last executing test programs: 1m38.575954472s ago: executing program 1 (id=189): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) semget(0x3, 0x2, 0x346) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)}], 0x1, &(0x7f00000000c0), 0x0, 0x6044}, 0x6) unshare(0x20000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) 1m38.514853642s ago: executing program 1 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t ro'], 0x27) 1m38.485551662s ago: executing program 1 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb2, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r1, r2, 0x0, 0x80000000) fremovexattr(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) close(r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000000280)={0x20071026}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf252800000005002e000f0000000c002d000200aaaaaaaaaaaa05002b000300000008000200", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40850) 1m37.819259759s ago: executing program 1 (id=212): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x0, 0x2, {0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) dup(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000240)=0x100000001, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x53) preadv2(r5, &(0x7f0000004000)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x2b, 0x0, 0x0, 0x0) mq_open(&(0x7f00000001c0)='GPL\x00', 0xc0, 0xf1, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xd33b, 0x6}) 1m37.167223947s ago: executing program 1 (id=221): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000007f832401e7cef22925a9e07b2c2800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 1m36.820101707s ago: executing program 1 (id=228): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0x1}, {}, {}, @raw32}, {0x3, 0x0, 0x2, 0x0, @tick=0x7, {}, {}, @ext={0x0, 0x0}}], 0x38) 1m36.819885137s ago: executing program 32 (id=228): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0x1}, {}, {}, @raw32}, {0x3, 0x0, 0x2, 0x0, @tick=0x7, {}, {}, @ext={0x0, 0x0}}], 0x38) 1m35.205866702s ago: executing program 3 (id=252): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) semget(0x3, 0x2, 0x346) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)}], 0x1, &(0x7f00000000c0), 0x0, 0x6044}, 0x6) unshare(0x20000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) 1m35.074581711s ago: executing program 3 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t ro'], 0x27) 1m34.944803571s ago: executing program 3 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x7da5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r2], 0x1) r3 = dup2(r1, r2) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 1m34.8962082s ago: executing program 3 (id=258): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x0, 0x2, {0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m34.860752191s ago: executing program 3 (id=259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000007f832401e7cef22925a9e07b2c2800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 1m34.632863149s ago: executing program 3 (id=261): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x7da5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r2], 0x1) r3 = dup2(r1, r2) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 1m34.632746389s ago: executing program 33 (id=261): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x7da5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r2], 0x1) r3 = dup2(r1, r2) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 4.513031363s ago: executing program 5 (id=2888): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='global_dirty_state\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x24}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) io_uring_setup(0x4366, &(0x7f0000000180)={0x0, 0x7140, 0x80, 0x3, 0x148, 0x0, r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) setrlimit(0x8, &(0x7f0000000000)) pread64(r0, &(0x7f0000000100)=""/33, 0x21, 0x81) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) sendmsg$sock(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x1}, 0x18) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000080)={0xf97cff8c, 0x8}, 0x10) setuid(0xee00) 4.230077283s ago: executing program 5 (id=2893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, @perf_bp={0x0, 0x2}, 0x10a0a1, 0x5dda, 0x3, 0x5, 0x4, 0x4000008, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@errors_remount}, {@debug}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$eJzs3c9rHG0dAPDvzCYxed9oWpFii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM60a3Y32ebN7mwznw/M9plnZvd5vjv7dJ5nNs9OALU1nz2kEWcj4k4SMdexbTbaG+eL/fb+8exutiTRan3j70kkRV65/+vi3w+zhyRiOiJ+fz3ik43ucrefPL2/0my1fT9icWdza3H7ydOLG5sr99burT1YvvTly1eWvrJ8eflY4izjunHz65/5yQ++86X1PzQvJnE1bk9+bzX2xXFc5mM+XhchduZPRMSVLNHjfXnflCEkFdeDo2kUn8fJiDgTc9HI19rmYuPHlVYOGKpWI6IF1FSi/UNNlf2Acmw/jHHwOHt1rT0A6o5/on1tJKbzsdEHe0nHyKg93j11DOVnZfz32blfZEv0uQ4xcQzl9LP7PCI+3Sv+JK/bqfwqThZ/GmnH87L0UkRMFe/FYOP/ya6c+X3ro/78vUv8ncchi/9q8W+Wf/2I5VcdPwD19PJacSLfzdbenv+ynmHZ/4ke/Z/ZHueuo6j6/Ne//1ee76fza+Tpvn5Y1t+51fsluzo5f/nRjZ/1K7+z/5ctWfllX3AUXj2POLcv/h/mHb3kzfFPehz/bJc7A5bxtT/+7Ua/bVXH33oRcb7n+OdtjzZLLe5sbpV5+76fXFzfaK4ttR97lvGb3337V/3Krzr+7PhHn/HfQcc/y9sasIxf33qx2W/b7KHxp3+dSm7nqaki57srOzuPliOmkpvFLh35lw6uS7lP+RpZ/Bc+37v994q/KCo/0Lv/9270t/XN+3v99hv4+HcPnTKvWweHe6gs/tU+n//Djv9PByzjX996/Nl9WTNl4qD4Z7pfKtl95wgBAAAAAACgPtL8O9gkXXiTTtOFhfYc3k/FB2nz4fbOF9YfPn6wGnEh/3vIybT8pnuuvZ5k68vF38OW65f2rX8xIk5HxM8bM/n6wt2HzdWqgwcAAAAAAAAAAAAAAAAAAIAx8WEx/7+8T/U/G+35/wPZOTPk2gFDN8wbzAHjTfuH+srbf1p1LYAqOP9DfWn/UF/aP9SX9g/1pf1DfWn/UF/aP9SX9g8AAAAAJ9Lpz738cxIRu1+dyZfMVLFtstKaAcP27m18fij1AEavMdKnAePkzVf/pv9D7QzU//938eOAw68OUIGkV2beOWgd3Phf9nwmAAAAAAAAAAAAADAE58+a/w91lcZvq64CUJHuifxn9wac6Oc3AOA956f/ob4+0hjfBQI4EQ6bxT/db4P5/wAAAAAAAAAAAAAwMrP5kqQLxS1AZyNNFxYiPh4Rp2IyWd9ori1FxCci4k+NyY9l68tVVxoAAAAAAAAAAAAAAAAAAABOmO0nT++vNJtrjzoT/+nKOdmJ8i6o41KfzkQkoy90JiLGIfbhJCY6cpKI3ezIj0XFHm3HWFQjzatR8X9MAAAAAAAAAAAAAAAAAABQQx1zj3s798sR1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARu/t/f+PnkgOeZ2qYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k//CwAA//9vNjw9") 4.174917842s ago: executing program 5 (id=2895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.218656609s ago: executing program 5 (id=2902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000004900010000000000fedbdf250a"], 0x38}}, 0x0) read$nci(r5, &(0x7f00000019c0)=""/97, 0x61) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x6, 0xd}) 3.1706786s ago: executing program 5 (id=2905): ioperm(0x9, 0x6, 0xfffffffffffffffe) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x3}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r7, 0x29, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r9 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r9, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2.532753747s ago: executing program 5 (id=2913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000004000000a31599917074d31464a01c6acd"], 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000009e0000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) getrandom(0x0, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) pipe(&(0x7f0000000200)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 2.234594187s ago: executing program 0 (id=2917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.094333626s ago: executing program 0 (id=2919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = io_uring_setup(0x2e34, &(0x7f0000000180)) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x3, 0x0, 0x2, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}]}, 0xa0}}, 0x0) setns(r4, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) pipe2$9p(&(0x7f0000000040), 0x80000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1.888980716s ago: executing program 0 (id=2922): madvise(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x16) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'dvmrp0\x00'}) r1 = socket$inet6(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x18) 1.743837025s ago: executing program 0 (id=2925): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2c7e7d485c0601ec, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x1, 0x8}}]}}]}, 0x3c}}, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r9, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) fallocate(r2, 0x0, 0x0, 0x1001f0) r10 = open(0x0, 0x141042, 0x0) fallocate(r10, 0x11, 0x0, 0xfffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x39, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.212852724s ago: executing program 6 (id=2936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 1.132415833s ago: executing program 6 (id=2937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000004000000a31599917074d31464a01c6acd"], 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000009e0000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) getrandom(0x0, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 976.171883ms ago: executing program 6 (id=2939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) link(0x0, &(0x7f0000000040)='./file0\x00') bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) memfd_create(0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4008, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe6, 0x0) 935.333362ms ago: executing program 2 (id=2940): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x49}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 892.006393ms ago: executing program 6 (id=2941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 891.528322ms ago: executing program 2 (id=2942): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8002, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 858.384302ms ago: executing program 6 (id=2943): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYRESDEC, @ANYRES32=r2, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200080008004500005c0010000000119078000000fffd4e200048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb83b4359e13561f048d60f6cbbaf3badfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c0000000000c3fc417ca598fe9207541d1b77885825d8ddecadbe108f82f6fe35933b297fc30669dfd818f2194761bf900ab1871661a2c3b8b53d383adb1e0606d2cdb9c44355854fe450168637380574078be2505c0083a7dbafea9b364520cbf8e9e1e81cacb657854176ff9d600e7b47291d3312a06b323e8afad97ad8360ff340b454f6b053a544ed47c5f97e40e16fd8a97a"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) 841.872902ms ago: executing program 0 (id=2944): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0x3) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz8FNxEAMBdCfhGSGE51QCVfOVAKiA/qgQQQCGY2StLC7h/cOI439Zcvhuub8VFXN53/7Tqb0POYorclv7XKXakvqvTJCQ7W/kUjyWm9b5vax5iVZ749x01PrSd9XLeN9+OpnL8+flzwVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG7VfwAAAP//HxEZQg==") write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x20001000) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x4}, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @nfc={0x27, 0x0, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x6, &(0x7f0000000100), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000340), &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) 732.190732ms ago: executing program 2 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) link(0x0, &(0x7f0000000040)='./file0\x00') 728.639442ms ago: executing program 2 (id=2946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001100)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) 705.041522ms ago: executing program 2 (id=2947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000004000000a31599917074d31464a01c6acd"], 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000009e0000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) getrandom(0x0, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) pipe(&(0x7f0000000200)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 629.045902ms ago: executing program 2 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480140035"], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000078ffe9b9cb2e0289ab3a9cc277a1189574d60b46ab603a9610a6e3aeaaaa58f10e258ca6b1acb9782956b080eb2f08670c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="f1b562df00919a7ca7213cae6d8063ae5df7119811000059693407911671c63735e490e9b8e51e17a5cdb3fe97725d2f1759f56bff06c4bdc244145617bf87423eb824d683c466eb892ca184afe78b33d50ba5075574059ec08ffed42514ff5616b01e70030e943b3ac23d79f2b04332a7a2974ef66e92656449598b8f55a21d0a456be121bfd1e67d610ee68cda5f51b7fd98e6b7d17152a82bd0654a94ec6ba644afa92fa0af9f5e498e4f39e72a304d83397496d5", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000898af8ff0000000010a200000000000007020000f8ffffffb703000008000000b70400000000000085000000030062cff8e11abe00009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 517.318181ms ago: executing program 4 (id=2949): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESOCT=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0xa8}}, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) close_range(r4, r7, 0x0) perf_event_open(0x0, 0x0, 0x200000000000, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e0ffffffffffe9f83da47da02100001d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 418.982041ms ago: executing program 4 (id=2950): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 325.52832ms ago: executing program 4 (id=2951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) link(0x0, &(0x7f0000000040)='./file0\x00') bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) memfd_create(0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4008, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe6, 0x0) 322.788761ms ago: executing program 4 (id=2952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 291.32984ms ago: executing program 4 (id=2953): unshare(0x62040200) mmap(&(0x7f0000243000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0xc246f000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) bind$unix(r1, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="98000000000000000000bbfa0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 249.72519ms ago: executing program 0 (id=2954): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2c7e7d485c0601ec, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x1, 0x8}}]}}]}, 0x3c}}, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r9, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) fallocate(r2, 0x0, 0x0, 0x1001f0) r10 = open(0x0, 0x141042, 0x0) fallocate(r10, 0x11, 0x0, 0xfffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x39, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.71784ms ago: executing program 6 (id=2955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) link(0x0, &(0x7f0000000040)='./file0\x00') 0s ago: executing program 4 (id=2956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000"], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') kernel console output (not intermixed with test programs): XT4-fs (loop4): 1 truncate cleaned up [ 63.288122][ T5761] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 7: comm syz.4.682: bad entry in directory: inode out of bounds - offset=4, inode=16777215, rec_len=16, size=60 fake=0 [ 63.310625][ T5761] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 16777215, rec_len 16, name_len 5inline size 60 [ 63.775573][ T5783] loop6: detected capacity change from 0 to 512 [ 63.782524][ T5783] journal_path: Non-blockdev passed as './bus' [ 63.788756][ T5783] EXT4-fs: error: could not find journal device path [ 63.808199][ T5781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.687'. [ 63.914188][ T5791] SELinux: syz.6.690 (5791) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.962510][ T5798] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 63.970704][ T5798] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 63.995737][ T5800] loop6: detected capacity change from 0 to 512 [ 64.006301][ T5800] ext4 filesystem being mounted at /71/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.161480][ T5812] loop2: detected capacity change from 0 to 512 [ 64.173501][ T5812] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.243446][ T5819] loop2: detected capacity change from 0 to 128 [ 64.274862][ T5821] SELinux: syz.4.701 (5821) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.612349][ T5828] SELinux: syz.5.704 (5828) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.980727][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.708'. [ 65.003014][ T5839] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 65.055508][ T5845] SELinux: syz.6.712 (5845) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 65.099904][ T5849] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 65.109771][ T5849] SELinux: failed to load policy [ 65.139372][ T5853] loop2: detected capacity change from 0 to 512 [ 65.145923][ T5853] journal_path: Non-blockdev passed as './bus' [ 65.146028][ T5852] SELinux: syz.0.715 (5852) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 65.152078][ T5853] EXT4-fs: error: could not find journal device path [ 65.186223][ T5857] loop5: detected capacity change from 0 to 512 [ 65.222540][ T5857] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.265909][ T5857] EXT4-fs (loop5): 1 truncate cleaned up [ 65.361320][ T5871] FAULT_INJECTION: forcing a failure. [ 65.361320][ T5871] name failslab, interval 1, probability 0, space 0, times 0 [ 65.373990][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz.2.723 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 65.374023][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.374035][ T5871] Call Trace: [ 65.374041][ T5871] [ 65.374111][ T5871] dump_stack_lvl+0xf2/0x150 [ 65.374137][ T5871] dump_stack+0x15/0x1a [ 65.374157][ T5871] should_fail_ex+0x24a/0x260 [ 65.374189][ T5871] should_failslab+0x8f/0xb0 [ 65.374213][ T5871] __kmalloc_noprof+0xab/0x3f0 [ 65.374257][ T5871] ? alloc_pipe_info+0x1cb/0x360 [ 65.374285][ T5871] alloc_pipe_info+0x1cb/0x360 [ 65.374312][ T5871] create_pipe_files+0x67/0x3b0 [ 65.374351][ T5871] __do_pipe_flags+0x46/0x190 [ 65.374379][ T5871] do_pipe2+0x64/0x130 [ 65.374408][ T5871] __x64_sys_pipe2+0x30/0x40 [ 65.374484][ T5871] x64_sys_call+0x28a6/0x2dc0 [ 65.374511][ T5871] do_syscall_64+0xc9/0x1c0 [ 65.374557][ T5871] ? clear_bhb_loop+0x55/0xb0 [ 65.374585][ T5871] ? clear_bhb_loop+0x55/0xb0 [ 65.374633][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.374725][ T5871] RIP: 0033:0x7fb112dacde9 [ 65.374740][ T5871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.374757][ T5871] RSP: 002b:00007fb111417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 65.374840][ T5871] RAX: ffffffffffffffda RBX: 00007fb112fc5fa0 RCX: 00007fb112dacde9 [ 65.374882][ T5871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 65.374894][ T5871] RBP: 00007fb111417090 R08: 0000000000000000 R09: 0000000000000000 [ 65.374905][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.374917][ T5871] R13: 0000000000000000 R14: 00007fb112fc5fa0 R15: 00007fff10191528 [ 65.374936][ T5871] [ 65.597878][ T5880] loop6: detected capacity change from 0 to 128 [ 65.677429][ T5882] __nla_validate_parse: 2 callbacks suppressed [ 65.677446][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 65.924749][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 65.950331][ T5898] SELinux: syz.2.732 (5898) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 65.982375][ T5900] loop2: detected capacity change from 0 to 512 [ 65.991440][ T5900] journal_path: Non-blockdev passed as './bus' [ 65.997683][ T5900] EXT4-fs: error: could not find journal device path [ 66.045058][ T5905] loop4: detected capacity change from 0 to 512 [ 66.053298][ T5906] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 66.061568][ T5906] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 66.073732][ T5905] ext4 filesystem being mounted at /140/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.139398][ T5914] sd 0:0:1:0: device reset [ 66.181530][ T5922] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 66.204122][ T5920] FAULT_INJECTION: forcing a failure. [ 66.204122][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 