last executing test programs: 5m6.647845981s ago: executing program 4 (id=3598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) r6 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) mknodat$loop(r7, &(0x7f0000000200)='./file0\x00', 0x8, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000160000000000000000000ba18b0000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRESOCT=r8], 0x6c}}, 0x48c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5m6.401372105s ago: executing program 4 (id=3605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="4bf11c2fb9436f5c62a5b444de4d85b60875df443eefc06a65c2", 0x1a}], 0x1}}], 0x1, 0x4400c840) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b3a, 0x0, 0xfffffffffffffdfd) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8481}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x16}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000f40)=""/4096, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x10, 0xfffffffd, 0x8e6}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0xb}, {0x1, 0x1, 0xa, 0x3}, {0x0, 0x4, 0xe, 0x8}, {0x1, 0x4, 0x7, 0xb}, {0x1, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x10, 0x5}, {0x5, 0x3, 0x2, 0x4}, {0x3, 0x5, 0x8, 0x8}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r6, r7) 5m6.319015555s ago: executing program 4 (id=3608): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) shutdown(r0, 0x1) r3 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="c03375bbeffbc0467c53"], 0xfd, 0x1e8, &(0x7f0000000c80)="$eJzs3cFqE0EYB/AvsU1SEclNEIUFLx6kqE9QkSpqQFBy0JNC9dKIYC/RS/oYvouv4wNIT7noSN1t124XW4vpaP39Lvl2//kyMyHZ5JLJiytvNjfebr3+fOljDAad6K7FWsw7MYxu7NkOAOAsmacUX1Ip91wAgNNxxOd/Smn2NcO0AIAFevrs+aM7o9H6k6IYROxsT8fTcXlb5vcejNZvFj8M666d6XR8bj+/VTS/O+zmy3G+ym+X/cXBvBfXr5X5bnb38aiR92NjsUsHAAAAAAAAAAAAAAAAAAAAAIBsrkaxp3V/n9XVZr5S5eXRT/sDNfbvWYrLS9VhvT1Qmp3GogAAAAAAAAAAAAAAAAAAAOAfs/X+w+bLyeTVu7roR8TBM79TdKoHPmH7IothS9SNX3dFXIxjDPHw040L+ReYrfh2PyLX6P2WF1vxdzwtk8PvguWIOLK9FxEtUe9PTGyeUmqNOo0z9TWin+viBAAAAAAAAAAAAAAAAAAA/5n6R7+Hs0GOCQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABABvX//5+gmEXEMe68P9hK1qUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwhn0PAAD//4jrMjA=") mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\r\x00'/12, @ANYRES32, @ANYBLOB="bfd4229901344da2238fb6d952d8274dcb87fe621da7a273719d9b43adc3e6a29020923bb65f7b7607d2f900000000c4a24c12ba17e6dec41910885bc01ad97158ce8ab7cb52a1963571", @ANYRES64=0x0], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000024000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/sctp\x00') socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x3, 0x141000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) 5m5.419202199s ago: executing program 4 (id=3626): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@jqfmt_vfsv0}, {}, {@stripe={'stripe', 0x3d, 0x1ff}}, {@bsdgroups}, {@orlov}, {@grpjquota, 0x2e}, {@bh}, {@errors_remount}, {@nomblk_io_submit}, {@delalloc}], [], 0x2c}, 0x1, 0x4c0, &(0x7f0000000ac0)="$eJzs3M1vG0UbAPBnN3H63aR9+74v/YAaCqKikDRpgR44FARSL0hIcCjHkIaqNG1REyRaVTQgVI6IvwA4IiFx4sIJJISAEx9XuCOkCvXSwgEFrb2bbBLHdRwnafHvJ9mZ2Z3NzLO74x3v2A6ga1WzpyRia0T8EhH99ez8AtX6n1s3roz9eePKWBIzMy/+kdTK3bxxZawoWmy3Ja1nfrockb6bxN4G9U5eunx2dGJi/GKeH5o69/rQ5KXLj505N3p6/PT4+ZFjx44eGX7yiZHHOxJnFtfNPW9d2Lf7xMsfPD82E69892nW3q35+nIcdQMrrrMa1ZjJzS3tqz0/tOL/fmfZVkonvevYEJalJyKyw1Wp9f/+6Im5g9cfz70zm/l6nRoIrJrs2rRj0dKe/G86e/0C/o0SfRy6VHHFz97/Fo+1HH+st+tPZ8/jtfhv5Y/6mt6o3cYYqL9j71li++MrrH9rRJyc/uvD7BEN70MAAHTWl9n459FG4780/lcqtz2fQxmIiEMRsTMi/hMRuyLivxG1sv+PiHuWWX91QX7x+OfHTW0F1qJs/PdUPrc1f/yX5iWS2dy2WvyV5NUzE+OH831yMCobsvxwkzq+evbn95daVy2N/7JHVn8xFszb8XvvhvnbnBqdGl1ByPNcfztiT2+j+JPZmYBsD+yOiD1t/P9sn5155JN9WXr7lsXrbx9/Ex2YZ5r5OOLh+vGfjgXxF5J6TUvNTw5tjInxw0PFWbHY9z9ce6Gcr5TS8+Lf2FpMG9sNtoHs+G9ueP7n8RfdoJivnVx+Hdd+fW/J9zSLj38SJ6fLJfLzv/QqkJ3/fclLtXRfvuzN0ampi8MRffmCectH5rYt8kX5LP6DBxr3/50Rf3+Ub7c3IrKT+N6IuC8i9udtvz8iHoiIA03i//aZB19rvofaPP87IIv/VLPjHzGQlOfr20j0nP3mi6Xqb+3172gtdTBf0srrX6sNXMm+AwAAgLtFWpuDTtLBqNTTpZtTu2JzOnFhcupQNd44f6o+Vz0QlbS409Vfuh86nN8bLvIjC/JHImJH7ZNGm2r5wbELE9vWM3Agtsz2/+K1IE0HB+vrfit/6KWTN52BO8ey5tHK3w787PPONwZYU76vCd1L/4fupf9D99L/oXs16v9XI26tQ1OANeb6D92rxf7ft9rtANae6z90L/0futLir8QXP7TQzjf95xI7T6xo81VPzPQvWNL6TwY0S0wvf6ueVYo0yj/asWQiiYj2qoi0eZm+Fmpft0R62zLH29wty0jszxMbIqLVra4226uViOjo+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3+ycAAP//rynbqw==") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m58.274232542s ago: executing program 4 (id=3708): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x1, 0x4, 0xc42f, 0x5, 0x10, 0x0, {0x3}}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) inotify_add_watch(0xffffffffffffffff, 0x0, 0x41) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) syz_io_uring_submit(r1, r2, 0x0) r8 = eventfd2(0x0, 0x1) readv(r8, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000e40)='.\x00', 0x0) 4m57.995574035s ago: executing program 4 (id=3727): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000280)=""/24, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) 4m57.979520626s ago: executing program 32 (id=3727): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000280)=""/24, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) 5.084022677s ago: executing program 3 (id=7348): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 4.733760812s ago: executing program 0 (id=7358): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000280)='./file0\x00', 0x80800, 0x4) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) prlimit64(r0, 0xf, &(0x7f0000000300)={0x2, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) 4.715702922s ago: executing program 5 (id=7359): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4000, 0x0, 0x60, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) pipe2$9p(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x13, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4.378713577s ago: executing program 5 (id=7362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x40020) 3.554665839s ago: executing program 3 (id=7363): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000740)='./file1\x00', 0x204419, &(0x7f0000000740)=ANY=[], 0x3c, 0x5be, &(0x7f0000001840)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x90}}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000c3d7360dfae4020000100b00000000000000fb158babdc06ff2fc1dd7bda345ddb9470e661c00c121e404b085cfb4e3a3d0f8d9785e78de7eab1a7f9a6ce1e28277e22936f02f022720212b7fd9a429affd43c7d75d0de91731025885f8bc29f9b18195f42df977b49f8e5a0f71d69c4bd37cf7c1a95e685dc3ec45856192747a61fcdac55a7ca50694a4fb0d14cbb3ddd48b53213fa5ee131e3769393a36964924d50473813a83616e4ee3a8ca84a165aed0427f078f4c58fb4fdca488f09fab78693e0d3bcde5f7f335625d97cf1000000007524f5ca"], 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x80108906, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x0, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7, 0x40, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', r7, 0x29, 0x11, 0x0, 0x6, 0x0, @remote, @empty, 0x1, 0x7, 0xb, 0x80000000}}) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r5, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000280)=""/122, 0x7a}], 0x4, 0xe, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) lstat(&(0x7f0000000700)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000007c0)) 3.50511382s ago: executing program 2 (id=7364): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) recvmsg$unix(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/245, 0xf5}], 0x4, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10000) r3 = semget(0x0, 0x1, 0x281) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000080)=[{}, {0x0, 0x2f7, 0x1000}, {0x0, 0x7fff, 0x800}], 0x3) r4 = socket(0x18, 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="a9ec0582ce9230114be16b9a9f73b2369f3893355cab6126d9391f7dab5be42fc0a15999c7b32f", 0x27}], 0x1) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2.557058703s ago: executing program 2 (id=7366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/73, 0xfffffdef, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000080000000000000000000e3a6fc812e0eccbb42ec4fee98d2b47f83a7a30b723831968884d3e7bddf7d5e9e861c77044bfc30e53fb7bba53815de1269dac7419196a30114dff400d975b9ff8fcfb8ca552f998cb6a7adba486f45f17bd58abff03ec069926ee0c59b240e31cff7af507770d3963f9dd6625e9674ae40f49b9c2428179738b818db87c9fc2b8c4c7d59c9d44e623037f6cbea"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x44, 0x0, 0x509, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) fstat(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x40) 2.540038244s ago: executing program 0 (id=7367): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2.487055694s ago: executing program 0 (id=7368): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendto$packet(r0, &(0x7f0000000500)="1441e1bd9cd9a04d421d47e41e95", 0xe, 0x0, &(0x7f00000004c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.360146496s ago: executing program 5 (id=7370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x400) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r14, 0x402, 0x4) 2.359920396s ago: executing program 3 (id=7371): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x0) 2.358678816s ago: executing program 0 (id=7372): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) open(&(0x7f0000000280)='./file0\x00', 0x80800, 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) prlimit64(r1, 0xf, &(0x7f0000000300)={0x2, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.347812116s ago: executing program 3 (id=7373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x400) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r14, 0x402, 0x4) 2.305332047s ago: executing program 2 (id=7374): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) syz_open_dev$sg(&(0x7f00000002c0), 0x868, 0x482182) r3 = open(&(0x7f0000000000)='./file1\x00', 0x145142, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000770e000018110000", @ANYBLOB="00000000b703000a00000000e7000000830000009b090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008d0000008600000018120000", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x40, 0x1000, &(0x7f0000000bc0)=""/4096, 0x0, 0x20, '\x00', 0x0, @sk_lookup, r3, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r0, r1, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=[{0x2, 0x4, 0xa, 0x7}, {0x0, 0x4, 0xa, 0x3}, {0x0, 0x3, 0xe, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0x190) 2.164773299s ago: executing program 5 (id=7376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000240)='\x00', 0x2000, 0x150) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xe678eed6c876149d) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f00000003c0)='pstore\x00', 0x300082, &(0x7f0000000c40)='\x01&\x14v\xe3\xaa\x86\xce-d5\xe3x\f\'\xe8\x1dJj\x158\xdd\x1e\xa0Q\x8d\xacK\"\xa5F\xc4\x94\x06\xa6\xd1\x13\xddK[t\xa6I\x17i\x88\a\xf1\x87\xb0\xc20\x9aV.X.\x9c\xe7\xa5\xbb\xf5\xe5\xc6T\xbac\xe8\xa9\xad&\xe8z\xa7\xb8\xefz\xe1>\a\x7f\xbf\xb3\xbf\xbb\xb1JV\xb8\xad#\xa0\xb3L\xb8)n\xd7\x89LmD\xd1\xbb\x83\xd1U\xbe\xf5yS\x90D\xf0\x84\xf5\x99\xff\xa1\x8a\x00\xd2\x15\xda\x18\xb4o\xbd\xf9\xb2\xf2shg?\xed7\xc3\xde\xe5\xf4Q\x7f\xf8\r\aM\x1c\xbe\xd8\x95\xd3\x91J\x85xB(\xe7\t\x00\x00\x00\x00\x00\x00\x00.%\f3\x1a\xc4y%\x19\xd1\xcbQ_\x1dh\xc3\x98]\xa4\xd7[|\xafS\x01T\xafa\xca\x05`\xb5\x98\xb7J\xe0\x8a\x03\x9c,Y\xe9\xf6\xbb\'\xb0\x91<9\xbd\x8d\xe7\\\xb4\xfe|o\xc8\x98\x8d\xc6\xd3\xddL\x98\xd7\n\xef\xce\xc3/\xb8]\xdb)G\x00\x00\x00\x00\x00\x00\x00\x00\x001\x9c\xbfW*\xbd\t]2b\xaf\xce\xb8\xee\xfc%\xf8\x80\x1a%\xd5\x19\xa9./\x02Y\xb9\xb3g\xb4\xb1\x8f\xa49d\xecJ\a\xbbS\x9c\ar\xacfI\xaf\xbc\xb92\'\x98u\xfeIg\x884V\xd5V;\nj\xf02\xa6d5q\n\xa7\xb2\x97\xfe\x91\xf4(v\xada=\xce\xdc%O-\x102\x02\x18\xa1\xc6\x95\xb7\xb0?)K-\xc40( \xf8US\xf8z&\xef\xf8\xb2VV\x1d*\xb1O\xf5|\x12\xe3\xfc\x97\xfcL\xe8\xa8C\xea#\x17=\n\xb0\xfc55@\xaa,\x952f\a\xb72^\x19\xe3\xb5-\x93\x88`q\x8c\xb8\x97\xed\x8cm\xfd\xcc\x19{\xb5\xfe\x92+)\xd4\x8fph\x06t\x99\xf6,\xf4\xdc\xfc\x05mi\'\xe7\x02R~\x12\x11\xd2E#;\xc1N\xbfY\x9f\x80\xce\xb6\xf75\xef\v=p') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x13d01, 0x5, 0x3a65, 0x5, 0x0, 0x6, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='rxrpc_call_reset\x00', r6, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x84, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 2.06649259s ago: executing program 2 (id=7377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) recvmsg$unix(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/245, 0xf5}], 0x4, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10000) r3 = semget(0x0, 0x1, 0x281) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000080)=[{}, {0x0, 0x2f7, 0x1000}, {0x0, 0x7fff, 0x800}], 0x3) r4 = socket(0x18, 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="a9ec0582ce9230114be16b9a9f73b2369f3893355cab6126d9391f7dab5be42fc0a15999c7b32f", 0x27}], 0x1) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.966301942s ago: executing program 3 (id=7379): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000180a01030000000000000000010000020c00054000001200000000021400038008000240fffffffe08000140000000002c000000160a05000000000000000000050000020900010073797a30000000000900020073797a3100000000140000"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 864.728388ms ago: executing program 5 (id=7380): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 840.312038ms ago: executing program 2 (id=7381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 731.79334ms ago: executing program 3 (id=7383): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000740)='./file1\x00', 0x204419, &(0x7f0000000740)=ANY=[], 0x3c, 0x5be, &(0x7f0000001840)="$eJzs3V1v29Ydx/EfHXt+KFAM25AFRh5Okw1wgFShpMaB0IuBo45sthKpkfRgXxVBYxdG5HZIOmDxzZKbbAO2F9HbYa9hr2jBLnfpgQ+yrUiyEtmOA/f7ERJS5OF5oJjzz7HFQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADl+03WrjtpBuLFpxvObcdQ5elsePbRBdwcWJ5QrOdkfLSzoWrHp2i+Odl/N/rqt68W761rIFgva/+jqTz//+exM//gTKvxePHu+/+RRr7f99KIrco5uzI/ft2bDIImCjrdmTZBEprG66t5fbyWmFbRtspWktmP82HppFJsV/66pNhp1Yytb0Ua41vTatr/x4ac11101X1S61ouTKLz/RSXx14N2OwjX8jTZ7izNw+xC/DJITWq9jjE7u73t+qQGZImqb5OoNilRza3VqtVarbr6oPHgoevODm1w36ChFBd/0eIMPVg67AkX3/KQs+q6gVObKeO/2goUakObMiNfvpqKFakzZn+pDPzOr+/bE8s9Hv/7Uf7a0e5l5fH/ZvHuZhb/b42I/2PqMvmV/X9i2mOPv57pufb1RI/UU0/beppvXTyj3E/zuvVeSlmTVajgdy1FCtSRl28xCpQoklFDq1qVq6+0rpYSGbUUqC2rRFtKlMrmV5SvWFaeUkWKZbQiX3dlVFVDDdVlZFXRliJtKNSamvLyXHa0q57+NVs/oY6alfIPpzo2yVL/uttW7YScThf/DxyJ+I+z7cCBUzjox38AAAAAAHBpOflP37Px/5xu5GutoG3di64WAAAAAAA4Q/lv/q9ni7ls7YacwfH/fLl8cUH1AwAAAAAAp+fk99g5kpZ0q1jbkZPfLsWXAAAAAAAAuCTy3//fzBb5HCi35JRzqjD+BwAAAADg0vjr+Dn2+1/57847//6v4njOednd/JWz52Ubvb0rxd4rb+aYtpadj8tM8sXqbPnOt9edcvbLw0kwX5eLnUlz/TtTVOA3GqyA/t6fn/iTx8XycX9PqRW0bcWP2p9X5Xkfz6R2M/3jt7t/Ut78v4WdMtmLr7/rPc7r8jJ7+3KvnEBxaB7F8SdD3+fzLeT3XIxs8Vx+I0ZZ7pKjnd3etnu8/TPF4TPvUOYr3S7S3FkulktH7c/KXMjKrFbGtb6sRbVs+eyxQt+l5a90p6zFyp1iMaIWNU2oRe34+Z/qXIyqRf1/BwdFg/Ja1Cedi/opawEAF2VnQhRyhgP/FL3cuUT3ET36SpFmZTnrWBdml/c/urp4eGTRo7uTenT3sEdf1DRx/Z9Dz0AaF2Ozcv/xRlT9ITvghzHlzkmqOdkpvPL93h909dnz/U939x59s/3N9re1Wn3V/cx1H9Q0lzejXIyt6VtfIgCAS2jwGTuj4v/EFM5n+qRIMWJUnaX42eFXCir6Wt+pp8e6l99toOKxPiNyXTr2NYR7/VHr7fI5LW+MWpfyMFk84eXeCWPLn+R3OfTzrZ2YdrAO9fP/IAAAeI9uj4zDxdh+Po+Dk+P/vcFxt/Jx98g4msXyk0fHR2mr7/U8AADwY2Lj185S+hcnjoPuV9VGo+ql69bEkf+liYPmmjVBmNrYX/fCNWu6cZRGftQ2/Z9Lm2Sj243i1LSi2HSjJNjMn/xuyke/J7bjhWngJ9229RJr/ChMPT81zSDx+3m8iPODk671g1bge2kQhSaJNmLfVoxJrDXdjd+2g2TdxiZo2jANWkG2GppuHHS8eMv8PmpvdKxp2sSPg24aFRn2ywrCVhR38mwrF3miAQD4gDx7vv/kUa+3/XRwZX5oyzus6GBwy0W3EQAADCJKAwAAAAAAAAAAAAAAAAAAAADw4ZviJj8NbVnUNDcLDufDSrbiTPOhXKKVX34Y1Tjvlf88Lf4FnjKfV+U83Gdew4ldx5/PuWsCcM7+HwAA//+FYESC") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x90}}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000c3d7360dfae4020000100b00000000000000fb158babdc06ff2fc1dd7bda345ddb9470e661c00c121e404b085cfb4e3a3d0f8d9785e78de7eab1a7f9a6ce1e28277e22936f02f022720212b7fd9a429affd43c7d75d0de91731025885f8bc29f9b18195f42df977b49f8e5a0f71d69c4bd37cf7c1a95e685dc3ec45856192747a61fcdac55a7ca50694a4fb0d14cbb3ddd48b53213fa5ee131e3769393a36964924d50473813a83616e4ee3a8ca84a165aed0427f078f4c58fb4fdca488f09fab78693e0d3bcde5f7f335625d97cf1000000007524f5ca"], 