676224][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 66.676242][ T29] audit: type=1326 audit(1764721354.386:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 66.873483][ T29] audit: type=1326 audit(1764721354.426:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 66.896922][ T29] audit: type=1326 audit(1764721354.426:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 66.920254][ T29] audit: type=1326 audit(1764721354.426:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 66.943601][ T29] audit: type=1326 audit(1764721354.426:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 66.966954][ T29] audit: type=1326 audit(1764721354.426:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 66.990361][ T29] audit: type=1326 audit(1764721354.476:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 67.013682][ T29] audit: type=1326 audit(1764721354.476:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 67.037400][ T29] audit: type=1326 audit(1764721354.476:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 67.060854][ T29] audit: type=1326 audit(1764721354.476:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 67.224163][ T4675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 67.241684][ T4676] ------------[ cut here ]------------ [ 67.247385][ T4676] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 67.265274][ T4676] WARNING: kernel/bpf/verifier.c:2721 at 0x0, CPU#1: syz.2.417/4676 [ 67.273421][ T4676] Modules linked in: [ 67.277566][ T4676] CPU: 1 UID: 0 PID: 4676 Comm: syz.2.417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.288924][ T4676] Tainted: [W]=WARN [ 67.292803][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.303130][ T4676] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 67.309585][ T4676] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 06 [ 67.329401][ T4676] RSP: 0018:ffffc9000150f3a8 EFLAGS: 00010246 [ 67.335498][ T4676] RAX: ffff88811c801b20 RBX: 0000000000000000 RCX: 0000000004000000 [ 67.335538][ T4680] loop0: detected capacity change from 0 to 128 [ 67.349931][ T4676] RDX: ffffffff865e3fad RSI: ffffffff865b8be8 RDI: ffffffff86db2200 [ 67.358003][ T4676] RBP: ffff888109c0bae0 R08: 0000000000000000 R09: 0000000004000000 [ 67.365998][ T4676] R10: 00000000000000d0 R11: 0000000000000000 R12: ffff888109c0baa0 [ 67.374030][ T4676] R13: 0000000000000000 R14: ffff888109c0baec R15: ffff888109c0bad8 [ 67.382171][ T4676] FS: 00007f22a05f56c0(0000) GS:ffff8882aeef4000(0000) knlGS:0000000000000000 [ 67.391168][ T4676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.397800][ T4676] CR2: 00007f22a05f4f98 CR3: 000000011bbc6000 CR4: 00000000003506f0 [ 67.405800][ T4676] Call Trace: [ 67.409126][ T4676] [ 67.412102][ T4676] reg_set_min_max+0x215/0x260 [ 67.417106][ T4676] check_cond_jmp_op+0x130d/0x19e0 [ 67.422648][ T4676] do_check+0x3314/0x80e0 [ 67.427218][ T4676] do_check_common+0xc42/0x1280 [ 67.432106][ T4676] bpf_check+0xaa74/0xd5f0 [ 67.436609][ T4676] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 67.442623][ T4676] ? _find_next_zero_bit+0x64/0xa0 [ 67.447877][ T4676] ? pcpu_block_update+0x232/0x3b0 [ 67.453072][ T4676] ? pcpu_block_refresh_hint+0x157/0x170 [ 67.458810][ T4676] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 67.465008][ T4676] ? css_rstat_updated+0xb7/0x240 [ 67.470151][ T4676] ? __rcu_read_unlock+0x4f/0x70 [ 67.475198][ T4676] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 67.481115][ T4676] ? bpf_prog_alloc+0x5b/0x150 [ 67.485987][ T4676] ? pcpu_alloc_noprof+0xd29/0x1250 [ 67.491433][ T4676] ? should_fail_ex+0x30/0x280 [ 67.496252][ T4676] ? should_failslab+0x8c/0xb0 [ 67.501056][ T4676] ? __kmalloc_noprof+0x2a2/0x570 [ 67.506289][ T4676] ? security_bpf_prog_load+0x60/0x140 [ 67.511826][ T4676] ? selinux_bpf_prog_load+0xad/0xd0 [ 67.517266][ T4676] ? security_bpf_prog_load+0x9e/0x140 [ 67.522735][ T4676] bpf_prog_load+0xf6e/0x1100 [ 67.527525][ T4676] ? security_bpf+0x2b/0x90 [ 67.532167][ T4676] __sys_bpf+0x469/0x7c0 [ 67.536465][ T4676] __x64_sys_bpf+0x41/0x50 [ 67.540903][ T4676] x64_sys_call+0x28e1/0x3000 [ 67.545586][ T4676] do_syscall_64+0xd8/0x2a0 [ 67.550254][ T4676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.556171][ T4676] RIP: 0033:0x7f22a1bcf749 [ 67.560610][ T4676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.580271][ T4676] RSP: 002b:00007f22a05f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.588770][ T4676] RAX: ffffffffffffffda RBX: 00007f22a1e26180 RCX: 00007f22a1bcf749 [ 67.596810][ T4676] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 67.604825][ T4676] RBP: 00007f22a1c53f91 R08: 0000000000000000 R09: 0000000000000000 [ 67.612831][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.620909][ T4676] R13: 00007f22a1e26218 R14: 00007f22a1e26180 R15: 00007ffdc9f69d98 [ 67.628921][ T4676] [ 67.631946][ T4676] ---[ end trace 0000000000000000 ]--- [ 68.290797][ C1] hrtimer: interrupt took 28162 ns [ 68.321664][ T4737] sch_fq: defrate 4294967295 ignored. [ 68.341078][ T4745] loop0: detected capacity change from 0 to 128 [ 68.363081][ T4745] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.396770][ T4745] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.426847][ T4737] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.523078][ T4737] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.646347][ T4737] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.748419][ T4737] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.083840][ T1721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.102857][ T1721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.120533][ T1721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.155872][ T1721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.203163][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.666779][ T4803] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.715755][ T4802] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.770515][ T4815] cgroup: name respecified [ 69.787498][ T4815] __nla_validate_parse: 1 callbacks suppressed [ 69.787516][ T4815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.459'. [ 70.383607][ T4839] lo speed is unknown, defaulting to 1000 [ 70.479764][ T4837] lo speed is unknown, defaulting to 1000 [ 70.503068][ T4837] lo speed is unknown, defaulting to 1000 [ 70.608463][ T4837] lo speed is unknown, defaulting to 1000 [ 70.664301][ T4837] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 70.742048][ T4837] lo speed is unknown, defaulting to 1000 [ 70.793965][ T4837] lo speed is unknown, defaulting to 1000 [ 70.806708][ T4837] lo speed is unknown, defaulting to 1000 [ 70.812876][ T4837] lo speed is unknown, defaulting to 1000 [ 70.819144][ T4837] lo speed is unknown, defaulting to 1000 [ 70.898807][ T4846] geneve2: entered promiscuous mode [ 70.907897][ T4846] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 70.919134][ T4846] erspan1: entered allmulticast mode [ 71.046867][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 71.949068][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'. [ 72.006007][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 72.006028][ T29] audit: type=1326 audit(1764721359.716:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.084299][ T29] audit: type=1326 audit(1764721359.716:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.107915][ T29] audit: type=1326 audit(1764721359.746:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.131350][ T29] audit: type=1326 audit(1764721359.746:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22a1bcf783 code=0x7ffc0000 [ 72.154894][ T29] audit: type=1326 audit(1764721359.756:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22a1bcf783 code=0x7ffc0000 [ 72.178797][ T29] audit: type=1326 audit(1764721359.756:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.202553][ T29] audit: type=1326 audit(1764721359.756:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.225957][ T29] audit: type=1326 audit(1764721359.756:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.249399][ T29] audit: type=1326 audit(1764721359.756:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.272868][ T29] audit: type=1326 audit(1764721359.756:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 72.636485][ T4916] lo speed is unknown, defaulting to 1000 [ 72.642939][ T4916] lo speed is unknown, defaulting to 1000 [ 72.908671][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 73.202435][ T4941] netlink: 14 bytes leftover after parsing attributes in process `asymmetric'. [ 73.216713][ T4941] hsr_slave_0: left promiscuous mode [ 73.228808][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 73.238590][ T4941] hsr_slave_1: left promiscuous mode [ 73.693489][ T4982] lo speed is unknown, defaulting to 1000 [ 73.700647][ T4982] lo speed is unknown, defaulting to 1000 [ 74.090874][ T5000] bridge0: entered promiscuous mode [ 74.098073][ T5000] bridge0: port 3(macsec1) entered blocking state [ 74.104581][ T5000] bridge0: port 3(macsec1) entered disabled state [ 74.116573][ T5000] macsec1: entered allmulticast mode [ 74.122012][ T5000] bridge0: entered allmulticast mode [ 74.188081][ T5000] macsec1: left allmulticast mode [ 74.193208][ T5000] bridge0: left allmulticast mode [ 74.217348][ T5000] bridge0: left promiscuous mode [ 74.371042][ T5022] capability: warning: `syz.3.531' uses 32-bit capabilities (legacy support in use) [ 74.888819][ T5049] lo speed is unknown, defaulting to 1000 [ 74.896016][ T5049] lo speed is unknown, defaulting to 1000 [ 75.475555][ T5079] siw: device registration error -23 [ 75.567625][ T5089] process 'syz.0.556' launched '/dev/fd/10' with NULL argv: empty string added [ 75.765606][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 76.459129][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 76.836854][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 76.867575][ T5173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.586'. [ 77.101442][ T5184] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660 [ 77.186196][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 77.186213][ T29] audit: type=1326 audit(1764721364.896:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.217931][ T29] audit: type=1326 audit(1764721364.896:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.241244][ T29] audit: type=1326 audit(1764721364.896:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.264668][ T29] audit: type=1326 audit(1764721364.896:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.288114][ T29] audit: type=1326 audit(1764721364.896:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.311424][ T29] audit: type=1326 