66.216839][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.4.742 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 66.216858][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.216868][ T5920] Call Trace: [ 66.216873][ T5920] [ 66.216910][ T5920] dump_stack_lvl+0xf2/0x150 [ 66.216953][ T5920] dump_stack+0x15/0x1a [ 66.216975][ T5920] should_fail_ex+0x24a/0x260 [ 66.217063][ T5920] should_failslab+0x8f/0xb0 [ 66.217089][ T5920] kmem_cache_alloc_node_noprof+0x59/0x320 [ 66.217185][ T5920] ? __alloc_skb+0x10b/0x310 [ 66.217212][ T5920] __alloc_skb+0x10b/0x310 [ 66.217238][ T5920] netlink_alloc_large_skb+0xad/0xe0 [ 66.217268][ T5920] netlink_sendmsg+0x3b4/0x6e0 [ 66.217311][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.217369][ T5920] __sock_sendmsg+0x140/0x180 [ 66.217390][ T5920] ____sys_sendmsg+0x312/0x410 [ 66.217415][ T5920] __sys_sendmsg+0x19d/0x230 [ 66.217469][ T5920] __x64_sys_sendmsg+0x46/0x50 [ 66.217545][ T5920] x64_sys_call+0x2734/0x2dc0 [ 66.217568][ T5920] do_syscall_64+0xc9/0x1c0 [ 66.217588][ T5920] ? clear_bhb_loop+0x55/0xb0 [ 66.217637][ T5920] ? clear_bhb_loop+0x55/0xb0 [ 66.217660][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.217714][ T5920] RIP: 0033:0x7f26a0b4cde9 [ 66.217726][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.217746][ T5920] RSP: 002b:00007f269f1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.217762][ T5920] RAX: ffffffffffffffda RBX: 00007f26a0d65fa0 RCX: 00007f26a0b4cde9 [ 66.217772][ T5920] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 66.217825][ T5920] RBP: 00007f269f1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.217835][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.217844][ T5920] R13: 0000000000000000 R14: 00007f26a0d65fa0 R15: 00007ffe0ce36108 [ 66.217865][ T5920] [ 66.457767][ T5933] loop4: detected capacity change from 0 to 512 [ 66.466963][ T5931] loop6: detected capacity change from 0 to 512 [ 66.489488][ T5928] loop2: detected capacity change from 0 to 4096 [ 66.490935][ T5933] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.505033][ T5933] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 66.508021][ T5931] ext4 filesystem being mounted at /83/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.532529][ T5933] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.539182][ T5933] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm +}[@: bad orphan inode 15 [ 66.549059][ T5933] ext4_test_bit(bit=14, block=18) = 1 [ 66.554481][ T5933] is_bad_inode(inode)=0 [ 66.558638][ T5933] NEXT_ORPHAN(inode)=1023 [ 66.563040][ T5933] max_ino=32 [ 66.566245][ T5933] i_nlink=0 [ 66.570443][ T5933] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 66.587601][ T5933] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 66.680211][ T5949] FAULT_INJECTION: forcing a failure. [ 66.680211][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.693293][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.6.751 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 66.693313][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.693323][ T5949] Call Trace: [ 66.693328][ T5949] [ 66.693335][ T5949] dump_stack_lvl+0xf2/0x150 [ 66.693451][ T5949] dump_stack+0x15/0x1a [ 66.693466][ T5949] should_fail_ex+0x24a/0x260 [ 66.693492][ T5949] should_fail+0xb/0x10 [ 66.693542][ T5949] should_fail_usercopy+0x1a/0x20 [ 66.693555][ T5949] _copy_from_iter+0xd5/0xd00 [ 66.693571][ T5949] ? _copy_from_iter+0x169/0xd00 [ 66.693587][ T5949] copy_page_from_iter+0x14f/0x280 [ 66.693632][ T5949] skb_copy_datagram_from_iter+0x224/0x460 [ 66.693667][ T5949] tun_get_user+0x1132/0x25c0 [ 66.693695][ T5949] ? _parse_integer+0x27/0x30 [ 66.693717][ T5949] ? ref_tracker_alloc+0x1f5/0x2f0 [ 66.693770][ T5949] tun_chr_write_iter+0x188/0x240 [ 66.693795][ T5949] vfs_write+0x77b/0x920 [ 66.693811][ T5949] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 66.693853][ T5949] ksys_write+0xe8/0x1b0 [ 66.693870][ T5949] __x64_sys_write+0x42/0x50 [ 66.693907][ T5949] x64_sys_call+0x287e/0x2dc0 [ 66.693927][ T5949] do_syscall_64+0xc9/0x1c0 [ 66.694004][ T5949] ? clear_bhb_loop+0x55/0xb0 [ 66.694024][ T5949] ? clear_bhb_loop+0x55/0xb0 [ 66.694045][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.694064][ T5949] RIP: 0033:0x7f8e4b95cde9 [ 66.694151][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.694165][ T5949] RSP: 002b:00007f8e49fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.694178][ T5949] RAX: ffffffffffffffda RBX: 00007f8e4bb75fa0 RCX: 00007f8e4b95cde9 [ 66.694187][ T5949] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 66.694196][ T5949] RBP: 00007f8e49fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.694204][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.694213][ T5949] R13: 0000000000000000 R14: 00007f8e4bb75fa0 R15: 00007ffe8cb7e668 [ 66.694288][ T5949] [ 66.707136][ T5950] FAULT_INJECTION: forcing a failure. [ 66.707136][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 66.721026][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 66.721039][ T29] audit: type=1400 audit(1738827188.015:1483): avc: denied { remount } for pid=5929 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.721187][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.2.746 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 66.721213][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.721227][ T5950] Call Trace: [ 66.721234][ T5950] [ 66.721242][ T5950] dump_stack_lvl+0xf2/0x150 [ 66.721272][ T5950] dump_stack+0x15/0x1a [ 66.721302][ T5950] should_fail_ex+0x24a/0x260 [ 66.721434][ T5950] should_failslab+0x8f/0xb0 [ 66.721461][ T5950] kmem_cache_alloc_noprof+0x52/0x320 [ 66.721494][ T5950] ? getname_flags+0x81/0x3b0 [ 66.721526][ T5950] getname_flags+0x81/0x3b0 [ 66.721598][ T5950] user_path_at+0x26/0x120 [ 66.721617][ T5950] __se_sys_mount+0x24b/0x2d0 [ 66.721643][ T5950] ? fput+0x1c4/0x200 [ 66.721677][ T5950] __x64_sys_mount+0x67/0x80 [ 66.721784][ T5950] x64_sys_call+0x2c84/0x2dc0 [ 66.721864][ T5950] do_syscall_64+0xc9/0x1c0 [ 66.721933][ T5950] ? clear_bhb_loop+0x55/0xb0 [ 66.722017][ T5950] ? clear_bhb_loop+0x55/0xb0 [ 66.722046][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.722074][ T5950] RIP: 0033:0x7fb112dacde9 [ 66.722150][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.722169][ T5950] RSP: 002b:00007fb1113f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.722188][ T5950] RAX: ffffffffffffffda RBX: 00007fb112fc6080 RCX: 00007fb112dacde9 [ 66.722201][ T5950] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 66.722216][ T5950] RBP: 00007fb1113f6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.722228][ T5950] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 66.722240][ T5950] R13: 0000000000000000 R14: 00007fb112fc6080 R15: 00007fff10191528 [ 66.722260][ T5950] [ 66.845388][ T5954] loop6: detected capacity change from 0 to 512 [ 67.129775][ T5954] journal_path: Non-blockdev passed as './bus' [ 67.136041][ T5954] EXT4-fs: error: could not find journal device path [ 67.156914][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 67.203164][ T5965] loop6: detected capacity change from 0 to 512 [ 67.217897][ T5965] journal_path: Non-blockdev passed as './bus' [ 67.224104][ T5965] EXT4-fs: error: could not find journal device path [ 67.246928][ T3302] EXT4-fs unmount: 31 callbacks suppressed [ 67.246939][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.269152][ T29] audit: type=1400 audit(1738827188.565:1484): avc: denied { write } for pid=5968 comm="+}[@" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.316383][ T5974] FAULT_INJECTION: forcing a failure. [ 67.316383][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 67.329050][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.4.759 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 67.329076][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.329089][ T5974] Call Trace: [ 67.329095][ T5974] [ 67.329102][ T5974] dump_stack_lvl+0xf2/0x150 [ 67.329202][ T5974] dump_stack+0x15/0x1a [ 67.329244][ T5974] should_fail_ex+0x24a/0x260 [ 67.329281][ T5974] should_failslab+0x8f/0xb0 [ 67.329306][ T5974] __kmalloc_node_noprof+0xad/0x410 [ 67.329337][ T5974] ? __kvmalloc_node_noprof+0x72/0x170 [ 67.329359][ T5974] __kvmalloc_node_noprof+0x72/0x170 [ 67.329428][ T5974] nf_hook_entries_grow+0x1bd/0x470 [ 67.329456][ T5974] __nf_register_net_hook+0x16b/0x480 [ 67.329486][ T5974] ? pcpu_chunk_relocate+0x183/0x280 [ 67.329599][ T5974] nf_register_net_hook+0x88/0x130 [ 67.329628][ T5974] nf_register_net_hooks+0x41/0x140 [ 67.329715][ T5974] nf_defrag_ipv6_enable+0x6c/0xc0 [ 67.329743][ T5974] socket_mt_v2_check+0x6c/0x160 [ 67.329761][ T5974] xt_check_match+0x259/0x4b0 [ 67.329856][ T5974] ? strnlen+0x28/0x50 [ 67.329921][ T5974] ? xt_find_match+0x1c1/0x1e0 [ 67.329944][ T5974] ? strnlen+0x28/0x50 [ 67.329969][ T5974] ? strcmp+0x21/0x50 [ 67.329990][ T5974] ? xt_find_match+0x1c1/0x1e0 [ 67.330012][ T5974] translate_table+0xb44/0x1040 [ 67.330048][ T5974] ? _copy_from_user+0x89/0xa0 [ 67.330124][ T5974] do_ip6t_set_ctl+0x7cc/0x8c0 [ 67.330154][ T5974] ? kstrtouint+0x77/0xc0 [ 67.330181][ T5974] nf_setsockopt+0x195/0x1b0 [ 67.330243][ T5974] ipv6_setsockopt+0x10f/0x130 [ 67.330266][ T5974] tcp_setsockopt+0x93/0xb0 [ 67.330325][ T5974] sock_common_setsockopt+0x64/0x80 [ 67.330347][ T5974] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.330370][ T5974] __sys_setsockopt+0x187/0x200 [ 67.330486][ T5974] __x64_sys_setsockopt+0x66/0x80 [ 67.330513][ T5974] x64_sys_call+0x282e/0x2dc0 [ 67.330540][ T5974] do_syscall_64+0xc9/0x1c0 [ 67.330629][ T5974] ? clear_bhb_loop+0x55/0xb0 [ 67.330654][ T5974] ? clear_bhb_loop+0x55/0xb0 [ 67.330676][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.330706][ T5974] RIP: 0033:0x7f26a0b4cde9 [ 67.330719][ T5974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.330737][ T5974] RSP: 002b:00007f269f1b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.330757][ T5974] RAX: ffffffffffffffda RBX: 00007f26a0d65fa0 RCX: 00007f26a0b4cde9 [ 67.330776][ T5974] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 67.330787][ T5974] RBP: 00007f269f1b1090 