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x80108906, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x0, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7, 0x40, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', r7, 0x29, 0x11, 0x0, 0x6, 0x0, @remote, @empty, 0x1, 0x7, 0xb, 0x80000000}}) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r5, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000280)=""/122, 0x7a}], 0x4, 0xe, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) lstat(&(0x7f0000000700)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000007c0)) 687.87224ms ago: executing program 2 (id=7385): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000180a01030000000000000000010000020c00054000001200000000021400038008000240fffffffe08000140000000002c000000160a05000000000000000000050000020900010073797a300000"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000840)=""/4096, 0x1000, 0x0, &(0x7f0000000300)=""/109, 0x6d}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 671.5753ms ago: executing program 0 (id=7386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x400) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r14, 0x402, 0x4) 572.368512ms ago: executing program 1 (id=7389): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 506.787543ms ago: executing program 1 (id=7390): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 424.100204ms ago: executing program 1 (id=7391): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) syz_open_dev$sg(&(0x7f00000002c0), 0x868, 0x482182) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000770e00", @ANYRES32, @ANYBLOB="00000000b703000a00000000e7000000830000009b090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008d0000008600000018120000", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x40, 0x1000, &(0x7f0000000bc0)=""/4096, 0x0, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r0, r1, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=[{0x2, 0x4, 0xa, 0x7}, {0x0, 0x4, 0xa, 0x3}, {0x0, 0x3, 0xe, 0x3}], 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0x190) 304.228286ms ago: executing program 1 (id=7392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000240)='\x00', 0x2000, 0x150) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xe678eed6c876149d) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f00000003c0)='pstore\x00', 0x300082, &(0x7f0000000c40)='\x01&\x14v\xe3\xaa\x86\xce-d5\xe3x\f\'\xe8\x1dJj\x158\xdd\x1e\xa0Q\x8d\xacK\"\xa5F\xc4\x94\x06\xa6\xd1\x13\xddK[t\xa6I\x17i\x88\a\xf1\x87\xb0\xc20\x9aV.X.\x9c\xe7\xa5\xbb\xf5\xe5\xc6T\xbac\xe8\xa9\xad&\xe8z\xa7\xb8\xefz\xe1>\a\x7f\xbf\xb3\xbf\xbb\xb1JV\xb8\xad#\xa0\xb3L\xb8)n\xd7\x89LmD\xd1\xbb\x83\xd1U\xbe\xf5yS\x90D\xf0\x84\xf5\x99\xff\xa1\x8a\x00\xd2\x15\xda\x18\xb4o\xbd\xf9\xb2\xf2shg?\xed7\xc3\xde\xe5\xf4Q\x7f\xf8\r\aM\x1c\xbe\xd8\x95\xd3\x91J\x85xB(\xe7\t\x00\x00\x00\x00\x00\x00\x00.%\f3\x1a\xc4y%\x19\xd1\xcbQ_\x1dh\xc3\x98]\xa4\xd7[|\xafS\x01T\xafa\xca\x05`\xb5\x98\xb7J\xe0\x8a\x03\x9c,Y\xe9\xf6\xbb\'\xb0\x91<9\xbd\x8d\xe7\\\xb4\xfe|o\xc8\x98\x8d\xc6\xd3\xddL\x98\xd7\n\xef\xce\xc3/\xb8]\xdb)G\x00\x00\x00\x00\x00\x00\x00\x00\x001\x9c\xbfW*\xbd\t]2b\xaf\xce\xb8\xee\xfc%\xf8\x80\x1a%\xd5\x19\xa9./\x02Y\xb9\xb3g\xb4\xb1\x8f\xa49d\xecJ\a\xbbS\x9c\ar\xacfI\xaf\xbc\xb92\'\x98u\xfeIg\x884V\xd5V;\nj\xf02\xa6d5q\n\xa7\xb2\x97\xfe\x91\xf4(v\xada=\xce\xdc%O-\x102\x02\x18\xa1\xc6\x95\xb7\xb0?)K-\xc40( \xf8US\xf8z&\xef\xf8\xb2VV\x1d*\xb1O\xf5|\x12\xe3\xfc\x97\xfcL\xe8\xa8C\xea#\x17=\n\xb0\xfc55@\xaa,\x952f\a\xb72^\x19\xe3\xb5-\x93\x88`q\x8c\xb8\x97\xed\x8cm\xfd\xcc\x19{\xb5\xfe\x92+)\xd4\x8fph\x06t\x99\xf6,\xf4\xdc\xfc\x05mi\'\xe7\x02R~\x12\x11\xd2E#;\xc1N\xbfY\x9f\x80\xce\xb6\xf75\xef\v=p') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x13d01, 0x5, 0x3a65, 0x5, 0x0, 0x6, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='rxrpc_call_reset\x00', r6, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x84, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 143.033298ms ago: executing program 0 (id=7393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) recvmsg$unix(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/245, 0xf5}], 0x4, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10000) r3 = semget(0x0, 0x1, 0x281) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000080)=[{}, {0x0, 0x2f7, 0x1000}, {0x0, 0x7fff, 0x800}], 0x3) r4 = socket(0x18, 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="a9ec0582ce9230114be16b9a9f73b2369f3893355cab6126d9391f7dab5be42fc0a15999c7b32f", 0x27}], 0x1) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 35.37786ms ago: executing program 1 (id=7394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b70400000000040085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x50) 570.06µs ago: executing program 1 (id=7395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) (async) io_setup(0x7, &(0x7f0000000280)=0x0) (async) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) (async) time(0x0) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4000, 0x6) renameat2(r7, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00', 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) r8 = syz_io_uring_setup(0x4333, &(0x7f0000000000), &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r9 = syz_open_procfs$userns(r1, &(0x7f0000000480)) setns(r9, 0x80) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=7396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) kernel console output (not intermixed with test programs): -0000-0000-0000-000000000000. [ 482.993587][T21454] syzkaller0: entered promiscuous mode [ 482.999392][T21454] syzkaller0: entered allmulticast mode [ 483.616028][T21478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21478 comm=syz.2.6272 [ 483.629443][T21478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21478 comm=syz.2.6272 [ 484.019487][T21501] loop0: detected capacity change from 0 to 512 [ 484.026520][T21495] loop2: detected capacity change from 0 to 128 [ 484.027864][T21501] EXT4-fs: Ignoring removed bh option [ 484.038695][T21501] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.047314][T21501] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 484.060366][T21501] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 484.068995][T21501] EXT4-fs (loop0): orphan cleanup on readonly fs [ 484.085514][T21501] __quota_error: 39 callbacks suppressed [ 484.085536][T21501] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 484.101201][T21501] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 484.112077][T21495] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.128547][T21501] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6284: Failed to acquire dquot type 1 [ 484.132062][T21495] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 484.177110][T21501] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6284: Invalid block bitmap block 0 in block_group 0 [ 484.177440][T21501] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6284: Invalid block bitmap block 0 in block_group 0 [ 484.177674][T21501] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6284: Invalid block bitmap block 0 in block_group 0 [ 484.177892][T21501] Quota error (device loop0): write_blk: dquota write failed [ 484.177985][T21501] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 484.178004][T21501] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6284: Failed to acquire dquot type 1 [ 484.178504][T21501] Quota error (device loop0): write_blk: dquota write failed [ 484.178522][T21501] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 484.178543][T21501] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6284: Failed to acquire dquot type 1 [ 484.178716][T21501] EXT4-fs (loop0): 1 orphan inode deleted [ 484.297001][T21501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.326211][T20736] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.463973][T12759] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.513041][ T29] audit: type=1400 audit(1746862005.559:29007): avc: denied { create } for pid=21522 comm="syz.0.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 484.533576][ T29] audit: type=1400 audit(1746862005.559:29008): avc: denied { create } for pid=21522 comm="syz.0.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 484.554726][ T29] audit: type=1400 audit(1746862005.559:29009): avc: denied { create } for pid=21522 comm="syz.0.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 484.575138][ T29] audit: type=1400 audit(1746862005.559:29010): avc: denied { write } for pid=21522 comm="syz.0.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 485.629989][T21566] netlink: 'syz.5.6306': attribute type 10 has an invalid length. [ 485.651104][T21571] serio: Serial port ptm0 [ 485.678566][T21573] loop5: detected capacity change from 0 to 2048 [ 485.725396][T21573] loop5: p1 < > p4 [ 485.732777][T21573] loop5: p4 size 8388608 extends beyond EOD, truncated [ 486.119051][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6318'. [ 486.516046][T21602] serio: Serial port ptm1 [ 487.532924][T21625] serio: Serial port ptm2 [ 488.002746][T21637] netlink: 'syz.1.6330': attribute type 10 has an invalid length. [ 488.899186][T21656] loop2: detected capacity change from 0 to 128 [ 489.206355][T21656] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.251469][T21683] loop5: detected capacity change from 0 to 512 [ 489.258380][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 489.258427][ T29] audit: type=1400 audit(1746862010.299:29039): avc: denied { create } for pid=21667 comm="syz.5.6344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.285038][ T29] audit: type=1400 audit(1746862010.299:29040): avc: denied { setopt } for pid=21667 comm="syz.5.6344" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.454596][T21687] syzkaller0: entered promiscuous mode [ 489.460101][T21687] syzkaller0: entered allmulticast mode [ 489.513783][ T29] audit: type=1400 audit(1746862010.409:29041): avc: denied { create } for pid=21686 comm="syz.1.6349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.533819][ T29] audit: type=1400 audit(1746862010.409:29042): avc: denied { setopt } for pid=21686 comm="syz.1.6349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.631205][T21656] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 489.721310][ T29] audit: type=1400 audit(1746862010.679:29043): avc: denied { mount } for pid=21654 comm="syz.2.6337" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 489.773321][T21683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.785941][T21683] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.986087][ T29] audit: type=1400 audit(1746862010.969:29044): avc: denied { read write } for pid=21667 comm="syz.5.6344" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.010513][ T29] audit: type=1400 audit(1746862010.969:29045): avc: denied { open } for pid=21667 comm="syz.5.6344" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.034233][ T29] audit: type=1400 audit(1746862011.009:29046): avc: denied { ioctl } for pid=21667 comm="syz.5.6344" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.059237][ T29] audit: type=1400 audit(1746862011.009:29047): avc: denied { read } for pid=21667 comm="syz.5.6344" dev="nsfs" ino=4026532524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 490.080762][ T29] audit: type=1400 audit(1746862011.009:29048): avc: denied { open } for pid=21667 comm="syz.5.6344" path="net:[4026532524]" dev="nsfs" ino=4026532524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 490.869205][T14245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.886471][T20736] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.139743][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6354'. [ 491.298618][T21710] loop2: detected capacity change from 0 to 256 [ 491.305697][T21710] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 491.445475][T21710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.546622][T21710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.649681][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 492.214868][T21732] serio: Serial port ptm0 [ 492.333326][T21734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.728731][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6371'. [ 493.916660][T21789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.305938][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 494.306071][ T29] audit: type=1400 audit(1746862015.359:29116): avc: denied { ioctl } for pid=21804 comm="syz.1.6389" path="socket:[69177]" dev="sockfs" ino=69177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 494.378528][ T29] audit: type=1400 audit(1746862015.389:29117): avc: denied { bind } for pid=21804 comm="syz.1.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 494.398690][ T29] audit: type=1400 audit(1746862015.389:29118): avc: denied { setopt } for pid=21804 comm="syz.1.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 494.538241][ T29] audit: type=1400 audit(1746862015.579:29119): avc: denied { mount } for pid=21815 comm="syz.2.6394" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 494.578889][ T29] audit: type=1404 audit(1746862015.629:29120): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 494.607380][ T29] audit: type=1404 audit(1746862015.649:29121): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 494.624264][ T29] audit: type=1400 audit(1746862015.649:29122): avc: denied { prog_load } for pid=21819 comm="syz.3.