audit(1764721364.896:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.334872][ T29] audit: type=1326 audit(1764721364.896:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.358282][ T29] audit: type=1326 audit(1764721364.896:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 77.381587][ T29] audit: type=1326 audit(1764721364.896:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa37588f783 code=0x7ffc0000 [ 77.404722][ T29] audit: type=1326 audit(1764721364.896:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa37588e1ff code=0x7ffc0000 [ 77.783044][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 77.962201][ T5211] netlink: 172 bytes leftover after parsing attributes in process `syz.3.602'. [ 77.971358][ T5211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.602'. [ 78.006858][ T5223] siw: device registration error -23 [ 78.104398][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 78.113571][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.121275][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.128932][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.136342][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.194212][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 78.274971][ T5257] netlink: 'syz.3.618': attribute type 8 has an invalid length. [ 78.282881][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 78.294510][ T5257] bond0: entered promiscuous mode [ 78.299711][ T5257] bond_slave_0: entered promiscuous mode [ 78.305629][ T5257] bond_slave_1: entered promiscuous mode [ 78.314239][ T5257] gretap0: entered promiscuous mode [ 78.317103][ T5260] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 78.321533][ T5257] hsr1: entered promiscuous mode [ 78.663860][ T5303] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20001 [ 79.003122][ T5341] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.497196][ T5372] 9pnet_fd: Insufficient options for proto=fd [ 79.918246][ T5398] lo speed is unknown, defaulting to 1000 [ 79.925175][ T5398] lo speed is unknown, defaulting to 1000 [ 80.602617][ T5424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5424 comm=syz.3.676 [ 80.627424][ T5424] netem: change failed [ 80.719042][ T5439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=5439 comm=syz.0.682 [ 81.005343][ T5460] __nla_validate_parse: 16 callbacks suppressed [ 81.005364][ T5460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'. [ 81.549879][ T5471] lo speed is unknown, defaulting to 1000 [ 81.598687][ T5471] lo speed is unknown, defaulting to 1000 [ 81.702036][ T5482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5482 comm=syz.3.695 [ 81.796999][ T5492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5492 comm=syz.3.700 [ 81.812680][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 81.831763][ T5492] netem: change failed [ 82.405081][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 82.405119][ T29] audit: type=1326 audit(1764721370.116:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.450620][ T29] audit: type=1326 audit(1764721370.146:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.474121][ T29] audit: type=1326 audit(1764721370.146:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.497551][ T29] audit: type=1326 audit(1764721370.146:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.520942][ T29] audit: type=1326 audit(1764721370.146:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.559157][ T29] audit: type=1326 audit(1764721370.276:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.0.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.582747][ T29] audit: type=1326 audit(1764721370.276:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.0.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.606239][ T29] audit: type=1326 audit(1764721370.276:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.0.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.629885][ T29] audit: type=1326 audit(1764721370.276:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.0.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.653325][ T29] audit: type=1326 audit(1764721370.276:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.0.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 82.738165][ T5526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5526 comm=syz.0.713 [ 82.759361][ T5524] lo speed is unknown, defaulting to 1000 [ 82.766080][ T5528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 82.777397][ T5526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.713'. [ 82.786697][ T5526] netem: change failed [ 82.798983][ T5524] lo speed is unknown, defaulting to 1000 [ 83.934235][ T5566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'. [ 84.929009][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 85.113551][ T5619] lo speed is unknown, defaulting to 1000 [ 85.120328][ T5619] lo speed is unknown, defaulting to 1000 [ 85.961225][ T5661] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.424242][ T5694] lo speed is unknown, defaulting to 1000 [ 86.431483][ T5694] lo speed is unknown, defaulting to 1000 [ 86.819369][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 86.848415][ T5702] 9pnet_fd: p9_fd_create_unix (5702): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 86.850223][ T5703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5703 