R08: 0000000000000468 R09: 0000000000000000 [ 67.330796][ T5974] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 67.330806][ T5974] R13: 0000000000000000 R14: 00007f26a0d65fa0 R15: 00007ffe0ce36108 [ 67.330821][ T5974] [ 67.613125][ T5979] loop2: detected capacity change from 0 to 128 [ 67.646386][ T29] audit: type=1326 audit(1738827188.945:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.669772][ T29] audit: type=1326 audit(1738827188.945:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.693087][ T29] audit: type=1326 audit(1738827188.945:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.716518][ T29] audit: type=1326 audit(1738827188.945:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.739838][ T29] audit: type=1326 audit(1738827188.945:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.763179][ T29] audit: type=1326 audit(1738827188.945:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.786410][ T29] audit: type=1326 audit(1738827188.945:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 67.809711][ T29] audit: type=1326 audit(1738827188.945:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 68.006576][ T6001] loop6: detected capacity change from 0 to 512 [ 68.013076][ T6001] EXT4-fs: Ignoring removed nobh option [ 68.025842][ T6001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.038576][ T6001] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.222405][ T6014] sel_write_user: 1 callbacks suppressed [ 68.222418][ T6014] SELinux: syz.5.772 (6014) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.292906][ T6022] lo speed is unknown, defaulting to 1000 [ 68.514331][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.777'. [ 68.528738][ T6022] syzkaller1: entered promiscuous mode [ 68.534337][ T6022] syzkaller1: entered allmulticast mode [ 68.536521][ T6033] SELinux: syz.4.779 (6033) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.620265][ T6036] SELinux: syz.4.780 (6036) set checkreqprot to 1. This is no longer supported. [ 68.655350][ T6040] netlink: 'syz.5.781': attribute type 4 has an invalid length. [ 68.663044][ T6040] netlink: 152 bytes leftover after parsing attributes in process `syz.5.781'. [ 68.696052][ T6040] : renamed from  (while UP) [ 68.796517][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.821576][ T6051] SELinux: syz.6.785 (6051) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 69.347225][ T6065] SELinux: syz.0.791 (6065) set checkreqprot to 1. This is no longer supported. [ 69.352266][ T6063] sg_write: data in/out 122/10 bytes for SCSI command 0x20-- guessing data in; [ 69.352266][ T6063] program syz.2.790 not setting count and/or reply_len properly [ 69.998326][ T6088] loop6: detected capacity change from 0 to 512 [ 70.015828][ T6088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.043737][ T6088] ext4 filesystem being mounted at /96/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.130085][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.157321][ T6097] loop6: detected capacity change from 0 to 128 [ 70.193521][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.805'. [ 70.205984][ T6106] loop4: detected capacity change from 0 to 512 [ 70.212339][ T6106] journal_path: Non-blockdev passed as './bus' [ 70.218560][ T6106] EXT4-fs: error: could not find journal device path [ 70.274831][ T6115] loop2: detected capacity change from 0 to 512 [ 70.281354][ T6113] loop4: detected capacity change from 0 to 512 [ 70.294481][ T6113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.307215][ T6113] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.318724][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.331474][ T6115] ext4 filesystem being mounted at /166/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.369703][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.370137][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.986863][ T6131] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 70.995090][ T6131] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 71.044539][ T6137] SELinux: syz.6.816 (6137) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.095642][ T6145] SELinux: syz.0.821 (6145) set checkreqprot to 1. This is no longer supported. [ 71.133115][ T6149] SELinux: syz.6.823 (6149) set checkreqprot to 1. This is no longer supported. [ 71.173326][ T6153] SELinux: syz.6.825 (6153) set checkreqprot to 1. This is no longer supported. [ 71.200693][ T6156] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 71.208903][ T6156] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 71.251964][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.6.828'. [ 71.569106][ T3373] kernel write not supported for file /380/attr/exec (pid: 3373 comm: kworker/0:3) [ 71.593012][ T6175] SELinux: syz.4.833 (6175) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.627686][ T6177] macvlan0: entered promiscuous mode [ 71.633839][ T6177] ipvlan0: entered promiscuous mode [ 71.639584][ T6177] ipvlan0: left promiscuous mode [ 71.645416][ T6177] macvlan0: left promiscuous mode [ 71.726529][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 71.726582][ T29] audit: type=1326 audit(1738827193.025:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x0 [ 72.003768][ T29] audit: type=1326 audit(1738827193.295:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.048769][ T29] audit: type=1326 audit(1738827193.325:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.072217][ T29] audit: type=1326 audit(1738827193.325:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.095626][ T29] audit: type=1326 audit(1738827193.325:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.119039][ T29] audit: type=1326 audit(1738827193.325:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.142273][ T29] audit: type=1326 audit(1738827193.325:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.165584][ T29] audit: type=1326 audit(1738827193.325:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.188871][ T29] audit: type=1326 audit(1738827193.345:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.212270][ T29] audit: type=1326 audit(1738827193.345:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 72.259980][ T6198] SELinux: syz.0.841 (6198) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.300706][ T6200] loop5: detected capacity change from 0 to 512 [ 72.309533][ T6202] SELinux: syz.2.844 (6202) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.330808][ T6200] journal_path: Non-blockdev passed as './bus' [ 72.337116][ T6200] EXT4-fs: error: could not find journal device path [ 72.357832][ T6204] sd 0:0:1:0: device reset [ 72.412857][ T6208] sd 0:0:1:0: device reset [ 72.486431][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.849'. [ 72.541834][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.853'. [ 72.546771][ T6207] futex_wake_op: syz.0.846 tries to shift op by -1; fix this program [ 72.580319][ T6222] loop2: detected capacity change from 0 to 128 [ 72.586726][ T6218] loop6: detected capacity change from 0 to 512 [ 72.621720][ T6218] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.630992][ T6218] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 72.650249][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'. [ 72.653267][ T6218] EXT4-fs (loop6): orphan cleanup on readonly fs [ 72.666335][ T6218] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm +}[@: bad orphan inode 15 [ 72.678662][ T6218] ext4_test_bit(bit=14, block=18) = 1 [ 72.684062][ T6218] is_bad_inode(inode)=0 [ 72.688237][ T6218] NEXT_ORPHAN(inode)=1023 [ 72.692572][ T6218] max_ino=32 [ 72.695862][ T6218] i_nlink=0 [ 72.699516][ T6218] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 72.719173][ T6218] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 72.734365][ T6218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.778605][ T6236] SELinux: syz.0.858 (6236) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.849531][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.901457][ T6255] SELinux: syz.6.862 (6255) set checkreqprot to 1. This is no longer supported. [ 72.953582][ T6264] SELinux: syz.4.866 (6264) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.974135][ T6266] SELinux: syz.0.865 (6266) set checkreqprot to 1. This is no longer supported. [ 73.051014][ T6274] SELinux: syz.0.869 (6274) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.178655][ T6286] loop4: detected capacity change from 0 to 512 [ 73.186349][ T6286] journal_path: Non-blockdev passed as './bus' [ 73.192543][ T6286] EXT4-fs: error: could not find journal device path [ 73.227598][ T6291] netlink: 'syz.6.873': attribute type 1 has an invalid length. [ 73.333002][ T6299] loop4: detected capacity change from 0 to 512 [ 73.341621][ T6299] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.350736][ T6299] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 73.366237][ T6299] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.382871][ T6299] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm +}[@: bad orphan inode 15 [ 73.407108][ T6299] ext4_test_bit(bit=14, block=18) = 1 [ 73.412578][ T6299] is_bad_inode(inode)=0 [ 73.416784][ T6299] NEXT_ORPHAN(inode)=1023 [ 73.421152][ T6299] max_ino=32 [ 73.424374][ T6299] i_nlink=0 [ 73.469429][ T6306] SELinux: syz.5.880 (6306) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.491045][ T6304] loop2: detected capacity change from 0 to 512 [ 73.509081][ T6299] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 73.529925][ T6309] SELinux: syz.0.881 (6309) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.537552][ T6304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.564051][ T6299] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 73.573420][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.603698][ T6304] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.620445][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.884'. [ 73.645702][ T6317] SELinux: failed to load policy [ 73.683427][ T6321] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 73.691650][ T6321] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 