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 494.643893][ T29] audit: type=1400 audit(1746862015.649:29123): avc: denied { bpf } for pid=21819 comm="syz.3.6396" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 494.664809][ T29] audit: type=1400 audit(1746862015.649:29124): avc: denied { module_request } for pid=21819 comm="syz.3.6396" kmod="fs-ncpfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 494.717204][ T29] audit: type=1400 audit(1746862015.659:29125): avc: denied { read write } for pid=12759 comm="syz-executor" name="loop0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.889704][T21834] netlink: 'syz.0.6401': attribute type 10 has an invalid length. [ 495.484131][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6408'. [ 496.859712][T21897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21897 comm=syz.2.6422 [ 496.872434][T21897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21897 comm=syz.2.6422 [ 497.318830][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.414638][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.499421][T21868] chnl_net:caif_netlink_parms(): no params data found [ 497.700143][T21868] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.707519][T21868] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.758495][T21868] bridge_slave_0: entered allmulticast mode [ 497.767185][T21931] netlink: 404 bytes leftover after parsing attributes in process `syz.3.6433'. [ 497.780183][T21868] bridge_slave_0: entered promiscuous mode [ 497.805864][T21868] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.813239][T21868] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.855172][T21868] bridge_slave_1: entered allmulticast mode [ 497.864597][T21868] bridge_slave_1: entered promiscuous mode [ 497.891149][T21868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.903058][T21868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.937724][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6435'. [ 497.949979][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.968963][T21868] team0: Port device team_slave_0 added [ 497.981825][T21868] team0: Port device team_slave_1 added [ 498.034697][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.066357][T21868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.073549][T21868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.100022][T21868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.124753][T21868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.131906][T21868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.142302][T21941] infiniband syz!: set active [ 498.158014][T21868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.162882][T21941] infiniband syz!: added team_slave_0 [ 498.200964][T21941] RDS/IB: syz!: added [ 498.205192][T21941] smc: adding ib device syz! with port count 1 [ 498.211513][T21941] smc: ib device syz! port 1 has pnetid [ 498.230403][T21868] hsr_slave_0: entered promiscuous mode [ 498.239537][T21868] hsr_slave_1: entered promiscuous mode [ 498.245614][T21868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.253480][T21868] Cannot create hsr debugfs directory [ 498.337892][ T51] bridge_slave_1: left allmulticast mode [ 498.343788][ T51] bridge_slave_1: left promiscuous mode [ 498.349502][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.359858][ T51] bridge_slave_0: left allmulticast mode [ 498.365810][ T51] bridge_slave_0: left promiscuous mode [ 498.371559][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.438119][ T51] bridge0 (unregistering): left allmulticast mode [ 498.506943][ T51]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.515610][ T51] bond_slave_0: left allmulticast mode [ 498.522433][ T51]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.531180][ T51] bond_slave_1: left allmulticast mode [ 498.537582][ T51]  (unregistering): Released all slaves [ 498.622931][T21964] serio: Serial port ptm0 [ 498.786745][T21868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.796045][T21868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.805783][T21868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.815683][T21868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.856763][T21868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.871787][T21868] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.882277][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.889512][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.912434][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.919575][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.019638][T21973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.036894][T21973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.046305][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6446'. [ 499.112419][ T51] hsr_slave_0: left promiscuous mode [ 499.120069][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6449'. [ 499.131118][ T51] hsr_slave_1: left promiscuous mode [ 499.145919][ T51] batman_adv: batadv0: Removing interface: team0 [ 499.163233][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.170826][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.206111][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.213595][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.584185][ T51] veth1_macvtap: left promiscuous mode [ 499.587663][T21996] 9pnet_fd: Insufficient options for proto=fd [ 499.589697][ T51] veth0_macvtap: left promiscuous mode [ 499.601632][ T51] veth1_vlan: left promiscuous mode [ 499.606928][ T51] veth0_vlan: left promiscuous mode [ 499.790017][ T51] team0 (unregistering): Port device team_slave_1 removed [ 499.803289][ T51] team0 (unregistering): Port device team_slave_0 removed [ 499.889086][T21868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.964959][T22003] FAULT_INJECTION: forcing a failure. [ 499.964959][T22003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.978149][T22003] CPU: 0 UID: 0 PID: 22003 Comm: syz.2.6456 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 499.978197][T22003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 499.978290][T22003] Call Trace: [ 499.978300][T22003] [ 499.978311][T22003] __dump_stack+0x1d/0x30 [ 499.978338][T22003] dump_stack_lvl+0xe8/0x140 [ 499.978373][T22003] dump_stack+0x15/0x1b [ 499.978394][T22003] should_fail_ex+0x265/0x280 [ 499.978460][T22003] should_fail+0xb/0x20 [ 499.978495][T22003] should_fail_usercopy+0x1a/0x20 [ 499.978574][T22003] _copy_from_user+0x1c/0xb0 [ 499.978601][T22003] ___sys_sendmsg+0xc1/0x1d0 [ 499.978634][T22003] __x64_sys_sendmsg+0xd4/0x160 [ 499.978679][T22003] x64_sys_call+0x2999/0x2fb0 [ 499.978704][T22003] do_syscall_64+0xd0/0x1a0 [ 499.978731][T22003] ? clear_bhb_loop+0x25/0x80 [ 499.978823][T22003] ? clear_bhb_loop+0x25/0x80 [ 499.978867][T22003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.978893][T22003] RIP: 0033:0x7fa11212e969 [ 499.978912][T22003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.978949][T22003] RSP: 002b:00007fa110797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.978974][T22003] RAX: ffffffffffffffda RBX: 00007fa112355fa0 RCX: 00007fa11212e969 [ 499.979050][T22003] RDX: 0000000000000000 RSI: 0000200000003f40 RDI: 0000000000000009 [ 499.979064][T22003] RBP: 00007fa110797090 R08: 0000000000000000 R09: 0000000000000000 [ 499.979089][T22003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.979113][T22003] R13: 0000000000000000 R14: 00007fa112355fa0 R15: 00007ffe22e9c5c8 [ 499.979134][T22003] [ 500.231473][T21868] veth0_vlan: entered promiscuous mode [ 500.262837][T21868] veth1_vlan: entered promiscuous mode [ 500.305793][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 500.305811][ T29] audit: type=1400 audit(1746862021.359:29193): avc: denied { create } for pid=22025 comm="syz.5.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 500.337274][T22026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.339411][T21868] veth0_macvtap: entered promiscuous mode [ 500.351686][ T29] audit: type=1400 audit(1746862021.379:29194): avc: denied { write } for pid=22025 comm="syz.5.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 500.354207][T22031] 9pnet_fd: Insufficient options for proto=fd [ 500.372216][ T29] audit: type=1400 audit(1746862021.389:29195): avc: denied { bind } for pid=22025 comm="syz.5.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 500.372350][ T29] audit: type=1400 audit(1746862021.389:29196): avc: denied { name_bind } for pid=22025 comm="syz.5.6462" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 500.379252][T22029] loop2: detected capacity change from 0 to 256 [ 500.398295][ T29] audit: type=1400 audit(1746862021.389:29197): avc: denied { node_bind } for pid=22025 comm="syz.5.6462" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 500.398342][ T29] audit: type=1400 audit(1746862021.389:29198): avc: denied { listen } for pid=22025 comm="syz.5.6462" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 500.446175][T22029] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 500.446914][ T29] audit: type=1400 audit(1746862021.389:29199): avc: denied { connect } for pid=22025 comm="syz.5.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 500.473462][T22029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.493231][ T29] audit: type=1400 audit(1746862021.389:29200): avc: denied { name_connect } for pid=22025 comm="syz.5.6462" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 500.503221][T22029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.523102][ T29] audit: type=1400 audit(1746862021.409:29201): avc: denied { getopt } for pid=22025 comm="syz.5.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 500.544975][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6463'. [ 500.575187][T21868] veth1_macvtap: entered promiscuous mode [ 500.584422][T22035] serio: Serial port ptm0 [ 500.589772][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.600902][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.610946][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.621565][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.631514][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.642334][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.652355][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.663129][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.686385][ T29] audit: type=1400 audit(1746862021.529:29202): avc: denied { accept } for pid=22025 comm="syz.5.6462" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 500.705927][T21868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.743566][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.754134][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.764189][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.774782][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.784813][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.795539][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.805408][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.815883][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.826622][T21868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.837115][T21868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.846066][T21868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.854908][T21868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.863788][T21868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.280727][T22060] FAULT_INJECTION: forcing a failure. [ 501.280727][T22060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.294158][T22060] CPU: 1 UID: 0 PID: 22060 Comm: syz.3.6473 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 501.294194][T22060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 501.294209][T22060] Call Trace: [ 501.294216][T22060] [ 501.294224][T22060] __dump_stack+0x1d/0x30 [ 501.294261][T22060] dump_stack_lvl+0xe8/0x140 [ 501.294343][T22060] dump_stack+0x15/0x1b [ 501.294363][T22060] should_fail_ex+0x265/0x280 [ 501.294403][T22060] should_fail+0xb/0x20 [ 501.294454][T22060] should_fail_usercopy+0x1a/0x20 [ 501.294475][T22060] _copy_from_user+0x1c/0xb0 [ 501.294501][T22060] copy_from_bpfptr+0x5c/0x90 [ 501.294534][T22060] bpf_prog_load+0x74a/0x1070 [ 501.294625][T22060] ? security_bpf+0x2b/0x90 [ 501.294658][T22060] __sys_bpf+0x51d/0x790 [ 501.294699][T22060] __x64_sys_bpf+0x41/0x50 [ 501.294802][T22060] x64_sys_call+0x2478/0x2fb0 [ 501.294823][T22060] do_syscall_64+0xd0/0x1a0 [ 501.294843][T22060] ? clear_bhb_loop+0x25/0x80 [ 501.294869][T22060] ? clear_bhb_loop+0x25/0x80 [ 501.294910][T22060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.294954][T22060] RIP: 0033:0x7f36d36ae969 [ 501.294970][T22060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.294992][T22060] RSP: 002b:00007f36d1d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.295015][T22060] RAX: ffffffffffffffda RBX: 00007f36d38d5fa0 RCX: 00007f36d36ae969 [ 501.295030][T22060] RDX: 0000000000000094 RSI: 00002000000012c0 RDI: 0000000000000005 [ 501.295044][T22060] RBP: 00007f36d1d17090 R08: 0000000000000000 R09: 0000000000000000 [ 501.295056][T22060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.295069][T22060] R13: 0000000000000001 R14: 00007f36d38d5fa0 R15: 00007fff1071ad28 [ 501.295145][T22060] [ 501.536424][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6474'. [ 501.582137][T22069] serio: Serial port ptm0 [ 501.665702][T22074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.802581][T22080] loop2: detected capacity change from 0 to 512 [ 501.843959][T22098] FAULT_INJECTION: forcing a failure. [ 501.843959][T22098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.857446][T22098] CPU: 1 UID: 0 PID: 22098 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 501.857529][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 501.857541][T22098] Call Trace: [ 501.857547][T22098] [ 501.857553][T22098] __dump_stack+0x1d/0x30 [ 501.857578][T22098] dump_stack_lvl+0xe8/0x140 [ 501.857595][T22098] dump_stack+0x15/0x1b [ 501.857610][T22098] should_fail_ex+0x265/0x280 [ 501.857714][T22098] should_fail+0xb/0x20 [ 501.857738][T22098] should_fail_usercopy+0x1a/0x20 [ 501.857829][T22098] _copy_to_user+0x20/0xa0 [ 501.857850][T22098] simple_read_from_buffer+0xb5/0x130 [ 501.857927][T22098] proc_fail_nth_read+0x100/0x140 [ 501.857950][T22098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.857972][T22098] vfs_read+0x19d/0x6f0 [ 501.857993][T22098] ? __rcu_read_unlock+0x4f/0x70 [ 501.858012][T22098] ? __fget_files+0x184/0x1c0 [ 501.858063][T22098] ? _raw_spin_unlock+0x26/0x50 [ 501.858157][T22098] ksys_read+0xda/0x1a0 [ 501.858180][T22098] __x64_sys_read+0x40/0x50 [ 501.858201][T22098] x64_sys_call+0x2d77/0x2fb0 [ 501.858230][T22098] do_syscall_64+0xd0/0x1a0 [ 501.858249][T22098] ? clear_bhb_loop+0x25/0x80 [ 501.858268][T22098] ? clear_bhb_loop+0x25/0x80 [ 501.858287][T22098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.858369][T22098] RIP: 0033:0x7f36d36ad37c [ 501.858383][T22098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.858398][T22098] RSP: 002b:00007f36d1d17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.858414][T22098] RAX: ffffffffffffffda RBX: 00007f36d38d5fa0 RCX: 00007f36d36ad37c [ 501.858495][T22098] RDX: 000000000000000f RSI: 00007f36d1d170a0 RDI: 0000000000000003 [ 501.858505][T22098] RBP: 00007f36d1d17090 R08: 0000000000000000 R09: 0000000000000000 [ 501.858560][T22098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.858577][T22098] R13: 0000000000000000 R14: 00007f36d38d5fa0 R15: 00007fff1071ad28 [ 501.858600][T22098] [ 502.067462][T22080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.073168][T22094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22094 