comm=syz.3.779 [ 86.954075][ T5692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.776'. [ 87.018807][ T5711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 87.377942][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 87.386964][ T5739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.792'. [ 87.452752][ T5746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.794'. [ 87.686490][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 87.686507][ T29] audit: type=1326 audit(1764721375.356:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 87.738516][ T5760] lo speed is unknown, defaulting to 1000 [ 87.745762][ T5760] lo speed is unknown, defaulting to 1000 [ 88.003721][ T29] audit: type=1326 audit(1764721375.516:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 88.027155][ T29] audit: type=1326 audit(1764721375.556:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 88.050584][ T29] audit: type=1326 audit(1764721375.556:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 88.074004][ T29] audit: type=1326 audit(1764721375.556:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 88.127666][ T5773] siw: device registration error -23 [ 88.305242][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 88.338335][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 88.395004][ T5782] x_tables: duplicate underflow at hook 2 [ 88.405657][ T29] audit: type=1326 audit(1764721376.116:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 88.456875][ T29] audit: type=1326 audit(1764721376.116:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 88.480367][ T29] audit: type=1326 audit(1764721376.116:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 88.503713][ T29] audit: type=1326 audit(1764721376.176:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 88.586448][ T29] audit: type=1326 audit(1764721376.286:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 88.895484][ T5806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5806 comm=syz.1.814 [ 88.915115][ T5806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 88.924469][ T5806] netem: change failed [ 88.982664][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 89.133370][ T5820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5820 comm=syz.4.820 [ 89.154799][ T5820] netem: change failed [ 89.174946][ T5821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.234160][ T5821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.291616][ T5821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.350665][ T5821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.435431][ T5833] lo speed is unknown, defaulting to 1000 [ 89.442507][ T5833] lo speed is unknown, defaulting to 1000 [ 89.864772][ T5840] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 89.943715][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.960439][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.982824][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.991275][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.116579][ T5857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5857 comm=syz.2.832 [ 90.163628][ T5857] netem: change failed [ 90.529784][ T5876] lo speed is unknown, defaulting to 1000 [ 90.537097][ T5876] lo speed is unknown, defaulting to 1000 [ 91.590429][ T5909] Driver unsupported XDP return value 0 on prog (id 599) dev N/A, expect packet loss! [ 92.750834][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 92.750852][ T29] audit: type=1326 audit(1764721636.466:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 92.828279][ T29] audit: type=1326 audit(1764721636.496:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 92.851688][ T29] audit: type=1326 audit(1764721636.516:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 92.875067][ T29] audit: type=1326 audit(1764721636.516:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eaddf749 code=0x7ffc0000 [ 93.051554][ T5967] __nla_validate_parse: 4 callbacks suppressed [ 93.051627][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 93.067093][ T5967] netlink: 44 bytes leftover after parsing attributes in process `syz.4.868'. [ 93.207492][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'. [ 93.257108][ T29] audit: type=1326 audit(1764721636.967:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 93.294819][ T29] audit: type=1326 audit(1764721636.997:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 93.318224][ T29] audit: type=1326 audit(1764721636.997:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 93.464774][ T29] audit: type=1326 audit(1764721637.177:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.2.