73.720898][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.734145][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.735529][ T6325] SELinux: syz.0.890 (6325) set checkreqprot to 1. This is no longer supported. [ 73.780285][ T6331] loop2: detected capacity change from 0 to 128 [ 73.794932][ T6327] FAULT_INJECTION: forcing a failure. [ 73.794932][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 73.807655][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.4.888 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 73.807753][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.807768][ T6327] Call Trace: [ 73.807776][ T6327] [ 73.807784][ T6327] dump_stack_lvl+0xf2/0x150 [ 73.807817][ T6327] dump_stack+0x15/0x1a [ 73.807898][ T6327] should_fail_ex+0x24a/0x260 [ 73.807939][ T6327] should_failslab+0x8f/0xb0 [ 73.807976][ T6327] kmem_cache_alloc_noprof+0x52/0x320 [ 73.808036][ T6327] ? ep_insert+0x137/0xcd0 [ 73.808071][ T6327] ep_insert+0x137/0xcd0 [ 73.808100][ T6327] ? selinux_capable+0x1f2/0x260 [ 73.808137][ T6327] ? mutex_lock+0xd/0x40 [ 73.808251][ T6327] ? ep_loop_check_proc+0x1c4/0x1f0 [ 73.808287][ T6327] do_epoll_ctl+0x604/0x930 [ 73.808315][ T6327] __x64_sys_epoll_ctl+0xc6/0xf0 [ 73.808409][ T6327] x64_sys_call+0x1361/0x2dc0 [ 73.808453][ T6327] do_syscall_64+0xc9/0x1c0 [ 73.808480][ T6327] ? clear_bhb_loop+0x55/0xb0 [ 73.808511][ T6327] ? clear_bhb_loop+0x55/0xb0 [ 73.808655][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.808677][ T6327] RIP: 0033:0x7f26a0b4cde9 [ 73.808690][ T6327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.808704][ T6327] RSP: 002b:00007f269f1b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 73.808719][ T6327] RAX: ffffffffffffffda RBX: 00007f26a0d65fa0 RCX: 00007f26a0b4cde9 [ 73.808731][ T6327] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006 [ 73.808749][ T6327] RBP: 00007f269f1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 73.808760][ T6327] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 73.808772][ T6327] R13: 0000000000000000 R14: 00007f26a0d65fa0 R15: 00007ffe0ce36108 [ 73.808790][ T6327] [ 74.002850][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 74.011881][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 74.020786][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 74.062263][ T6339] SELinux: syz.6.893 (6339) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.083246][ T6341] SELinux: syz.0.894 (6341) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.135724][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.895'. [ 74.198435][ T6355] bond0: entered promiscuous mode [ 74.203516][ T6355] bond0: entered allmulticast mode [ 74.209119][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.215995][ T6349] loop5: detected capacity change from 0 to 512 [ 74.224560][ T6355] bond0 (unregistering): Released all slaves [ 74.233542][ T6349] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.242664][ T6349] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 74.256442][ T6349] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.267787][ T6349] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm +}[@: bad orphan inode 15 [ 74.285355][ T6349] ext4_test_bit(bit=14, block=18) = 1 [ 74.290770][ T6349] is_bad_inode(inode)=0 [ 74.294946][ T6349] NEXT_ORPHAN(inode)=1023 [ 74.299290][ T6349] max_ino=32 [ 74.302504][ T6349] i_nlink=0 [ 74.338762][ T6349] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 74.357104][ T6355] loop4: detected capacity change from 0 to 512 [ 74.382520][ T6355] FAT-fs (loop4): bogus logical sector size 0 [ 74.388662][ T6355] FAT-fs (loop4): Can't find a valid FAT filesystem [ 74.399915][ T6349] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 74.416627][ T6355] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 74.426691][ T6349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.484115][ T6363] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 74.492381][ T6363] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 74.549502][ T6369] loop6: detected capacity change from 0 to 512 [ 74.557323][ T6369] journal_path: Non-blockdev passed as './bus' [ 74.563492][ T6369] EXT4-fs: error: could not find journal device path [ 74.591284][ T6372] SELinux: syz.6.907 (6372) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.646314][ T6377] loop6: detected capacity change from 0 to 512 [ 74.647971][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.682008][ T6377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.698943][ T6385] SELinux: syz.2.912 (6385) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.699601][ T6377] ext4 filesystem being mounted at /120/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.752151][ T6387] SELinux: syz.2.913 (6387) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.775289][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.788106][ T6383] loop5: detected capacity change from 0 to 512 [ 74.806486][ T6383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.820659][ T6391] sd 0:0:1:0: device reset [ 74.823876][ T6383] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.878814][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.909854][ T6398] loop2: detected capacity change from 0 to 128 [ 74.967289][ T6400] SELinux: syz.2.920 (6400) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 75.297493][ T6420] loop2: detected capacity change from 0 to 512 [ 75.466206][ T6420] journal_path: Non-blockdev passed as './bus' [ 75.472435][ T6420] EXT4-fs: error: could not find journal device path [ 75.479638][ T6423] loop4: detected capacity change from 0 to 1024 [ 75.486447][ T6423] journal_path: Non-blockdev passed as './file1' [ 75.487338][ T6426] loop5: detected capacity change from 0 to 512 [ 75.492823][ T6423] EXT4-fs: error: could not find journal device path [ 75.530390][ T6426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.545399][ T6426] ext4 filesystem being mounted at /145/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.590227][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.628739][ T6438] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 75.636981][ T6438] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 75.660956][ T6440] loop5: detected capacity change from 0 to 128 [ 75.826807][ T6456] loop6: detected capacity change from 0 to 2048 [ 75.881628][ T6456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.933358][ T6467] loop4: detected capacity change from 0 to 512 [ 75.945383][ T6467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.959893][ T6467] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.015798][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.037865][ T6472] loop4: detected capacity change from 0 to 128 [ 76.142824][ T6477] loop4: detected capacity change from 0 to 512 [ 76.149828][ T6477] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.158906][ T6477] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 76.167684][ T6477] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 76.176687][ T6477] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 76.184856][ T6477] System zones: 0-2, 18-18, 34-34 [ 76.190354][ T6477] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 76.205413][ T6477] EXT4-fs (loop4): 1 truncate cleaned up [ 76.211467][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.234518][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.339089][ T6488] sd 0:0:1:0: device reset [ 76.390633][ T6490] FAULT_INJECTION: forcing a failure. [ 76.390633][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 76.403415][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.0.951 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 76.403512][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.403526][ T6490] Call Trace: [ 76.403532][ T6490] [ 76.403539][ T6490] dump_stack_lvl+0xf2/0x150 [ 76.403568][ T6490] dump_stack+0x15/0x1a [ 76.403594][ T6490] should_fail_ex+0x24a/0x260 [ 76.403628][ T6490] should_failslab+0x8f/0xb0 [ 76.403655][ T6490] __kmalloc_node_noprof+0xad/0x410 [ 76.403711][ T6490] ? blk_mq_alloc_tag_set+0x290/0x610 [ 76.403746][ T6490] blk_mq_alloc_tag_set+0x290/0x610 [ 76.403813][ T6490] ? idr_alloc+0x85/0xd0 [ 76.403902][ T6490] ? __pfx_resume_store+0x10/0x10 [ 76.404015][ T6490] loop_add+0x260/0x590 [ 76.404046][ T6490] ? __pfx_resume_store+0x10/0x10 [ 76.404069][ T6490] loop_probe+0x83/0x90 [ 76.404091][ T6490] ? __pfx_loop_probe+0x10/0x10 [ 76.404192][ T6490] blk_request_module+0x1bb/0x1e0 [ 76.404296][ T6490] blkdev_get_no_open+0x43/0xe0 [ 76.404333][ T6490] bdev_file_open_by_dev+0x99/0x220 [ 76.404362][ T6490] ? __pfx_resume_store+0x10/0x10 [ 76.404384][ T6490] swsusp_check+0x3f/0x240 [ 76.404448][ T6490] software_resume+0x43/0x2e0 [ 76.404466][ T6490] resume_store+0x34e/0x3a0 [ 76.404490][ T6490] kobj_attr_store+0x47/0x70 [ 76.404522][ T6490] ? __pfx_kobj_attr_store+0x10/0x10 [ 76.404625][ T6490] sysfs_kf_write+0xae/0xd0 [ 76.404658][ T6490] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.404757][ T6490] kernfs_fop_write_iter+0x1c8/0x2c0 [ 76.404782][ T6490] vfs_write+0x77b/0x920 [ 76.404803][ T6490] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 76.404838][ T6490] ksys_write+0xe8/0x1b0 [ 76.404897][ T6490] __x64_sys_write+0x42/0x50 [ 76.405007][ T6490] x64_sys_call+0x287e/0x2dc0 [ 76.405064][ T6490] do_syscall_64+0xc9/0x1c0 [ 76.405085][ T6490] ? clear_bhb_loop+0x55/0xb0 [ 76.405189][ T6490] ? clear_bhb_loop+0x55/0xb0 [ 76.405217][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.405254][ T6490] RIP: 0033:0x7fd4a530cde9 [ 76.405269][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.405287][ T6490] RSP: 002b:00007fd4a3977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.405306][ T6490] RAX: ffffffffffffffda RBX: 00007fd4a5525fa0 RCX: 00007fd4a530cde9 [ 76.405320][ T6490] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000005 [ 76.405331][ T6490] RBP: 00007fd4a3977090 R08: 0000000000000000 R09: 0000000000000000 [ 76.405340][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.405350][ T6490] R13: 0000000000000000 R14: 