comm=syz.1.6485 [ 502.080541][T22080] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.093173][T22094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22094 comm=syz.1.6485 [ 502.169015][T22108] serio: Serial port ptm0 [ 502.302648][T22120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.737252][T20736] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.878456][T22144] serio: Serial port ptm0 [ 502.969223][T22148] loop2: detected capacity change from 0 to 128 [ 503.056786][T22154] loop5: detected capacity change from 0 to 512 [ 503.189541][T22158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6507'. [ 503.216358][T22154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.229314][T22154] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.391140][T22148] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.489293][T22148] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 503.687279][T20736] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.207464][T22182] serio: Serial port ptm0 [ 504.229477][T22184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.239575][T22184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.249278][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6517'. [ 504.297038][T22184] dummy0: entered promiscuous mode [ 504.312336][T22184] macvtap1: entered promiscuous mode [ 504.332656][T22184] macvtap1: entered allmulticast mode [ 504.353464][T22184] dummy0: entered allmulticast mode [ 504.387309][T14245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.470745][T22205] program syz.0.6523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.507869][T22205] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 504.529552][T22205] SET target dimension over the limit! [ 504.746109][T22233] netlink: 'syz.5.6536': attribute type 10 has an invalid length. [ 504.754102][T22233] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6536'. [ 504.763230][T22233] batadv0: entered promiscuous mode [ 504.768497][T22233] batadv0: entered allmulticast mode [ 504.776993][T22233] bridge0: port 3(batadv0) entered blocking state [ 504.783553][T22233] bridge0: port 3(batadv0) entered disabled state [ 504.791690][T22233] bridge0: port 3(batadv0) entered blocking state [ 504.795555][T22229] netlink: 'syz.0.6535': attribute type 10 has an invalid length. [ 504.798281][T22233] bridge0: port 3(batadv0) entered forwarding state [ 504.823879][ T1713] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 504.826226][T22229] batman_adv: batadv0: Adding interface: team0 [ 504.833304][ T1713] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 504.839491][T22229] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.874412][T22229] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 504.915535][T22237] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6536'. [ 504.932357][T22233] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6536'. [ 505.038900][T22250] FAULT_INJECTION: forcing a failure. [ 505.038900][T22250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.052226][T22250] CPU: 0 UID: 0 PID: 22250 Comm: syz.0.6543 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 505.052258][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 505.052274][T22250] Call Trace: [ 505.052281][T22250] [ 505.052290][T22250] __dump_stack+0x1d/0x30 [ 505.052317][T22250] dump_stack_lvl+0xe8/0x140 [ 505.052342][T22250] dump_stack+0x15/0x1b [ 505.052378][T22250] should_fail_ex+0x265/0x280 [ 505.052415][T22250] should_fail+0xb/0x20 [ 505.052442][T22250] should_fail_usercopy+0x1a/0x20 [ 505.052460][T22250] strncpy_from_user+0x25/0x230 [ 505.052565][T22250] ? kmem_cache_alloc_noprof+0x186/0x310 [ 505.052597][T22250] ? getname_flags+0x80/0x3b0 [ 505.052673][T22250] getname_flags+0xae/0x3b0 [ 505.052702][T22250] __x64_sys_execve+0x42/0x70 [ 505.052724][T22250] x64_sys_call+0x13ab/0x2fb0 [ 505.052748][T22250] do_syscall_64+0xd0/0x1a0 [ 505.052775][T22250] ? clear_bhb_loop+0x25/0x80 [ 505.052927][T22250] ? clear_bhb_loop+0x25/0x80 [ 505.052948][T22250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.052968][T22250] RIP: 0033:0x7fa6a04be969 [ 505.052986][T22250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.053006][T22250] RSP: 002b:00007fa69eb27038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 505.053048][T22250] RAX: ffffffffffffffda RBX: 00007fa6a06e5fa0 RCX: 00007fa6a04be969 [ 505.053061][T22250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.053075][T22250] RBP: 00007fa69eb27090 R08: 0000000000000000 R09: 0000000000000000 [ 505.053086][T22250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.053133][T22250] R13: 0000000000000000 R14: 00007fa6a06e5fa0 R15: 00007ffc91e08468 [ 505.053153][T22250] [ 505.337079][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 505.337097][ T29] audit: type=1400 audit(1746862026.389:29345): avc: denied { name_bind } for pid=22261 comm="syz.1.6549" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 505.365289][ T29] audit: type=1400 audit(1746862026.389:29346): avc: denied { node_bind } for pid=22261 comm="syz.1.6549" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 505.480403][ T29] audit: type=1400 audit(1746862026.389:29347): avc: denied { create } for pid=22254 comm="syz.5.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.500190][ T29] audit: type=1400 audit(1746862026.389:29348): avc: denied { ioctl } for pid=22254 comm="syz.5.6544" path="socket:[70964]" dev="sockfs" ino=70964 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 505.525309][ T29] audit: type=1400 audit(1746862026.389:29349): avc: denied { connect } for pid=22254 comm="syz.5.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.545349][ T29] audit: type=1400 audit(1746862026.389:29350): avc: denied { write } for pid=22254 comm="syz.5.6544" path="socket:[70987]" dev="sockfs" ino=70987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.569254][ T29] audit: type=1400 audit(1746862026.419:29351): avc: denied { create } for pid=22254 comm="syz.5.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.589990][ T29] audit: type=1400 audit(1746862026.419:29352): avc: denied { read } for pid=22254 comm="syz.5.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.610651][ T29] audit: type=1400 audit(1746862026.449:29353): avc: denied { create } for pid=22260 comm="syz.2.6548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 505.610677][ T29] audit: type=1400 audit(1746862026.449:29354): avc: denied { execmem } for pid=22267 comm="syz.0.6547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 505.705705][T22277] FAULT_INJECTION: forcing a failure. [ 505.705705][T22277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.719024][T22277] CPU: 1 UID: 0 PID: 22277 Comm: syz.3.6553 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 505.719058][T22277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 505.719074][T22277] Call Trace: [ 505.719082][T22277] [ 505.719093][T22277] __dump_stack+0x1d/0x30 [ 505.719120][T22277] dump_stack_lvl+0xe8/0x140 [ 505.719205][T22277] dump_stack+0x15/0x1b [ 505.719221][T22277] should_fail_ex+0x265/0x280 [ 505.719253][T22277] should_fail+0xb/0x20 [ 505.719341][T22277] should_fail_usercopy+0x1a/0x20 [ 505.719388][T22277] _copy_from_user+0x1c/0xb0 [ 505.719408][T22277] ___sys_sendmsg+0xc1/0x1d0 [ 505.719451][T22277] __x64_sys_sendmsg+0xd4/0x160 [ 505.719553][T22277] x64_sys_call+0x2999/0x2fb0 [ 505.719579][T22277] do_syscall_64+0xd0/0x1a0 [ 505.719607][T22277] ? clear_bhb_loop+0x25/0x80 [ 505.719641][T22277] ? clear_bhb_loop+0x25/0x80 [ 505.719669][T22277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.719689][T22277] RIP: 0033:0x7f36d36ae969 [ 505.719704][T22277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.719723][T22277] RSP: 002b:00007f36d1d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.719741][T22277] RAX: ffffffffffffffda RBX: 00007f36d38d5fa0 RCX: 00007f36d36ae969 [ 505.719832][T22277] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 505.719844][T22277] RBP: 00007f36d1d17090 R08: 0000000000000000 R09: 0000000000000000 [ 505.719855][T22277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.719866][T22277] R13: 0000000000000000 R14: 00007f36d38d5fa0 R15: 00007fff1071ad28 [ 505.719885][T22277] [ 506.046531][T22296] serio: Serial port ptm0 [ 506.077889][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6559'. [ 506.089484][T22290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22290 comm=+}[@ [ 506.488323][T22331] FAULT_INJECTION: forcing a failure. [ 506.488323][T22331] name failslab, interval 1, probability 0, space 0, times 0 [ 506.501161][T22331] CPU: 0 UID: 0 PID: 22331 Comm: syz.1.6575 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 506.501224][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 506.501240][T22331] Call Trace: [ 506.501247][T22331] [ 506.501254][T22331] __dump_stack+0x1d/0x30 [ 506.501303][T22331] dump_stack_lvl+0xe8/0x140 [ 506.501328][T22331] dump_stack+0x15/0x1b [ 506.501349][T22331] should_fail_ex+0x265/0x280 [ 506.501443][T22331] should_failslab+0x8c/0xb0 [ 506.501472][T22331] __kvmalloc_node_noprof+0x126/0x4d0 [ 506.501497][T22331] ? alloc_fdtable+0xf8/0x1b0 [ 506.501552][T22331] alloc_fdtable+0xf8/0x1b0 [ 506.501581][T22331] dup_fd+0x4c7/0x540 [ 506.501636][T22331] ksys_unshare+0x346/0x6d0 [ 506.501672][T22331] ? ksys_write+0x16e/0x1a0 [ 506.501770][T22331] __x64_sys_unshare+0x1f/0x30 [ 506.501867][T22331] x64_sys_call+0x2d4b/0x2fb0 [ 506.501888][T22331] do_syscall_64+0xd0/0x1a0 [ 506.501994][T22331] ? clear_bhb_loop+0x25/0x80 [ 506.502022][T22331] ? clear_bhb_loop+0x25/0x80 [ 506.502042][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.502077][T22331] RIP: 0033:0x7f56ee45e969 [ 506.502094][T22331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.502116][T22331] RSP: 002b:00007f56ecac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 506.502139][T22331] RAX: ffffffffffffffda RBX: 00007f56ee685fa0 RCX: 00007f56ee45e969 [ 506.502154][T22331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 506.502197][T22331] RBP: 00007f56ecac7090 R08: 0000000000000000 R09: 0000000000000000 [ 506.502209][T22331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.502222][T22331] R13: 0000000000000000 R14: 00007f56ee685fa0 R15: 00007fff47b5ac18 [ 506.502272][T22331] [ 506.965757][T22338] serio: Serial port ptm0 [ 507.121855][T22357] loop5: detected capacity change from 0 to 1024 [ 507.138373][T22357] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 507.148393][T22357] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 507.161303][T22357] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #32: comm syz.5.6579: iget: special inode unallocated [ 507.175381][T22357] EXT4-fs (loop5): Remounting filesystem read-only [ 507.181979][T22357] EXT4-fs (loop5): no journal found [ 507.187382][T22357] EXT4-fs (loop5): can't get journal size [ 507.220235][T22357] EXT4-fs (loop5): failed to initialize system zone (-117) [ 507.227806][T22357] EXT4-fs (loop5): mount failed [ 507.254968][T22368] program syz.2.6584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.264577][T22368] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 507.454986][T22400] serio: Serial port ptm0 [ 507.466588][T22394] loop0: detected capacity change from 0 to 128 [ 507.480854][T22404] program syz.3.6600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.559899][T22394] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 507.616731][T22394] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 507.680152][T21868] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.699264][T22435] FAULT_INJECTION: forcing a failure. [ 507.699264][T22435] name failslab, interval 1, probability 0, space 0, times 0 [ 507.711980][T22435] CPU: 0 UID: 0 PID: 22435 Comm: syz.3.6614 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 507.712084][T22435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 507.712100][T22435] Call Trace: [ 507.712108][T22435] [ 507.712115][T22435] __dump_stack+0x1d/0x30 [ 507.712135][T22435] dump_stack_lvl+0xe8/0x140 [ 507.712154][T22435] dump_stack+0x15/0x1b [ 507.712170][T22435] should_fail_ex+0x265/0x280 [ 507.712244][T22435] should_failslab+0x8c/0xb0 [ 507.712346][T22435] kmem_cache_alloc_noprof+0x50/0x310 [ 507.712387][T22435] ? security_inode_alloc+0x37/0x100 [ 507.712415][T22435] security_inode_alloc+0x37/0x100 [ 507.712440][T22435] inode_init_always_gfp+0x4b7/0x500 [ 507.712530][T22435] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 507.712604][T22435] alloc_inode+0x58/0x170 [ 507.712629][T22435] new_inode+0x1d/0xe0 [ 507.712662][T22435] shmem_get_inode+0x244/0x750 [ 507.712832][T22435] __shmem_file_setup+0x122/0x1f0 [ 507.712865][T22435] shmem_file_setup+0x3b/0x50 [ 507.712896][T22435] __se_sys_memfd_create+0x2c3/0x590 [ 507.712929][T22435] __x64_sys_memfd_create+0x31/0x40 [ 507.713036][T22435] x64_sys_call+0x122f/0x2fb0 [ 507.713063][T22435] do_syscall_64+0xd0/0x1a0 [ 507.713123][T22435] ? clear_bhb_loop+0x25/0x80 [ 507.713150][T22435] ? clear_bhb_loop+0x25/0x80 [ 507.713177][T22435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.713265][T22435] RIP: 0033:0x7f36d36ae969 [ 507.713283][T22435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.713305][T22435] RSP: 002b:00007f36d1d16d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 507.713377][T22435] RAX: ffffffffffffffda RBX: 00000000000005e7 RCX: 00007f36d36ae969 [ 507.713452][T22435] RDX: 00007f36d1d16dec RSI: 0000000000000000 RDI: 00007f36d3731444 [ 507.713466][T22435] RBP: 0000200000000000 R08: 00007f36d1d16b07 R09: 0000000000000000 [ 507.713480][T22435] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 507.713494][T22435] R13: 00007f36d1d16dec R14: 00007f36d1d16df0 R15: 00007fff1071ad28 [ 507.713516][T22435] [ 507.961361][T22439] FAULT_INJECTION: forcing a failure. [ 507.961361][T22439] name failslab, interval 1, probability 0, space 0, times 0 [ 507.974056][T22439] CPU: 0 UID: 0 PID: 22439 Comm: syz.0.6612 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 507.974092][T22439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 507.974107][T22439] Call Trace: [ 507.974115][T22439] [ 507.974124][T22439] __dump_stack+0x1d/0x30 [ 507.974219][T22439] dump_stack_lvl+0xe8/0x140 [ 507.974244][T22439] dump_stack+0x15/0x1b [ 507.974265][T22439] should_fail_ex+0x265/0x280 [ 507.974311][T22439] should_failslab+0x8c/0xb0 [ 507.974373][T22439] __kvmalloc_node_noprof+0x126/0x4d0 [ 507.974399][T22439] ? alloc_fdtable+0xf8/0x1b0 [ 507.974432][T22439] alloc_fdtable+0xf8/0x1b0 [ 507.974462][T22439] dup_fd+0x4c7/0x540 [ 507.974535][T22439] ksys_unshare+0x346/0x6d0 [ 507.974626][T22439] ? ksys_write+0x16e/0x1a0 [ 507.974653][T22439] __x64_sys_unshare+0x1f/0x30 [ 507.974682][T22439] x64_sys_call+0x2d4b/0x2fb0 [ 507.974703][T22439] do_syscall_64+0xd0/0x1a0 [ 507.974801][T22439] ? clear_bhb_loop+0x25/0x80 [ 507.974822][T22439] ? clear_bhb_loop+0x25/0x80 [ 507.974909][T22439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.974930][T22439] RIP: 0033:0x7fa6a04be969 [ 507.974944][T22439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.975034][T22439] RSP: 