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22a1bcf749 code=0x0 [ 93.495944][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 93.514733][ T6014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.882'. [ 93.554458][ T29] audit: type=1400 audit(1764721637.237:4723): avc: denied { bind } for pid=6005 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.605504][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 93.714965][ T6029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6029 comm=syz.4.890 [ 93.776115][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 93.893187][ T29] audit: type=1400 audit(1764721637.597:4724): avc: denied { listen } for pid=6033 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 94.236858][ T6043] lo speed is unknown, defaulting to 1000 [ 94.244175][ T6043] lo speed is unknown, defaulting to 1000 [ 94.568587][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 94.627674][ T6051] siw: device registration error -23 [ 94.816089][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 94.843273][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.2.899'. [ 94.910702][ T6062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6062 comm=syz.3.903 [ 94.926083][ T6062] netem: change failed [ 95.373803][ T6094] lo speed is unknown, defaulting to 1000 [ 95.381345][ T6094] lo speed is unknown, defaulting to 1000 [ 95.444456][ T6096] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6096 comm=syz.3.915 [ 95.527736][ T6093] netem: change failed [ 96.345668][ T6126] lo speed is unknown, defaulting to 1000 [ 96.352461][ T6126] lo speed is unknown, defaulting to 1000 [ 96.720115][ T6131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6131 comm=syz.4.928 [ 96.822808][ T6136] netlink: 'syz.4.930': attribute type 14 has an invalid length. [ 96.830688][ T6136] netlink: 'syz.4.930': attribute type 13 has an invalid length. [ 97.172301][ T6159] lo speed is unknown, defaulting to 1000 [ 97.178690][ T6159] lo speed is unknown, defaulting to 1000 [ 97.271635][ T6158] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 97.322273][ T6158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.387827][ T6162] bond1: (slave geneve2): making interface the new active one [ 97.461543][ T6162] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 97.470549][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507871][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.544595][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.608592][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.145487][ T6195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6195 comm=syz.4.953 [ 98.213932][ T6197] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 98.332284][ T6200] lo speed is unknown, defaulting to 1000 [ 98.339485][ T6200] lo speed is unknown, defaulting to 1000 [ 98.630521][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 98.630536][ T29] audit: type=1326 audit(1764721642.339:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.687703][ T29] audit: type=1326 audit(1764721642.379:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.711226][ T29] audit: type=1326 audit(1764721642.379:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.734846][ T29] audit: type=1326 audit(1764721642.379:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.758248][ T29] audit: type=1326 audit(1764721642.379:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.781678][ T29] audit: type=1326 audit(1764721642.379:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.805355][ T29] audit: type=1326 audit(1764721642.379:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.828779][ T29] audit: type=1326 audit(1764721642.379:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.852115][ T29] audit: type=1326 audit(1764721642.379:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 98.875564][ T29] audit: type=1326 audit(1764721642.379:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 99.045293][ T6235] netlink: 'ñ{(ÿ{%'!.':$-': attribute type 10 has an invalid length. [ 99.062548][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.072884][ T6235] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.121609][ T6245] __nla_validate_parse: 9 callbacks suppressed [ 99.121625][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.136901][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.145814][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.175287][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.184556][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.193555][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.256897][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.265865][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 99.274855][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 100.378459][ T6301] lo speed is unknown, defaulting to 1000 [ 100.384989][ T6301] lo speed is unknown, defaulting to 1000 [ 101.655822][ T6371] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1012'. [ 101.669140][ T6371] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.959546][ T6385] bond1 (unregistering): Released all slaves [ 102.331759][ T6405] team0: entered promiscuous mode [ 102.336922][ T6405] team_slave_0: entered promiscuous mode [ 102.342790][ T6405] team_slave_1: entered promiscuous mode [ 102.353749][ T6405] veth8: entered promiscuous mode [ 102.358798][ T6405] veth8: entered allmulticast mode [ 102.431315][ T6411] 9pnet_fd: Insufficient options for proto=fd [ 103.629303][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 103.629321][ T29] audit: type=1326 audit(1764721647.342:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa37588e1ff code=0x7ffc0000 [ 103.658863][ T29] audit: type=1326 audit(1764721647.342:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa37588f7d7 code=0x7ffc0000 [ 103.682296][ T29] audit: type=1326 audit(1764721647.342:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa37588df90 code=0x7ffc0000 [ 103.706022][ T29] audit: type=1326 