002b:00007fa69eb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 507.975052][T22439] RAX: ffffffffffffffda RBX: 00007fa6a06e5fa0 RCX: 00007fa6a04be969 [ 507.975065][T22439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 507.975077][T22439] RBP: 00007fa69eb27090 R08: 0000000000000000 R09: 0000000000000000 [ 507.975118][T22439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.975130][T22439] R13: 0000000000000000 R14: 00007fa6a06e5fa0 R15: 00007ffc91e08468 [ 507.975184][T22439] [ 508.346104][T22467] serio: Serial port ptm0 [ 508.388064][T22475] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6630'. [ 508.699472][T22501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.730158][T22497] loop5: detected capacity change from 0 to 128 [ 508.809385][T22497] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 508.825381][T22497] ext4 filesystem being mounted at /567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 508.881649][T14245] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.067943][T22534] serio: Serial port ptm0 [ 509.715155][T22569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6666'. [ 509.740414][T22567] geneve2: entered promiscuous mode [ 509.745845][T22567] geneve2: entered allmulticast mode [ 509.781460][T22572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6664'. [ 509.967130][T22584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22584 comm=syz.5.6672 [ 509.979892][T22584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22584 comm=syz.5.6672 [ 510.072126][T22590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.166470][T22604] loop0: detected capacity change from 0 to 256 [ 510.173196][T22604] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 510.187217][T22604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.195914][T22604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.205781][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6681'. [ 511.232923][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 511.232944][ T29] audit: type=1326 audit(1746862031.389:29697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.263320][ T29] audit: type=1326 audit(1746862031.389:29698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.287253][ T29] audit: type=1326 audit(1746862031.389:29699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.311070][ T29] audit: type=1326 audit(1746862031.389:29700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.334903][ T29] audit: type=1326 audit(1746862031.389:29701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.358694][ T29] audit: type=1326 audit(1746862031.389:29702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.382589][ T29] audit: type=1326 audit(1746862031.389:29703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.406997][ T29] audit: type=1326 audit(1746862031.389:29704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.431072][ T29] audit: type=1326 audit(1746862031.389:29705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.454933][ T29] audit: type=1326 audit(1746862031.389:29706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.3.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 511.849458][T22631] serio: Serial port ptm0 [ 512.015034][T22635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22635 comm=syz.0.6689 [ 512.027918][T22635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22635 comm=syz.0.6689 [ 512.120057][T22637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.129149][T22637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.139558][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6690'. [ 512.330338][T22653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22653 comm=syz.5.6695 [ 512.343057][T22653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22653 comm=syz.5.6695 [ 512.406709][T22661] team0: Device gtp0 is of different type [ 512.434929][T22657] netlink: 'syz.0.6698': attribute type 10 has an invalid length. [ 512.462285][T22665] SELinux: policydb magic number 0xf97cffac does not match expected magic number 0xf97cff8c [ 512.472818][T22665] SELinux: failed to load policy [ 513.253494][T22683] loop2: detected capacity change from 0 to 128 [ 513.663326][T22701] geneve2: entered promiscuous mode [ 513.668706][T22701] geneve2: entered allmulticast mode [ 514.275683][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6723'. [ 514.532049][T22742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.609855][T22746] serio: Serial port ptm0 [ 514.795048][T22754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.806108][T22754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.816029][T22754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6731'. [ 514.852065][T22767] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6737'. [ 515.141269][T22783] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6743'. [ 515.151680][T22783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6743'. [ 515.165939][T22783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6743'. [ 515.545049][T22799] loop2: detected capacity change from 0 to 128 [ 515.569352][T22799] loop2: detected capacity change from 0 to 512 [ 515.604563][T22799] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 515.620342][T22799] EXT4-fs (loop2): 1 truncate cleaned up [ 515.626748][T22799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.641835][T22799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.676102][T22807] serio: Serial port ptm0 [ 515.827229][T22816] loop2: detected capacity change from 0 to 256 [ 515.835894][T22816] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 515.871341][T22816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.903842][T22816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.925750][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6754'. [ 515.979942][T22828] loop0: detected capacity change from 0 to 1024 [ 515.991503][T22828] EXT4-fs: Ignoring removed oldalloc option [ 516.002685][T22828] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 516.108761][T22828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.173133][T21868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.251285][T22845] FAULT_INJECTION: forcing a failure. [ 516.251285][T22845] name failslab, interval 1, probability 0, space 0, times 0 [ 516.264220][T22845] CPU: 0 UID: 0 PID: 22845 Comm: syz.3.6766 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 516.264255][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 516.264271][T22845] Call Trace: [ 516.264279][T22845] [ 516.264289][T22845] __dump_stack+0x1d/0x30 [ 516.264315][T22845] dump_stack_lvl+0xe8/0x140 [ 516.264340][T22845] dump_stack+0x15/0x1b [ 516.264366][T22845] should_fail_ex+0x265/0x280 [ 516.264399][T22845] should_failslab+0x8c/0xb0 [ 516.264510][T22845] __kvmalloc_node_noprof+0x126/0x4d0 [ 516.264535][T22845] ? alloc_netdev_mqs+0xa1/0xab0 [ 516.264558][T22845] alloc_netdev_mqs+0xa1/0xab0 [ 516.264575][T22845] ? __pfx_sl_setup+0x10/0x10 [ 516.264597][T22845] slip_open+0x2d1/0x920 [ 516.264691][T22845] ? vfree+0x374/0x3f0 [ 516.264718][T22845] ? up_write+0x18/0x60 [ 516.264746][T22845] tty_ldisc_open+0x5a/0xb0 [ 516.264770][T22845] tty_set_ldisc+0x1db/0x380 [ 516.264797][T22845] tiocsetd+0x51/0x60 [ 516.264848][T22845] tty_ioctl+0xa7f/0xb80 [ 516.264901][T22845] ? __pfx_tty_ioctl+0x10/0x10 [ 516.264949][T22845] __se_sys_ioctl+0xcb/0x140 [ 516.264976][T22845] __x64_sys_ioctl+0x43/0x50 [ 516.265057][T22845] x64_sys_call+0x19a8/0x2fb0 [ 516.265084][T22845] do_syscall_64+0xd0/0x1a0 [ 516.265127][T22845] ? clear_bhb_loop+0x25/0x80 [ 516.265154][T22845] ? clear_bhb_loop+0x25/0x80 [ 516.265180][T22845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.265207][T22845] RIP: 0033:0x7f36d36ae969 [ 516.265225][T22845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.265314][T22845] RSP: 002b:00007f36d1d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.265332][T22845] RAX: ffffffffffffffda RBX: 00007f36d38d5fa0 RCX: 00007f36d36ae969 [ 516.265345][T22845] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 516.265371][T22845] RBP: 00007f36d1d17090 R08: 0000000000000000 R09: 0000000000000000 [ 516.265387][T22845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.265402][T22845] R13: 0000000000000000 R14: 00007f36d38d5fa0 R15: 00007fff1071ad28 [ 516.265425][T22845] [ 516.536334][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 516.536409][ T29] audit: type=1404 audit(1746862037.589:30025): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 516.564603][ T29] audit: type=1400 audit(1746862037.619:30026): avc: denied { prog_load } for pid=22846 comm="syz.5.6767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 516.585278][ T29] audit: type=1400 audit(1746862037.619:30027): avc: denied { prog_load } for pid=22846 comm="syz.5.6767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 516.620067][ T29] audit: type=1404 audit(1746862037.669:30028): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 516.635987][ T29] audit: type=1400 audit(1746862037.669:30029): avc: denied { prog_load } for pid=22843 comm="syz.0.6765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.655625][ T29] audit: type=1400 audit(1746862037.669:30030): avc: denied { bpf } for pid=22843 comm="syz.0.6765" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.676564][ T29] audit: type=1400 audit(1746862037.669:30031): avc: denied { module_request } for pid=22843 comm="syz.0.6765" kmod="fs-ncpfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 516.766172][ T29] audit: type=1400 audit(1746862037.719:30032): avc: denied { perfmon } for pid=22850 comm="syz.3.6768" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.787511][ T29] audit: type=1400 audit(1746862037.719:30033): avc: denied { prog_run } for pid=22850 comm="syz.3.6768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.806968][ T29] audit: type=1400 audit(1746862037.739:30034): avc: denied { read write } for pid=20736 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.847256][T22865] loop0: detected capacity change from 0 to 1024 [ 516.914190][T22865] EXT4-fs: Ignoring removed bh option [ 516.919806][T22865] EXT4-fs: inline encryption not supported [ 516.933544][T22865] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 516.946860][T22865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 517.017506][T22865] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.6773: lblock 2 mapped to illegal pblock 2 (length 1) [ 517.104212][T22875] loop2: detected capacity change from 0 to 512 [ 517.212263][T22865] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.6773: lblock 0 mapped to illegal pblock 48 (length 1) [ 517.275908][T22875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.288862][T22875] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.565243][T22865] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6773: Failed to acquire dquot type 0 [ 517.631471][T22865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 517.923278][T22875] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 517.946921][T22865] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.6773: mark_inode_dirty error [ 518.018542][T22865] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 518.057993][T22865] EXT4-fs (loop0): 1 orphan inode deleted [ 518.074345][ T3404] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 518.099996][T22892] netlink: 'syz.5.6780': attribute type 8 has an invalid length. [ 518.109428][T22865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.132604][ T3404] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 518.185224][T22865] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 518.330104][T21868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.719193][T20736] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.888988][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.926675][T22912] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 518.946891][T22912] bridge1: entered allmulticast mode [ 518.967176][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.029862][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.062508][T22926] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22926 comm=syz.0.6789 [ 519.075306][T22926] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22926 comm=syz.0.6789 [ 519.136528][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.232973][T22903] chnl_net:caif_netlink_parms(): no params data found [ 519.246657][T22933] program syz.0.6791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.274104][T22933] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 519.317170][T22933] SET target dimension over the limit! [ 519.359483][T22903] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.366649][T22903] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.408948][T22903] bridge_slave_0: entered allmulticast mode [ 519.416471][T22951] serio: Serial port ptm0 [ 519.430171][T22903] bridge_slave_0: entered promiscuous mode [ 519.448570][T22953] geneve2: entered promiscuous mode [ 519.453968][T22953] geneve2: entered allmulticast mode [ 519.501079][T22903] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.508490][T22903] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.521366][T22903] bridge_slave_1: entered allmulticast mode [ 519.528814][T22903] bridge_slave_1: entered promiscuous mode [ 519.549620][ T31] bridge0: port 3(batadv0) entered disabled state [ 519.566611][ T31] bridge_slave_1: left allmulticast mode [ 519.572365][ T31] bridge_slave_1: left promiscuous mode [ 519.578308][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.648081][ T31] bridge_slave_0: left allmulticast mode [ 519.653962][ T31] bridge_slave_0: left promiscuous mode [ 519.659813][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.803530][T22977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.957180][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.992551][ T31] bond_slave_0: left allmulticast mode [ 520.002482][T22984] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 520.024483][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.057405][ T31] bond_slave_1: left allmulticast mode [ 520.091699][ T1067] IPVS: starting estimator thread 0... [ 520.098439][ T31] bond0 (unregistering): Released all slaves [ 520.150447][T22903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.164530][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6810'. [ 520.173538][T22984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6810'. [ 520.193973][T22903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.203810][T22987] IPVS: using max 2400 ests per chain, 120000 per kthread [ 520.233641][ T31] hsr_slave_0: left promiscuous mode [ 520.240863][ T31] hsr_slave_1: left promiscuous mode [ 520.248221][ T31] batman_adv: batadv0: Removing interface: team0 [ 520.261427][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.269023][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.285841][T22995] netlink: 'syz.0.6813': attribute type 10 has an invalid length. [ 520.295322][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.302854][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.317747][ T31] veth1_macvtap: left promiscuous mode [ 520.333652][ T31] veth0_macvtap: left promiscuous mode [ 520.339433][ T31] veth1_vlan: left promiscuous mode [ 520.344822][ T31] veth0_vlan: left promiscuous mode [ 520.474553][ T31] team0 (unregistering): Port device team_slave_1 removed [ 520.501652][ T31] team0 (unregistering): Port device team_slave_0 removed [ 520.553630][T22903] team0: Port device team_slave_0 added [ 520.567260][T22903] team0: Port device team_slave_1 added [ 520.617730][T22903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.624857][T22903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.651176][T22903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.669429][T23010] loop2: detected capacity change from 0 to 128 [ 520.688384][T23010] loop2: detected capacity change from 0 to 512 [ 520.696509][T22903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.703489][T22903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.729561][T22903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.987750][T23016] program syz.1.6821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.001629][T22903] hsr_slave_0: entered promiscuous mode [ 521.014263][T23010] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 521.028057][T22903] hsr_slave_1: entered promiscuous mode [ 521.045090][T22903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.055531][T23010] EXT4-fs (loop2): 1 truncate cleaned up [ 521.062455][T23010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.076793][T23016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 521.085282][T22903] Cannot create hsr debugfs directory [ 521.131392][T23010] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.169587][T23022] SET target dimension over the limit! [ 521.549583][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 521.549597][ T29] audit: type=1400 audit(1746862042.599:30327): avc: denied { perfmon } for pid=23028 comm="syz.1.6823" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.579200][ T29] audit: type=1400 audit(1746862042.629:30328): avc: denied { watch } for pid=23028 comm="syz.1.6823" path="/259" dev="tmpfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 521.693337][ T29] audit: type=1326 audit(1746862042.739:30329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.2.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa11212d2d0 code=0x7ffc0000 [ 521.717127][ T29] audit: type=1400 audit(1746862042.739:30330): avc: denied { read write } for pid=23008 comm="syz.2.6819" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 521.770472][ T29] audit: type=1400 audit(1746862042.789:30331): avc: denied { open } for pid=23008 comm="syz.2.6819" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 521.794871][ T29] audit: type=1326 audit(1746862042.789:30332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.2.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa11212e56b code=0x7ffc0000 [ 521.818511][ T29] audit: type=1400 audit(1746862042.789:30333): avc: denied { ioctl } for pid=23008 comm="syz.2.6819" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 521.844231][ T29] audit: type=1326 audit(1746862042.789:30334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.2.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa11212d5ca code=0x7ffc0000 [ 521.867874][ T29] audit: type=1326 audit(1746862042.789:30335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.2.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 521.891778][ T29] audit: type=1326 audit(1746862042.799:30336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.2.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 522.013671][T23042] loop0: detected capacity change from 0 to 128 [ 522.048218][T23042] loop0: detected capacity change from 0 to 512 [ 522.058135][T23042] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 522.066820][T23042] EXT4-fs (loop0): 1 truncate cleaned up [ 522.073084][T23042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.089778][T23042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.190365][T22903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.218655][T22903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.230136][T22903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 522.249350][T22903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 522.264134][T23055] program syz.0.6832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.309072][T23055] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 522.332124][T23057] loop2: detected capacity change from 0 to 256 [ 522.341361][T22903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.361315][T23057] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 522.369780][T22903] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.386647][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.389439][T23062] serio: Serial port ptm0 [ 522.393792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.399868][T23057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.418122][T23057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.418305][T22351] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.431840][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6833'. [ 522.433083][T22351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.472536][T22903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.508035][T23068] geneve2: entered promiscuous mode [ 522.513329][T23068] geneve2: entered allmulticast mode [ 522.552044][T22903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.559437][T23075] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6837'. [ 522.733336][T22903] veth0_vlan: entered promiscuous mode [ 522.741964][T22903] veth1_vlan: entered promiscuous mode [ 522.760431][T22903] veth0_macvtap: entered promiscuous mode [ 522.769274][T22903] veth1_macvtap: entered promiscuous mode [ 522.780784][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.791384][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.801620][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.812337][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.822246][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.832761][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.842632][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.853106][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.873742][T23101] loop0: detected capacity change from 0 to 512 [ 522.881904][T22903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.899268][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.909835][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.919773][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.930274][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.940185][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.950712][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.960627][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.971162][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.883365][T23105] 9pnet_fd: Insufficient options for proto=fd [ 523.935211][T22903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.001914][T22903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.010749][T22903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.019476][T22903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.028249][T22903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.714608][T23102] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 525.715673][T23101] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 525.724941][T23101] EXT4-fs: failed to create workqueue [ 525.739999][T23101] EXT4-fs (loop0): mount failed [ 525.768666][T23123] program syz.2.6849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.780434][T23123] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 525.797364][T23123] SET target dimension over the limit! [ 525.960051][T23127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 526.017488][T23137] loop2: detected capacity change from 0 to 128 [ 526.039906][T23130] loop0: detected capacity change from 0 to 128 [ 526.190245][T23130] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 526.212684][T23151] serio: Serial port ptm0 [ 526.213438][T23130] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 526.521675][T23160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 526.673200][T21868] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 527.331367][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 527.331381][ T29] audit: type=1400 audit(1746862048.379:30521): avc: denied { mount } for pid=23185 comm="syz.3.6869" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 527.363682][T23187] loop0: detected capacity change from 0 to 512 [ 527.393441][ T29] audit: type=1326 audit(1746862048.439:30522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.430174][T23189] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6868'. [ 527.462325][T23189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.472908][ T29] audit: type=1326 audit(1746862048.479:30523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.496827][ T29] audit: type=1326 audit(1746862048.479:30524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.520528][ T29] audit: type=1326 audit(1746862048.479:30525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.544376][ T29] audit: type=1326 audit(1746862048.479:30526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.568052][ T29] audit: type=1326 audit(1746862048.479:30527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.591798][ T29] audit: type=1326 audit(1746862048.479:30528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.615415][ T29] audit: type=1326 audit(1746862048.479:30529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.639060][ T29] audit: type=1326 audit(1746862048.479:30530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.2.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11212e969 code=0x7ffc0000 [ 527.796491][T23189] bond_slave_0: left allmulticast mode [ 527.839588][T23198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.888710][T23189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.912321][T23189] bond_slave_1: left allmulticast mode [ 527.932042][T23200] netlink: 'syz.3.6873': attribute type 10 has an invalid length. [ 527.941459][T23189] bond0 (unregistering): Released all slaves [ 528.142017][T23187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.154597][T23187] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.872506][T23210] netlink: 'syz.1.6876': attribute type 10 has an invalid length. [ 528.942009][T23223] program syz.2.6879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.018441][T23223] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 529.058934][T23227] serio: Serial port ptm0 [ 529.067765][T23223] SET target dimension over the limit! [ 529.153091][T21868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.195081][T23246] serio: Serial port ptm0 [ 529.205340][T23249] program syz.5.6890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.215032][T23249] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 529.226200][T23249] SET target dimension over the limit! [ 529.350628][T23257] netlink: 'syz.1.6894': attribute type 10 has an invalid length. [ 529.389040][T23265] serio: Serial port ptm0 [ 529.397748][T23260] loop2: detected capacity change from 0 to 256 [ 529.418558][T23260] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 529.722801][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6893'. [ 529.785483][T23276] team_slave_0: entered promiscuous mode [ 529.791291][T23276] team_slave_1: entered promiscuous mode [ 529.833150][T23276] macvtap1: entered promiscuous mode [ 529.838615][T23276] team0: entered promiscuous mode [ 529.844087][T23276] macvtap1: entered allmulticast mode [ 529.849636][T23276] team0: entered allmulticast mode [ 529.854804][T23276] team_slave_0: entered allmulticast mode [ 529.860602][T23276] team_slave_1: entered allmulticast mode [ 529.875811][T23276] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 529.990136][T23285] serio: Serial port ptm0 [ 530.445388][T23299] netlink: 'syz.0.6907': attribute type 10 has an invalid length. [ 530.565829][T23306] serio: Serial port ptm0 [ 530.575599][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6909'. [ 530.634297][T23308] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 530.685786][T23310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.378909][T23322] loop5: detected capacity change from 0 to 512 [ 531.427566][T23322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.440594][T23322] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.723262][T23329] loop0: detected capacity change from 0 to 128 [ 531.806251][T23329] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.125477][T23329] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 532.248722][T23352] serio: Serial port ptm0 [ 532.321448][T21868] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 532.472985][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 532.473000][ T29] audit: type=1400 audit(1746862053.519:30670): avc: denied { ioctl } for pid=23365 comm="syz.3.6929" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.504690][T23366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.513117][T23366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.714303][T22903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.775704][T23386] team0: Device gtp0 is of different type [ 532.855095][ T29] audit: type=1326 audit(1746862053.909:30671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 532.878918][ T29] audit: type=1326 audit(1746862053.909:30672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 532.902550][ T29] audit: type=1326 audit(1746862053.909:30673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 532.926238][ T29] audit: type=1326 audit(1746862053.909:30674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 532.949720][ T29] audit: type=1326 audit(1746862053.909:30675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 532.981013][ T29] audit: type=1326 audit(1746862053.909:30676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 533.004593][ T29] audit: type=1326 audit(1746862053.909:30677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 533.028276][ T29] audit: type=1326 audit(1746862053.909:30678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 533.052397][ T29] audit: type=1326 audit(1746862053.909:30679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.5.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 533.183110][T23424] team0: Device gtp0 is of different type [ 533.270722][T23436] loop2: detected capacity change from 0 to 256 [ 533.282205][T23438] openvswitch: netlink: Message has 6 unknown bytes. [ 533.289360][T23436] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 533.299909][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.310699][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.441072][T23453] loop5: detected capacity change from 0 to 164 [ 533.448005][T23453] iso9660: Unknown parameter './file1' [ 533.459413][T23453] loop5: detected capacity change from 0 to 512 [ 533.466504][T23453] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 533.513805][T23462] team0: Device gtp0 is of different type [ 533.553368][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6965'. [ 533.567460][T23465] team0 (unregistering): Port device team_slave_0 removed [ 533.576684][T23465] team0 (unregistering): Port device team_slave_1 removed [ 533.832579][T23471] openvswitch: netlink: Message has 6 unknown bytes. [ 534.062977][T23486] loop0: detected capacity change from 0 to 512 [ 534.166644][T23486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.179550][T23486] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.581852][T23498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23498 comm=syz.5.6980 [ 534.594621][T23498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23498 comm=syz.5.6980 [ 534.651667][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.683003][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.831096][T23508] loop5: detected capacity change from 0 to 128 [ 534.849756][T23508] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.873451][T23508] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 534.929764][T22903] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.217177][T23529] openvswitch: netlink: Message has 6 unknown bytes. [ 535.327253][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6993'. [ 535.374218][T23533] netlink: 'syz.3.6994': attribute type 10 has an invalid length. [ 535.452284][T23537] program syz.3.6995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.492729][T23537] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.523447][T21868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.770799][T23549] openvswitch: netlink: Message has 6 unknown bytes. [ 535.852731][T23555] program syz.3.7003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.865357][T23555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.885584][T23555] SET target dimension over the limit! [ 535.962226][T23560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.972721][T23560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.126291][T23569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 537.157526][T23590] loop5: detected capacity change from 0 to 256 [ 537.212694][T23590] FAULT_INJECTION: forcing a failure. [ 537.212694][T23590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.226177][T23590] CPU: 1 UID: 0 PID: 23590 Comm: syz.5.7015 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 537.226206][T23590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 537.226218][T23590] Call Trace: [ 537.226227][T23590] [ 537.226236][T23590] __dump_stack+0x1d/0x30 [ 537.226364][T23590] dump_stack_lvl+0xe8/0x140 [ 537.226387][T23590] dump_stack+0x15/0x1b [ 537.226408][T23590] should_fail_ex+0x265/0x280 [ 537.226507][T23590] should_fail+0xb/0x20 [ 537.226584][T23590] should_fail_usercopy+0x1a/0x20 [ 537.226602][T23590] _copy_to_user+0x20/0xa0 [ 537.226622][T23590] simple_read_from_buffer+0xb5/0x130 [ 537.226737][T23590] proc_fail_nth_read+0x100/0x140 [ 537.226769][T23590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 537.226807][T23590] vfs_read+0x19d/0x6f0 [ 537.226838][T23590] ? putname+0xda/0x100 [ 537.226890][T23590] ksys_read+0xda/0x1a0 [ 537.226914][T23590] __x64_sys_read+0x40/0x50 [ 537.226941][T23590] x64_sys_call+0x2d77/0x2fb0 [ 537.227024][T23590] do_syscall_64+0xd0/0x1a0 [ 537.227128][T23590] ? clear_bhb_loop+0x25/0x80 [ 537.227150][T23590] ? clear_bhb_loop+0x25/0x80 [ 537.227173][T23590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.227215][T23590] RIP: 0033:0x7f2552c8d37c [ 537.227234][T23590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 537.227260][T23590] RSP: 002b:00007f25512f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 537.227281][T23590] RAX: ffffffffffffffda RBX: 00007f2552eb5fa0 RCX: 00007f2552c8d37c [ 537.227297][T23590] RDX: 000000000000000f RSI: 00007f25512f70a0 RDI: 0000000000000009 [ 537.227312][T23590] RBP: 00007f25512f7090 R08: 0000000000000000 R09: 0000000000000000 [ 537.227327][T23590] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 537.227342][T23590] R13: 0000000000000000 R14: 00007f2552eb5fa0 R15: 00007ffe13e00b28 [ 537.227365][T23590] [ 537.475599][ T29] kauditd_printk_skb: 1036 callbacks suppressed [ 537.475614][ T29] audit: type=1326 audit(1746862058.529:31716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6a04b5927 code=0x7ffc0000 [ 537.505670][ T29] audit: type=1326 audit(1746862058.529:31717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6a045ab39 code=0x7ffc0000 [ 537.529492][ T29] audit: type=1326 audit(1746862058.529:31718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa6a04be969 code=0x7ffc0000 [ 537.655613][T23602] loop2: detected capacity change from 0 to 256 [ 537.671498][ T29] audit: type=1326 audit(1746862058.609:31719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6a04b5927 code=0x7ffc0000 [ 537.695422][ T29] audit: type=1326 audit(1746862058.609:31720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6a045ab39 code=0x7ffc0000 [ 537.719096][ T29] audit: type=1326 audit(1746862058.609:31721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa6a04be969 code=0x7ffc0000 [ 537.742898][ T29] audit: type=1326 audit(1746862058.619:31722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23597 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 537.766615][ T29] audit: type=1326 audit(1746862058.619:31723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23597 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 537.790600][ T29] audit: type=1326 audit(1746862058.619:31724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23597 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 537.814282][ T29] audit: type=1326 audit(1746862058.619:31725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23597 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 537.855329][T23602] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 537.869436][T23602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.879876][T23602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.939638][T23615] serio: Serial port ptm0 [ 537.956819][T23619] program syz.0.7028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.966396][T23619] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 537.977122][T23619] SET target dimension over the limit! [ 538.004211][T23622] loop0: detected capacity change from 0 to 164 [ 538.011193][T23622] iso9660: Unknown parameter './file1' [ 538.021666][T23622] loop0: detected capacity change from 0 to 512 [ 538.028557][T23622] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 538.120680][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7029'. [ 538.131848][T23629] batman_adv: batadv0: Removing interface: team0 [ 538.142266][T23629] team0 (unregistering): Port device team_slave_0 removed [ 538.152222][T23629] team0 (unregistering): Port device team_slave_1 removed [ 538.318981][T23633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23633 comm=syz.1.7032 [ 538.331875][T23633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23633 comm=syz.1.7032 [ 538.411695][T23637] openvswitch: netlink: Message has 6 unknown bytes. [ 538.666711][T23661] loop2: detected capacity change from 0 to 256 [ 538.673951][T23661] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 538.686989][T23661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.695916][T23661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.796578][T23666] serio: Serial port ptm0 [ 539.876408][T23702] serio: Serial port ptm0 [ 539.917919][T23698] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23698 comm=syz.2.7057 [ 539.930535][T23698] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23698 comm=syz.2.7057 [ 539.974311][T23707] program syz.3.7061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.996482][T23707] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 540.019924][T23707] SET target dimension over the limit! [ 540.056137][T23718] program syz.3.7065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.085651][T23718] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 540.097481][T23718] SET target dimension over the limit! [ 540.109761][T23725] serio: Serial port ptm0 [ 540.734044][T23796] SET target dimension over the limit! [ 540.760504][T23798] serio: Serial port ptm0 [ 540.976659][T23805] program syz.0.7078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.986147][T23805] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 541.438869][T23816] team0: Device gtp0 is of different type [ 541.451027][T23818] program syz.0.7083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.460802][T23818] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 541.520313][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7086'. [ 541.532358][T23828] serio: Serial port ptm0 [ 542.311568][T23861] SET target dimension over the limit! [ 542.542667][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 542.542685][ T29] audit: type=1400 audit(1746862063.589:32459): avc: denied { create } for pid=23878 comm="syz.2.7104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 542.595882][ T29] audit: type=1400 audit(1746862063.589:32460): avc: denied { write } for pid=23878 comm="syz.2.7104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 542.687500][T23891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23891 comm=syz.2.7109 [ 542.700148][T23891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23891 comm=syz.2.7109 [ 542.730584][ T29] audit: type=1400 audit(1746862063.779:32461): avc: denied { execmem } for pid=23892 comm="syz.1.7108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 542.772470][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7111'. [ 542.791694][ T29] audit: type=1400 audit(1746862063.819:32462): avc: denied { read } for pid=23893 comm="syz.2.7111" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 542.813144][ T29] audit: type=1400 audit(1746862063.819:32463): avc: denied { open } for pid=23893 comm="syz.2.7111" path="net:[4026532381]" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 542.836666][ T29] audit: type=1400 audit(1746862063.819:32464): avc: denied { create } for pid=23893 comm="syz.2.7111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 542.856421][ T29] audit: type=1400 audit(1746862063.819:32465): avc: denied { create } for pid=23893 comm="syz.2.7111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.877336][ T29] audit: type=1400 audit(1746862063.819:32466): avc: denied { write } for pid=23893 comm="syz.2.7111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.944021][ T29] audit: type=1400 audit(1746862063.999:32467): avc: denied { bind } for pid=23893 comm="syz.2.7111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 542.964776][ T29] audit: type=1400 audit(1746862064.019:32468): avc: denied { write } for pid=23893 comm="syz.2.7111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 543.279927][T23909] serio: Serial port ptm0 [ 543.790678][T23939] openvswitch: netlink: Message has 6 unknown bytes. [ 543.843059][T23943] SET target dimension over the limit! [ 544.156352][T23952] serio: Serial port ptm0 [ 544.257649][T23956] loop2: detected capacity change from 0 to 128 [ 544.280384][T23956] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.305307][T23956] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 544.346087][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7134'. [ 544.372798][T20736] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.496988][T23977] openvswitch: netlink: Message has 6 unknown bytes. [ 544.880761][T24015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.425573][T24027] serio: Serial port ptm0 [ 545.812374][T24051] loop5: detected capacity change from 0 to 512 [ 545.956293][T24051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.969203][T24051] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.176644][T24054] openvswitch: netlink: Message has 6 unknown bytes. [ 546.277989][T24049] netlink: 'syz.0.7165': attribute type 10 has an invalid length. [ 546.669706][T24080] netlink: 'syz.3.7174': attribute type 10 has an invalid length. [ 546.894060][T24095] serio: Serial port ptm0 [ 546.920961][T24094] loop0: detected capacity change from 0 to 256 [ 546.943305][T24094] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 546.979278][T24094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.008987][T24094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.032516][T24098] SET target dimension over the limit! [ 547.134720][T24102] serio: Serial port ptm0 [ 547.248692][T24107] 9pnet_fd: Insufficient options for proto=fd [ 547.381572][T22903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.425843][T24113] netlink: 'syz.5.7188': attribute type 10 has an invalid length. [ 547.498578][T24120] serio: Serial port ptm0 [ 547.533130][T24125] openvswitch: netlink: Message has 6 unknown bytes. [ 547.579317][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 547.579354][ T29] audit: type=1400 audit(1746862068.629:32909): avc: denied { create } for pid=24127 comm="syz.0.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 547.612479][T24128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.629695][ T29] audit: type=1400 audit(1746862068.659:32910): avc: denied { write } for pid=24127 comm="syz.0.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 547.649273][ T29] audit: type=1400 audit(1746862068.659:32911): avc: denied { bind } for pid=24127 comm="syz.0.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 547.668799][ T29] audit: type=1400 audit(1746862068.659:32912): avc: denied { name_bind } for pid=24127 comm="syz.0.7195" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 547.689915][ T29] audit: type=1400 audit(1746862068.659:32913): avc: denied { node_bind } for pid=24127 comm="syz.0.7195" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 547.710973][ T29] audit: type=1400 audit(1746862068.659:32914): avc: denied { listen } for pid=24127 comm="syz.0.7195" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 547.731838][ T29] audit: type=1400 audit(1746862068.659:32915): avc: denied { connect } for pid=24127 comm="syz.0.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 547.751662][ T29] audit: type=1400 audit(1746862068.659:32916): avc: denied { name_connect } for pid=24127 comm="syz.0.7195" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 547.773141][ T29] audit: type=1400 audit(1746862068.669:32917): avc: denied { getopt } for pid=24127 comm="syz.0.