audit(1764721647.342:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa37588e3aa code=0x7ffc0000 [ 103.729406][ T29] audit: type=1326 audit(1764721647.342:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 103.803997][ T29] audit: type=1326 audit(1764721647.352:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 103.827756][ T29] audit: type=1326 audit(1764721647.352:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 103.851343][ T29] audit: type=1326 audit(1764721647.352:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 103.874814][ T29] audit: type=1326 audit(1764721647.352:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 103.898399][ T29] audit: type=1326 audit(1764721647.352:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37588f749 code=0x7ffc0000 [ 104.159384][ T6497] __nla_validate_parse: 1 callbacks suppressed [ 104.159399][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 104.166753][ T6493] netlink: 'syz.1.1053': attribute type 13 has an invalid length. [ 104.225282][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.232553][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.299086][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.308817][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.442818][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 104.464254][ T2420] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.473038][ T2420] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.558730][ T6509] lo speed is unknown, defaulting to 1000 [ 105.060285][ T2420] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.108094][ T2420] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.250554][ T6533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6533 comm=syz.2.1064 [ 105.265645][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 105.275656][ T6533] netem: change failed [ 105.300257][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 105.748358][ T6559] siw: device registration error -23 [ 106.020944][ T6571] siw: device registration error -23 [ 106.262227][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 106.289632][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1081'. [ 106.308113][ T6592] netem: change failed [ 106.529652][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 106.541759][ T6610] netlink: 'syz.2.1088': attribute type 7 has an invalid length. [ 106.549684][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 106.621730][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 106.668990][ T6624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.745526][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'. [ 106.772746][ T6624] bond1 (unregistering): Released all slaves [ 106.820324][ T6624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6624 comm=syz.3.1092 [ 107.169725][ T6663] netlink: 'syz.0.1105': attribute type 4 has an invalid length. [ 107.263836][ T6673] 9pnet: Could not find request transport: fstate [ 107.883764][ T6695] mmap: syz.3.1117 (6695): VmData 29081600 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 108.118365][ T6706] IPv6: Can't replace route, no match found [ 108.819277][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 108.819294][ T29] audit: type=1326 audit(1764721652.544:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 108.874633][ T29] audit: type=1326 audit(1764721652.544:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 108.898081][ T29] audit: type=1326 audit(1764721652.574:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 108.921545][ T29] audit: type=1326 audit(1764721652.574:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed257df749 code=0x7ffc0000 [ 108.945167][ T29] audit: type=1326 audit(1764721652.574:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 108.968600][ T29] audit: type=1326 audit(1764721652.574:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 108.992080][ T29] audit: type=1326 audit(1764721652.574:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 109.015508][ T29] audit: type=1326 audit(1764721652.574:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 109.038926][ T29] audit: type=1326 audit(1764721652.574:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 109.062345][ T29] audit: type=1326 audit(1764721652.574:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 109.241128][ T6755] __nla_validate_parse: 3 callbacks suppressed [ 109.241145][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 109.262949][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1139'. [ 109.326724][ T6762] macvtap0: refused to change device tx_queue_len [ 109.821979][ T6780] lo speed is unknown, defaulting to 1000 [ 109.836088][ T6780] lo speed is unknown, defaulting to 1000 [ 109.847014][ T6780] lo speed is unknown, defaulting to 1000 [ 109.853646][ T6780] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.869757][ T6780] lo speed is unknown, defaulting to 1000 [ 109.880580][ T6780] lo speed is unknown, defaulting to 1000 [ 109.902389][ T6780] lo speed is unknown, defaulting to 1000 [ 109.920728][ T6780] lo speed is unknown, defaulting to 1000 [ 109.928949][ T6780] lo speed is unknown, defaulting to 1000 [ 110.076509][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 110.825552][ T6805] lo speed is unknown, defaulting to 1000 [ 110.831762][ T6805] lo speed is unknown, defaulting