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.794051][T24135] 9pnet_fd: Insufficient options for proto=fd [ 547.800321][ T29] audit: type=1400 audit(1746862068.729:32918): avc: denied { accept } for pid=24127 comm="syz.0.7195" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 547.825520][T24132] serio: Serial port ptm0 [ 547.917293][T24148] loop2: detected capacity change from 0 to 512 [ 548.370002][T24164] openvswitch: netlink: Message has 6 unknown bytes. [ 548.489935][T24168] SET target dimension over the limit! [ 548.708330][T24156] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 548.767531][T24179] serio: Serial port ptm0 [ 548.914972][T24183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.948202][T24183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.976079][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7214'. [ 548.985854][T24190] SET target dimension over the limit! [ 549.095005][T24196] openvswitch: netlink: Message has 6 unknown bytes. [ 549.158045][T24148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.213008][T24198] loop5: detected capacity change from 0 to 128 [ 549.222798][T24148] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.298850][T24198] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.347083][T24198] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.484539][T22903] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.651895][T24229] loop0: detected capacity change from 0 to 256 [ 549.661403][T24229] msdos: Unknown parameter 'À3u»ïûÀF|S' [ 549.671415][T24229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.709366][T24229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.726932][T24235] openvswitch: netlink: Message has 6 unknown bytes. [ 549.734492][T24229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7235'. [ 550.012380][T24263] openvswitch: netlink: Message has 6 unknown bytes. [ 550.215939][T24292] SET target dimension over the limit! [ 550.430579][T24302] serio: Serial port ptm0 [ 550.638579][T24311] FAULT_INJECTION: forcing a failure. [ 550.638579][T24311] name failslab, interval 1, probability 0, space 0, times 0 [ 550.651274][T24311] CPU: 1 UID: 0 PID: 24311 Comm: syz.3.7268 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 550.651310][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 550.651327][T24311] Call Trace: [ 550.651335][T24311] [ 550.651345][T24311] __dump_stack+0x1d/0x30 [ 550.651498][T24311] dump_stack_lvl+0xe8/0x140 [ 550.651516][T24311] dump_stack+0x15/0x1b [ 550.651532][T24311] should_fail_ex+0x265/0x280 [ 550.651566][T24311] should_failslab+0x8c/0xb0 [ 550.651671][T24311] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 550.651734][T24311] ? sock_alloc_inode+0x34/0xa0 [ 550.651763][T24311] ? __pfx_sock_alloc_inode+0x10/0x10 [ 550.651789][T24311] sock_alloc_inode+0x34/0xa0 [ 550.651891][T24311] alloc_inode+0x3d/0x170 [ 550.651915][T24311] __sock_create+0x122/0x5b0 [ 550.651939][T24311] ? _get_random_bytes+0x161/0x190 [ 550.652021][T24311] sock_create_kern+0x38/0x50 [ 550.652098][T24311] udp_sock_create4+0x66/0x2a0 [ 550.652121][T24311] rxrpc_lookup_local+0x824/0xc70 [ 550.652155][T24311] rxrpc_sendmsg+0x2e0/0x540 [ 550.652197][T24311] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 550.652347][T24311] __sock_sendmsg+0x142/0x180 [ 550.652372][T24311] ____sys_sendmsg+0x31e/0x4e0 [ 550.652399][T24311] ___sys_sendmsg+0x17b/0x1d0 [ 550.652439][T24311] __x64_sys_sendmsg+0xd4/0x160 [ 550.652468][T24311] x64_sys_call+0x2999/0x2fb0 [ 550.652578][T24311] do_syscall_64+0xd0/0x1a0 [ 550.652599][T24311] ? clear_bhb_loop+0x25/0x80 [ 550.652620][T24311] ? clear_bhb_loop+0x25/0x80 [ 550.652707][T24311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.652789][T24311] RIP: 0033:0x7f36d36ae969 [ 550.652807][T24311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.652830][T24311] RSP: 002b:00007f36d1d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.652860][T24311] RAX: ffffffffffffffda RBX: 00007f36d38d5fa0 RCX: 00007f36d36ae969 [ 550.652875][T24311] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 550.652900][T24311] RBP: 00007f36d1d17090 R08: 0000000000000000 R09: 0000000000000000 [ 550.652922][T24311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.652934][T24311] R13: 0000000000000000 R14: 00007f36d38d5fa0 R15: 00007fff1071ad28 [ 550.652979][T24311] [ 550.652987][T24311] socket: no more sockets [ 551.027834][T20736] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.200919][T24329] netlink: 'syz.2.7276': attribute type 10 has an invalid length. [ 551.257112][T24329] batman_adv: batadv0: Adding interface: team0 [ 551.263445][T24329] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.288723][T24329] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 551.601154][T24351] loop2: detected capacity change from 0 to 2048 [ 551.746627][T24351] loop2: p1 < > p4 [ 551.758779][T24351] loop2: p4 size 8388608 extends beyond EOD, truncated [ 551.836968][T24359] serio: Serial port ptm0 [ 552.090113][T24397] loop0: detected capacity change from 0 to 164 [ 552.096776][T24397] iso9660: Unknown parameter './file1' [ 552.113475][T24398] SET target dimension over the limit! [ 552.121050][T24397] loop0: detected capacity change from 0 to 512 [ 552.140630][T24397] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 552.584111][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 552.584130][ T29] audit: type=1326 audit(1746862073.639:33107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24408 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 553.595498][ T29] audit: type=1326 audit(1746862073.669:33108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24408 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 553.619294][ T29] audit: type=1326 audit(1746862073.669:33109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24408 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 553.642943][ T29] audit: type=1400 audit(1746862073.669:33110): avc: denied { write } for pid=24408 comm="syz.3.7307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.662621][ T29] audit: type=1326 audit(1746862073.699:33111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24408 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 553.686236][ T29] audit: type=1326 audit(1746862073.699:33112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24408 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d36ae969 code=0x7ffc0000 [ 553.709870][ T29] audit: type=1400 audit(1746862073.869:33113): avc: denied { create } for pid=24426 comm="syz.3.7310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 553.729782][ T29] audit: type=1400 audit(1746862073.869:33114): avc: denied { read } for pid=24426 comm="syz.3.7310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 553.769387][T24433] FAULT_INJECTION: forcing a failure. [ 553.769387][T24433] name failslab, interval 1, probability 0, space 0, times 0 [ 553.782145][T24433] CPU: 1 UID: 0 PID: 24433 Comm: syz.5.7312 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 553.782180][T24433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 553.782196][T24433] Call Trace: [ 553.782204][T24433] [ 553.782212][T24433] __dump_stack+0x1d/0x30 [ 553.782233][T24433] dump_stack_lvl+0xe8/0x140 [ 553.782254][T24433] dump_stack+0x15/0x1b [ 553.782270][T24433] should_fail_ex+0x265/0x280 [ 553.782300][T24433] should_failslab+0x8c/0xb0 [ 553.782333][T24433] kmem_cache_alloc_noprof+0x50/0x310 [ 553.782374][T24433] ? mas_alloc_nodes+0x265/0x520 [ 553.782405][T24433] mas_alloc_nodes+0x265/0x520 [ 553.782435][T24433] mas_preallocate+0x456/0x680 [ 553.782460][T24433] __split_vma+0x239/0x610 [ 553.782512][T24433] vma_modify+0x107/0x210 [ 553.782548][T24433] vma_modify_flags+0x101/0x130 [ 553.782586][T24433] mlock_fixup+0x11d/0x210 [ 553.782613][T24433] apply_vma_lock_flags+0x193/0x250 [ 553.782637][T24433] do_mlock+0x3c6/0x520 [ 553.782658][T24433] ? fput+0x8f/0xc0 [ 553.782674][T24433] ? ksys_write+0x16e/0x1a0 [ 553.782698][T24433] __x64_sys_mlock+0x36/0x50 [ 553.782716][T24433] x64_sys_call+0x28f4/0x2fb0 [ 553.782738][T24433] do_syscall_64+0xd0/0x1a0 [ 553.782765][T24433] ? clear_bhb_loop+0x25/0x80 [ 553.782792][T24433] ? clear_bhb_loop+0x25/0x80 [ 553.782819][T24433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.782845][T24433] RIP: 0033:0x7f2552c8e969 [ 553.782860][T24433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.782878][T24433] RSP: 002b:00007f25512f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 553.782896][T24433] RAX: ffffffffffffffda RBX: 00007f2552eb5fa0 RCX: 00007f2552c8e969 [ 553.782910][T24433] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 553.782922][T24433] RBP: 00007f25512f7090 R08: 0000000000000000 R09: 0000000000000000 [ 553.782933][T24433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.782944][T24433] R13: 0000000000000000 R14: 00007f2552eb5fa0 R15: 00007ffe13e00b28 [ 553.782962][T24433] [ 554.053055][ T29] audit: type=1326 audit(1746862075.099:33115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24438 comm="syz.5.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 554.076734][ T29] audit: type=1326 audit(1746862075.099:33116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24438 comm="syz.5.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552c8e969 code=0x7ffc0000 [ 554.184874][T24449] serio: Serial port ptm0 [ 554.246959][T24452] serio: Serial port ptm1 [ 554.402033][T24457] netlink: 'syz.0.7322': attribute type 10 has an invalid length. [ 554.934741][T24483] serio: Serial port ptm0 [ 555.095894][T24485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24485 comm=syz.0.7333 [ 555.109046][T24485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24485 comm=syz.0.7333 [ 555.422927][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7342'. [ 555.448103][T24509] 9pnet_fd: Insufficient options for proto=fd [ 555.497694][T24513] SET target dimension over the limit! [ 555.536485][T24520] openvswitch: netlink: Message has 6 unknown bytes. [ 555.563556][T24518] loop0: detected capacity change from 0 to 128 [ 555.605185][T24518] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 555.627521][T24518] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 555.692935][T21868] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 555.746365][T24531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24531 comm=syz.1.7352 [ 555.759152][T24531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24531 comm=syz.1.7352 [ 555.811368][T24539] 9pnet_fd: Insufficient options for proto=fd [ 555.969555][T24548] loop5: detected capacity change from 0 to 128 [ 556.029862][T24554] SET target dimension over the limit! [ 556.045849][T24548] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 556.063895][T24548] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 556.187128][T24558] loop0: detected capacity change from 0 to 512 [ 556.234728][T22903] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 556.716146][T24558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.729012][T24558] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.068850][T21868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.091723][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 558.091740][ T29] audit: type=1400 audit(1746862079.139:33250): avc: denied { mount } for pid=24580 comm="syz.0.7367" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 558.124677][T24582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24582 comm=syz.2.7366 [ 558.137391][T24582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24582 comm=syz.2.7366 [ 558.151015][ T29] audit: type=1400 audit(1746862079.189:33251): avc: denied { create } for pid=24583 comm="syz.0.7368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.171294][ T29] audit: type=1400 audit(1746862079.189:33252): avc: denied { ioctl } for pid=24583 comm="syz.0.7368" path="socket:[78228]" dev="sockfs" ino=78228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.279920][ T29] audit: type=1400 audit(1746862079.269:33253): avc: denied { mount } for pid=24583 comm="syz.0.7368" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 558.302907][ T29] audit: type=1400 audit(1746862079.279:33254): avc: denied { unmount } for pid=24583 comm="syz.0.7368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 558.323340][ T29] audit: type=1400 audit(1746862079.279:33255): avc: denied { write } for pid=24583 comm="syz.0.7368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.343406][ T29] audit: type=1400 audit(1746862079.289:33256): avc: denied { create } for pid=24589 comm="syz.3.7371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 558.363697][ T29] audit: type=1400 audit(1746862079.299:33257): avc: denied { write } for pid=24589 comm="syz.3.7371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 558.383622][ T29] audit: type=1404 audit(1746862079.299:33258): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 558.399030][ T29] audit: type=1400 audit(1746862079.309:33259): avc: denied { read write } for pid=21868 comm="syz-executor" name="loop0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 558.520940][T24603] SET target dimension over the limit! [ 558.844416][T24602] tipc: Enabling of bearer rejected, failed to enable media [ 559.691852][T24605] loop0: detected capacity change from 0 to 512 [ 559.702990][T24605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.724069][T24605] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.937357][T21868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.950921][T24633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24633 comm=syz.1.7384 [ 559.963628][T24633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24633 comm=syz.1.7384 [ 560.087565][T24650] serio: Serial port ptm0 [ 560.543410][T24657] tipc: Enabling of bearer rejected, failed to enable media [ 560.623179][T24669] ================================================================== [ 560.631348][T24669] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 560.638071][T24669] [ 560.640411][T24669] write to 0xffff88810463d610 of 8 bytes by task 24666 on cpu 0: [ 560.648142][T24669] call_rcu+0x3b/0x3e0 [ 560.652260][T24669] mas_wmb_replace+0xc6b/0x14a0 [ 560.657140][T24669] mas_wr_store_entry+0x17ae/0x2b60 [ 560.662348][T24669] mas_store_prealloc+0x74d/0x9e0 [ 560.667388][T24669] vma_iter_store_new+0x1c5/0x200 [ 560.672439][T24669] vma_complete+0x125/0x570 [ 560.676965][T24669] __split_vma+0x54c/0x610 [ 560.681415][T24669] vma_modify+0x107/0x210 [ 560.685763][T24669] vma_modify_flags+0x101/0x130 [ 560.690875][T24669] mprotect_fixup+0x2cc/0x570 [ 560.695583][T24669] do_mprotect_pkey+0x6d6/0x980 [ 560.700445][T24669] __x64_sys_mprotect+0x48/0x60 [ 560.705324][T24669] x64_sys_call+0x2794/0x2fb0 [ 560.710019][T24669] do_syscall_64+0xd0/0x1a0 [ 560.714537][T24669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.720444][T24669] [ 560.722804][T24669] read to 0xffff88810463d610 of 8 bytes by task 24669 on cpu 1: [ 560.730522][T24669] mas_state_walk+0x2f5/0x650 [ 560.735300][T24669] mas_walk+0x30/0x120 [ 560.739376][T24669] lock_vma_under_rcu+0xa2/0x2f0 [ 560.744329][T24669] do_user_addr_fault+0x233/0x1090 [ 560.749460][T24669] exc_page_fault+0x54/0xc0 [ 560.753981][T24669] asm_exc_page_fault+0x26/0x30 [ 560.758853][T24669] [ 560.761176][T24669] value changed: 0x00007f56ee2cffff -> 0xffffffff855c9c30 [ 560.768286][T24669] [ 560.770607][T24669] Reported by Kernel Concurrency Sanitizer on: [ 560.776808][T24669] CPU: 1 UID: 0 PID: 24669 Comm: syz.1.7395 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 560.789579][T24669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 560.799643][T24669] ==================================================================