to 1000 [ 110.846536][ T6810] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1155'. [ 110.870466][ T6810] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 111.058770][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 111.069214][ T6817] team_slave_0: left promiscuous mode [ 111.079087][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 111.108872][ T6817] team_slave_1: left promiscuous mode [ 111.154608][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 111.317177][ T6840] siw: device registration error -23 [ 111.634324][ T6847] lo speed is unknown, defaulting to 1000 [ 111.640844][ T6847] lo speed is unknown, defaulting to 1000 [ 112.044302][ T6856] sch_tbf: burst 274 is lower than device lo mtu (65499) ! [ 112.263098][ T6864] lo speed is unknown, defaulting to 1000 [ 112.269268][ T6864] lo speed is unknown, defaulting to 1000 [ 112.361303][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 112.482158][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 112.688351][ T6876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6876 comm=syz.3.1176 [ 112.734457][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 112.743711][ T6876] netem: change failed [ 113.055486][ T6891] futex_wake_op: syz.3.1179 tries to shift op by -1; fix this program [ 113.234003][ T6878] Set syz1 is full, maxelem 65536 reached [ 113.253318][ T6896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1183'. [ 113.263336][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1183'. [ 113.530670][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6907 comm=syz.0.1187 [ 113.674335][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=6907 comm=syz.0.1187 [ 113.738594][ T6912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6912 comm=syz.0.1189 [ 113.766612][ T6912] netem: change failed [ 113.945649][ T3630] IPVS: starting estimator thread 0... [ 114.035471][ T6927] IPVS: using max 2256 ests per chain, 112800 per kthread [ 114.501049][ T6931] lo speed is unknown, defaulting to 1000 [ 114.507308][ T6931] lo speed is unknown, defaulting to 1000 [ 114.534783][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 114.534799][ T29] audit: type=1326 audit(1764721658.197:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.564416][ T29] audit: type=1326 audit(1764721658.197:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.587990][ T29] audit: type=1326 audit(1764721658.207:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.611634][ T29] audit: type=1326 audit(1764721658.207:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.635045][ T29] audit: type=1326 audit(1764721658.207:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.658464][ T29] audit: type=1326 audit(1764721658.207:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.681874][ T29] audit: type=1326 audit(1764721658.207:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.705428][ T29] audit: type=1326 audit(1764721658.207:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.728886][ T29] audit: type=1326 audit(1764721658.207:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.752441][ T29] audit: type=1326 audit(1764721658.207:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f22a1bcf749 code=0x7ffc0000 [ 114.959709][ T6957] SELinux: Context @ is not valid (left unmapped). [ 115.188473][ T6965] __nla_validate_parse: 4 callbacks suppressed [ 115.188493][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 115.763096][ T6997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6997 comm=syz.4.1217 [ 115.778770][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 115.789226][ T6997] netem: change failed [ 116.268813][ T7031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=7031 comm=syz.1.1229 [ 116.303464][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'. [ 116.312749][ T7031] netem: change failed [ 116.429407][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 116.439478][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 116.471570][ T7037] lo speed is unknown, defaulting to 1000 [ 116.478548][ T7037] lo speed is unknown, defaulting to 1000 [ 116.689101][ T7040] lo speed is unknown, defaulting to 1000 [ 116.695576][ T7040] lo speed is unknown, defaulting to 1000 [ 117.652386][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 117.681649][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 117.701715][ T7049] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1235'. [ 117.821578][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 117.833088][ T7064] netlink: 'syz.4.1237': attribute type 32 has an invalid length. [ 117.840962][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 117.856495][ T7064] bond2: option coupled_control: invalid value (17) [ 117.863859][ T7064] bond2 (unregistering): Released all slaves [ 118.729310][ T7113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=7113 comm=syz.0.1256 [ 118.744799][ T7113] netem: change failed [ 118.826845][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.834120][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.902447][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.914143][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.973605][ T5060] lo speed is unknown, defaulting to 1000 [ 118.979466][ T5060] syz2: Port: 1 Link DOWN [ 118.984982][ T125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.996175][ T125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.017028][ T125] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.026372][ T125] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.346683][ T7126] lo speed is unknown, defaulting to 1000 [ 119.352907][ T7126] lo speed is unknown, defaulting to 1000 [ 119.547814][ T29] kauditd_printk_skb: 1919 callbacks suppressed [ 119.547828][ T29] audit: type=1326 audit(1764721663.270:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.709532][ T29] audit: type=1326 audit(1764721663.320:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.732944][ T29] audit: type=1326 audit(1764721663.320:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.756381][ T29] audit: type=1326 audit(1764721663.320:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.779737][ T29] audit: type=1326 audit(1764721663.320:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.803272][ T29] audit: type=1326 audit(1764721663.320:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.826757][ T29] audit: type=1326 audit(1764721663.320:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.850259][ T29] audit: type=1326 audit(1764721663.320:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.873692][ T29] audit: type=1326 audit(1764721663.320:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.897213][ T29] audit: type=1326 audit(1764721663.320:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f062c0ff749 code=0x7ffc0000 [ 119.966475][ T7142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7142 comm=syz.1.1269 [ 119.978979][ T7142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7142 comm=syz.1.1269 [ 120.133098][ T7160] lo speed is unknown, defaulting to 1000 [ 120.139341][ T7160] lo speed is unknown, defaulting to 1000 [ 120.208283][ T7174] __nla_validate_parse: 5 callbacks suppressed [ 120.208299][ T7174] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1279'. [ 120.224542][ T7170] netlink: 'syz.3.1278': attribute type 14 has an invalid length. [ 120.287216][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'. [ 120.674017][ T7196] Set syz1 is full, maxelem 65536 reached [ 120.818908][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1296'. [ 120.844319][ T7214] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1293'. [ 121.018728][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 121.141698][ T7260] batman_adv: batadv0: Adding interface: dummy0 [ 121.148163][ T7260] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.173778][ T7260] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 121.228819][ T7273] xt_hashlimit: max too large, truncated to 1048576 [ 121.316276][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1320'. [ 121.536297][ T7304] tipc: Enabling of bearer rejected, already enabled [ 121.566263][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 121.579902][ T7310] pim6reg: entered allmulticast mode [ 121.603379][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 121.667808][ T7310] pim6reg: left allmulticast mode [ 121.956946][ T7330] lo speed is unknown, defaulting to 1000 [ 121.963094][ T7330] lo speed is unknown, defaulting to 1000 [ 122.527377][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1343'. [ 122.541944][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 123.054233][ T7389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.103781][ T7394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.170629][ T7400] ================================================================== [ 123.178767][ T7400] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 123.186077][ T7400] [ 123.188402][ T7400] write to 0xffff88810201c500 of 8 bytes by task 7399 on cpu 1: [ 123.196032][ T7400] mas_wmb_replace+0x208/0xfa0 [ 123.200814][ T7400] mas_wr_store_entry+0x13e3/0x2750 [ 123.206021][ T7400] mas_store_prealloc+0x760/0xa90 [ 123.211056][ T7400] vma_iter_store_new+0x1c5/0x200 [ 123.216101][ T7400] vma_complete+0x125/0x580 [ 123.220617][ T7400] __split_vma+0x5d9/0x650 [ 123.225040][ T7400] vma_modify+0x3f2/0xc80 [ 123.229382][ T7400] vma_modify_flags+0x101/0x130 [ 123.234254][ T7400] mprotect_fixup+0x2cc/0x570 [ 123.238931][ T7400] do_mprotect_pkey+0x6d6/0x980 [ 123.243793][ T7400] __x64_sys_mprotect+0x48/0x60 [ 123.248645][ T7400] x64_sys_call+0x2c3b/0x3000 [ 123.253330][ T7400] do_syscall_64+0xd8/0x2a0 [ 123.257851][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.263748][ T7400] [ 123.266073][ T7400] read to 0xffff88810201c500 of 8 bytes by task 7400 on cpu 0: [ 123.273614][ T7400] mas_state_walk+0x119/0x650 [ 123.278300][ T7400] mas_walk+0x60/0x150 [ 123.282377][ T7400] lock_vma_under_rcu+0x95/0x1b0 [ 123.287323][ T7400] do_user_addr_fault+0x233/0x1080 [ 123.292446][ T7400] exc_page_fault+0x62/0xa0 [ 123.296955][ T7400] asm_exc_page_fault+0x26/0x30 [ 123.301815][ T7400] [ 123.304141][ T7400] value changed: 0xffff888103715c41 -> 0xffff88810201c500 [ 123.311248][ T7400] [ 123.313569][ T7400] Reported by Kernel Concurrency Sanitizer on: [ 123.319724][ T7400] CPU: 0 UID: 0 PID: 7400 Comm: syz.0.1360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.331016][ T7400] Tainted: [W]=WARN [ 123.334815][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.344874][ T7400] ==================================================================