00007fd4a5525fa0 R15: 00007ffcca94f2b8 [ 76.405367][ T6490] [ 76.717719][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.784128][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 76.784140][ T29] audit: type=1326 audit(1738827198.065:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.813642][ T29] audit: type=1326 audit(1738827198.065:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.837028][ T29] audit: type=1326 audit(1738827198.065:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.860427][ T29] audit: type=1326 audit(1738827198.065:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.883721][ T29] audit: type=1326 audit(1738827198.065:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.907109][ T29] audit: type=1326 audit(1738827198.065:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.930404][ T29] audit: type=1326 audit(1738827198.065:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.953758][ T29] audit: type=1326 audit(1738827198.065:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 76.977114][ T29] audit: type=1326 audit(1738827198.065:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 77.000418][ T29] audit: type=1326 audit(1738827198.065:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 77.025017][ T6498] loop2: detected capacity change from 0 to 512 [ 77.031474][ T6498] journal_path: Non-blockdev passed as './bus' [ 77.037761][ T6498] EXT4-fs: error: could not find journal device path [ 77.063117][ T6503] loop6: detected capacity change from 0 to 512 [ 77.146340][ T6514] SELinux: syz.2.960 (6514) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 77.211223][ T6519] sd 0:0:1:0: device reset [ 77.224579][ T6503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.278989][ T6503] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.339804][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.363868][ T6534] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 77.372139][ T6534] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 77.482399][ T6538] loop6: detected capacity change from 0 to 128 [ 77.639416][ T6544] loop5: detected capacity change from 0 to 512 [ 77.659623][ T6544] journal_path: Non-blockdev passed as './bus' [ 77.665834][ T6544] EXT4-fs: error: could not find journal device path [ 77.742842][ T6550] loop5: detected capacity change from 0 to 512 [ 77.791338][ T6550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.820985][ T6557] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 77.835975][ T6550] ext4 filesystem being mounted at /158/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.860392][ T6559] FAULT_INJECTION: forcing a failure. [ 77.860392][ T6559] name failslab, interval 1, probability 0, space 0, times 0 [ 77.873161][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.6.979 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 77.873223][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.873241][ T6559] Call Trace: [ 77.873247][ T6559] [ 77.873253][ T6559] dump_stack_lvl+0xf2/0x150 [ 77.873280][ T6559] dump_stack+0x15/0x1a [ 77.873306][ T6559] should_fail_ex+0x24a/0x260 [ 77.873361][ T6559] should_failslab+0x8f/0xb0 [ 77.873385][ T6559] __kmalloc_noprof+0xab/0x3f0 [ 77.873456][ T6559] ? kernfs_fop_write_iter+0xe1/0x2c0 [ 77.873492][ T6559] kernfs_fop_write_iter+0xe1/0x2c0 [ 77.873593][ T6559] iter_file_splice_write+0x5f1/0x980 [ 77.873644][ T6559] ? __pfx_iter_file_splice_write+0x10/0x10 [ 77.873682][ T6559] direct_splice_actor+0x160/0x2c0 [ 77.873703][ T6559] splice_direct_to_actor+0x302/0x670 [ 77.873803][ T6559] ? __pfx_direct_splice_actor+0x10/0x10 [ 77.873827][ T6559] do_splice_direct+0xd7/0x150 [ 77.873846][ T6559] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 77.873878][ T6559] do_sendfile+0x398/0x660 [ 77.873972][ T6559] __x64_sys_sendfile64+0x110/0x150 [ 77.874009][ T6559] x64_sys_call+0xfbd/0x2dc0 [ 77.874036][ T6559] do_syscall_64+0xc9/0x1c0 [ 77.874065][ T6559] ? clear_bhb_loop+0x55/0xb0 [ 77.874238][ T6559] ? clear_bhb_loop+0x55/0xb0 [ 77.874317][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.874350][ T6559] RIP: 0033:0x7f8e4b95cde9 [ 77.874367][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.874385][ T6559] RSP: 002b:00007f8e49fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 77.874402][ T6559] RAX: ffffffffffffffda RBX: 00007f8e4bb75fa0 RCX: 00007f8e4b95cde9 [ 77.874418][ T6559] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 77.874446][ T6559] RBP: 00007f8e49fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.874457][ T6559] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 77.874472][ T6559] R13: 0000000000000000 R14: 00007f8e4bb75fa0 R15: 00007ffe8cb7e668 [ 77.874491][ T6559] [ 78.048293][ T6557] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 78.110781][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.155472][ T6562] loop5: detected capacity change from 0 to 512 [ 78.161927][ T6562] journal_path: Non-blockdev passed as './bus' [ 78.168120][ T6562] EXT4-fs: error: could not find journal device path [ 78.365897][ T6579] __nla_validate_parse: 5 callbacks suppressed [ 78.365914][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 78.412014][ T6587] loop6: detected capacity change from 0 to 1024 [ 78.438030][ T6587] journal_path: Non-blockdev passed as './file1' [ 78.444421][ T6587] EXT4-fs: error: could not find journal device path [ 78.492866][ T6592] SELinux: syz.6.988 (6592) set checkreqprot to 1. This is no longer supported. [ 79.107599][ T6608] loop4: detected capacity change from 0 to 512 [ 79.114321][ T6608] journal_path: Non-blockdev passed as './bus' [ 79.120501][ T6608] EXT4-fs: error: could not find journal device path [ 79.222523][ T6615] loop4: detected capacity change from 0 to 2048 [ 79.232592][ T6618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.999'. [ 79.270563][ T6615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.291417][ T6623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1002'. [ 79.306930][ T6631] SELinux: syz.0.1004 (6631) set checkreqprot to 1. This is no longer supported. [ 79.329142][ T6633] SELinux: syz.5.1005 (6633) set checkreqprot to 1. This is no longer supported. [ 79.383390][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 79.429199][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1009'. [ 79.460878][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1008'. [ 79.536300][ T6636] syz.4.1000 (6636) used greatest stack depth: 10368 bytes left [ 79.572132][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.601215][ T6660] SELinux: Context !Լ:mYTE̡ P}uo%}&`1Sn'M}L`-ćg孿(koKULE is not valid (left unmapped). [ 79.634870][ T6663] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 79.643042][ T6663] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 79.693022][ T6669] loop6: detected capacity change from 0 to 512 [ 79.712899][ T6669] journal_path: Non-blockdev passed as './bus' [ 79.719191][ T6669] EXT4-fs: error: could not find journal device path [ 79.781511][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1020'. [ 79.878146][ T6686] loop6: detected capacity change from 0 to 512 [ 79.917738][ T6686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.930665][ T6686] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.987994][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.011566][ T6689] SELinux: syz.2.1024 (6689) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.030411][ T6694] loop6: detected capacity change from 0 to 128 [ 80.062392][ T6696] loop2: detected capacity change from 0 to 128 [ 80.294059][ T6705] macvlan0: entered promiscuous mode [ 80.300473][ T6705] ipvlan0: entered promiscuous mode [ 80.307258][ T6705] ipvlan0: left promiscuous mode [ 80.312350][ T6705] macvlan0: left promiscuous mode [ 80.382120][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1031'. [ 80.408252][ T6714] loop5: detected capacity change from 0 to 128 [ 80.425739][ T6714] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.438081][ T6714] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.439187][ T6717] loop6: detected capacity change from 0 to 2048 [ 80.472693][ T6714] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.1033: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 80.495986][ T6714] EXT4-fs (loop5): Remounting filesystem read-only [ 80.516886][ T6717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.537664][ T6717] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.1034: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 80.606718][ T6723] SELinux: syz.0.1036 (6723) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.623139][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 80.650467][ T6730] 9pnet_fd: Insufficient options for proto=fd [ 80.672113][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 81.030811][ T4073] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.048505][ T3377] kernel write not supported for file /400/attr/exec (pid: 3377 comm: kworker/0:6) [ 81.192532][ T6781] loop5: detected capacity change from 0 to 128 [ 81.213892][ T6783] netem: change failed [ 81.273098][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.322426][ T6791] loop6: detected capacity change from 0 to 512 [ 81.696208][ T6811] SELinux: failed to load policy [ 81.830577][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 81.830593][ T29] audit: type=1326 audit(1738827203.125:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 81.860462][ T29] audit: type=1326 audit(1738827203.125:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 81.883931][ T29] audit: type=1326 audit(1738827203.125:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 81.907455][ T29] audit: type=1326 audit(1738827203.135:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 81.930863][ T29] audit: type=1326 audit(1738827203.135:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 81.954257][ T29] audit: type=1326 audit(1738827203.135:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 81.977667][ T29] audit: type=1326 audit(1738827203.135:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 82.000969][ T29] audit: type=1326 audit(1738827203.135:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 82.024472][ T29] audit: type=1326 audit(1738827203.135:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 82.047853][ T29] audit: type=1326 audit(1738827203.135:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 82.208503][ T6836] SELinux: syz.6.1078 (6836) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.240564][ T6839] sd 0:0:1:0: device reset [ 82.268723][ T6842] loop6: detected capacity change from 0 to 512 [ 82.281104][ T6842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.313748][ T6842] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.365258][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.388750][ T6849] loop6: detected capacity change from 0 to 512 [ 82.402428][ T6849] journal_path: Non-blockdev passed as './bus' [ 82.408725][ T6849] EXT4-fs: error: could not find journal device path [ 82.495889][ T6853] loop6: detected capacity change from 0 to 512 [ 82.505980][ T6853] journal_path: Non-blockdev passed as './bus' [ 82.512201][ T6853] EXT4-fs: error: could not find journal device path [ 82.522678][ T3377] kernel write not supported for file /420/attr/exec (pid: 3377 comm: kworker/0:6) [ 82.556528][ T6862] macvlan0: entered promiscuous mode [ 82.576894][ T6862] ipvlan0: entered promiscuous mode [ 82.582616][ T6862] ipvlan0: left promiscuous mode [ 82.601947][ T6862] macvlan0: left promiscuous mode [ 82.609219][ T6868] loop5: detected capacity change from 0 to 512 [ 82.628873][ T6874] loop2: detected capacity change from 0 to 512 [ 82.668157][ T6868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.691418][ T6874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.706012][ T6868] ext4 filesystem being mounted at /183/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.727095][ T6874] ext4 filesystem being mounted at /207/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.775283][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.791548][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.928068][ T6909] loop2: detected capacity change from 0 to 2048 [ 82.946826][ T6910] sd 0:0:1:0: device reset [ 82.953770][ T6909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.478639][ T6979] lo speed is unknown, defaulting to 1000 [ 83.670840][ T6982] __nla_validate_parse: 6 callbacks suppressed [ 83.670859][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1143'. [ 83.782454][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.823372][ T6989] sd 0:0:1:0: device reset [ 83.851922][ T6991] loop2: detected capacity change from 0 to 512 [ 83.879129][ T6991] journal_path: Non-blockdev passed as './bus' [ 83.885339][ T6991] EXT4-fs: error: could not find journal device path [ 83.907808][ T6993] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 83.916131][ T6993] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 83.965871][ T6999] sd 0:0:1:0: device reset [ 84.042165][ T7013] loop2: detected capacity change from 0 to 512 [ 84.057098][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.069774][ T7013] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.081601][ T7015] loop6: detected capacity change from 0 to 512 [ 84.104558][ T7015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.149120][ T7015] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.196010][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.324681][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.383991][ T7024] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 84.392196][ T7024] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 84.483683][ T7026] loop6: detected capacity change from 0 to 512 [ 85.242499][ T7033] SELinux: syz.6.1166 (7033) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 85.346363][ T7042] loop6: detected capacity change from 0 to 512 [ 85.352909][ T7042] journal_path: Non-blockdev passed as './bus' [ 85.359168][ T7042] EXT4-fs: error: could not find journal device path [ 85.389067][ T7051] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 85.397337][ T7051] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 85.417493][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 85.432107][ T7057] SELinux: syz.6.1177 (7057) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 85.553291][ T7065] loop6: detected capacity change from 0 to 2048 [ 85.587745][ T7068] lo speed is unknown, defaulting to 1000 [ 85.661859][ T7065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.098643][ T7084] loop2: detected capacity change from 0 to 1024 [ 86.116338][ T7084] journal_path: Non-blockdev passed as './file1' [ 86.122705][ T7084] EXT4-fs: error: could not find journal device path [ 86.328277][ T7101] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 86.336645][ T7101] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 86.370441][ T35] kernel write not supported for file /541/attr/exec (pid: 35 comm: kworker/1:1) [ 86.410191][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.471416][ T7114] lo speed is unknown, defaulting to 1000 [ 86.691557][ T7124] loop6: detected capacity change from 0 to 512 [ 86.727838][ T7124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.740869][ T7124] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.804454][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.878062][ T7142] SELinux: failed to load policy [ 86.912823][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1212'. [ 87.005941][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 87.005956][ T29] audit: type=1326 audit(1738827208.305:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.036468][ T29] audit: type=1326 audit(1738827208.305:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.059953][ T29] audit: type=1326 audit(1738827208.335:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.083407][ T29] audit: type=1326 audit(1738827208.335:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.106910][ T29] audit: type=1326 audit(1738827208.335:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.130276][ T29] audit: type=1326 audit(1738827208.335:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.153865][ T29] audit: type=1326 audit(1738827208.335:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.177289][ T29] audit: type=1326 audit(1738827208.335:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f26a0b4b657 code=0x7ffc0000 [ 87.200724][ T29] audit: type=1326 audit(1738827208.335:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.224316][ T29] audit: type=1326 audit(1738827208.335:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 87.256340][ T7158] loop2: detected capacity change from 0 to 512 [ 87.268758][ T7158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.281378][ T7158] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.326689][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.760075][ T7194] loop6: detected capacity change from 0 to 512 [ 87.769125][ T7194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.781948][ T7194] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.846471][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.935903][ T7210] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 87.944313][ T7210] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 88.160229][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1245'. [ 88.283491][ T7234] 9pnet_fd: Insufficient options for proto=fd [ 88.358066][ T7243] capability: warning: `syz.4.1251' uses 32-bit capabilities (legacy support in use) [ 88.369315][ T7243] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 88.392876][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.403419][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.413241][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.423702][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.433497][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.443961][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.453785][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.464289][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.474170][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.484755][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.042677][ T7267] netlink: 'syz.5.1260': attribute type 3 has an invalid length. [ 89.582996][ T7334] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 89.591207][ T7334] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 90.163845][ T7359] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 90.172099][ T7359] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 90.364921][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1305'. [ 90.375973][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1304'. [ 90.385016][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1304'. [ 90.512163][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1314'. [ 90.559747][ T7393] SELinux: failed to load policy [ 90.640210][ T7401] netlink: 'syz.0.1317': attribute type 3 has an invalid length. [ 90.672946][ T7405] 9pnet_fd: Insufficient options for proto=fd [ 90.691544][ T7407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1322'. [ 91.207376][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 91.239272][ T7427] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.1329'. [ 91.252455][ T7427] tipc: Started in network mode [ 91.257443][ T7427] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.266509][ T7427] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 91.274790][ T7427] tipc: Enabled bearer , priority 10 [ 91.388503][ T7435] 9pnet_fd: Insufficient options for proto=fd [ 91.530241][ T7447] SELinux: syz.6.1338 (7447) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 91.553423][ T7448] netlink: 'syz.5.1337': attribute type 3 has an invalid length. [ 91.672283][ T7453] loop6: detected capacity change from 0 to 512 [ 91.672550][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 91.738815][ T7453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.751478][ T7453] ext4 filesystem being mounted at /199/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.795578][ T4244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.845113][ T7468] loop6: detected capacity change from 0 to 512 [ 91.851653][ T7468] journal_path: Non-blockdev passed as './bus' [ 91.857863][ T7468] EXT4-fs: error: could not find journal device path [ 92.016894][ T7483] netlink: 'syz.0.1352': attribute type 3 has an invalid length. [ 92.085309][ T7485] sd 0:0:1:0: device reset [ 92.179685][ T7493] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 92.188102][ T7493] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 92.370747][ T7514] 9pnet_fd: Insufficient options for proto=fd [ 92.394247][ T9] tipc: Node number set to 1 [ 92.471314][ T7524] bridge_slave_0: left allmulticast mode [ 92.477092][ T7524] bridge_slave_0: left promiscuous mode [ 92.482866][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.497566][ T7524] bridge_slave_1: left allmulticast mode [ 92.503455][ T7524] bridge_slave_1: left promiscuous mode [ 92.504978][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1374'. [ 92.509127][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.534649][ T7524] : (slave bond_slave_1): Releasing backup interface [ 92.542721][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 92.542732][ T29] audit: type=1326 audit(1738827213.835:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.572315][ T29] audit: type=1326 audit(1738827213.835:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.595759][ T29] audit: type=1326 audit(1738827213.835:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.619154][ T29] audit: type=1326 audit(1738827213.835:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.642651][ T29] audit: type=1326 audit(1738827213.835:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.666066][ T29] audit: type=1326 audit(1738827213.835:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.689619][ T29] audit: type=1326 audit(1738827213.835:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.713135][ T29] audit: type=1326 audit(1738827213.835:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.736435][ T29] audit: type=1326 audit(1738827213.835:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.766879][ T29] audit: type=1326 audit(1738827213.835:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26a0b4cde9 code=0x7ffc0000 [ 92.806421][ T7524] team0: Port device team_slave_0 removed [ 92.825844][ T7524] team0: Port device team_slave_1 removed [ 92.846785][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.854296][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.878853][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.881879][ T7546] 9pnet_fd: Insufficient options for proto=fd [ 92.886271][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.946695][ T7528] hsr_slave_0: left promiscuous mode [ 92.952791][ T7528] hsr_slave_1: left promiscuous mode [ 92.974667][ T7534] lo speed is unknown, defaulting to 1000 [ 93.692504][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1403'. [ 93.971498][ T7611] netlink: 'syz.2.1408': attribute type 39 has an invalid length. [ 94.035488][ T7629] 9pnet_fd: Insufficient options for proto=fd [ 94.109831][ T7635] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 94.118153][ T7635] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 94.161016][ T7640] lo speed is unknown, defaulting to 1000 [ 94.322100][ T7657] 9pnet_fd: Insufficient options for proto=fd [ 94.536111][ T7683] bridge_slave_1: left allmulticast mode [ 94.541812][ T7683] bridge_slave_1: left promiscuous mode [ 94.547566][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.556951][ T7683] bridge_slave_0: left allmulticast mode [ 94.562662][ T7683] bridge_slave_0: left promiscuous mode [ 94.568418][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.735511][ T7708] lo speed is unknown, defaulting to 1000 [ 95.493822][ T7758] __nla_validate_parse: 6 callbacks suppressed [ 95.493834][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1458'. [ 95.535047][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1464'. [ 95.699048][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1474'. [ 95.745665][ T7789] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 95.753892][ T7789] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 95.903183][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1479'. [ 95.934862][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1480'. [ 96.026360][ T7806] netlink: 'syz.5.1483': attribute type 39 has an invalid length. [ 96.113136][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1486'. [ 96.588140][ T7872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1506'. [ 96.613962][ T7869] tipc: Enabling of bearer rejected, failed to enable media [ 96.641200][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'. [ 96.650229][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'. [ 96.780234][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1511'. [ 97.646841][ T7937] lo speed is unknown, defaulting to 1000 [ 97.795354][ T7957] 9pnet_fd: Insufficient options for proto=fd [ 97.879696][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 97.879805][ T29] audit: type=1326 audit(1738827219.175:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.0.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 97.909502][ T29] audit: type=1326 audit(1738827219.175:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.0.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 98.163165][ T7993] lo speed is unknown, defaulting to 1000 [ 98.288095][ T29] audit: type=1326 audit(1738827219.585:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 98.311857][ T29] audit: type=1326 audit(1738827219.585:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 98.364715][ T29] audit: type=1400 audit(1738827219.635:2699): avc: denied { write } for pid=8001 comm="syz.0.1556" path="socket:[18530]" dev="sockfs" ino=18530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.392198][ T29] audit: type=1400 audit(1738827219.685:2700): avc: denied { name_bind } for pid=8001 comm="syz.0.1556" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 98.798918][ T8048] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 98.807253][ T8048] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 99.385412][ T29] audit: type=1326 audit(1738827220.685:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 99.408897][ T29] audit: type=1326 audit(1738827220.685:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 99.483617][ T29] audit: type=1326 audit(1738827220.685:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 99.507086][ T29] audit: type=1326 audit(1738827220.685:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 99.651071][ T8083] netlink: 'syz.6.1589': attribute type 3 has an invalid length. [ 99.713027][ T8092] Cannot find del_set index 0 as target [ 99.942794][ T8114] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 99.951082][ T8114] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 100.021771][ T8122] netlink: 'syz.2.1605': attribute type 3 has an invalid length. [ 100.068221][ T8135] 9pnet_fd: Insufficient options for proto=fd [ 100.097037][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 100.105473][ T8142] lo speed is unknown, defaulting to 1000 [ 100.165074][ T8151] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 100.173283][ T8151] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 100.379874][ T8170] lo speed is unknown, defaulting to 1000 [ 100.407437][ T8174] 9pnet_fd: Insufficient options for proto=fd [ 100.695271][ T8185] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 100.703562][ T8185] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 100.900577][ T8201] lo speed is unknown, defaulting to 1000 [ 100.991924][ T8204] 9pnet_fd: Insufficient options for proto=fd [ 101.184932][ T8220] __nla_validate_parse: 5 callbacks suppressed [ 101.184946][ T8220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1641'. [ 101.223287][ T8220] syz.4.1641 (8220) used greatest stack depth: 9472 bytes left [ 101.495780][ T8239] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 101.504183][ T8239] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 101.633134][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 101.670584][ T8245] netlink: 'syz.4.1653': attribute type 3 has an invalid length. [ 101.751881][ T8259] lo speed is unknown, defaulting to 1000 [ 101.816852][ T8267] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 101.825128][ T8267] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 101.865242][ T8259] 9pnet_fd: Insufficient options for proto=fd [ 101.877002][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1666'. [ 101.895420][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1660'. [ 101.926160][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1669'. [ 101.962181][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1671'. [ 101.984717][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 102.035068][ T8294] lo speed is unknown, defaulting to 1000 [ 102.141352][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1681'. [ 102.185483][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 102.230779][ T8321] netlink: 'syz.5.1687': attribute type 3 has an invalid length. [ 102.465168][ T8340] 9pnet_fd: Insufficient options for proto=fd [ 102.485834][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1696'. [ 102.542873][ T8351] netlink: 'syz.6.1700': attribute type 3 has an invalid length. [ 102.833203][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 102.887175][ T8374] lo speed is unknown, defaulting to 1000 [ 102.920585][ T8380] netlink: 'syz.2.1712': attribute type 3 has an invalid length. [ 103.126648][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 103.126663][ T29] audit: type=1326 audit(1738827224.425:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.6.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 103.203647][ T29] audit: type=1326 audit(1738827224.425:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.6.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 103.354576][ T29] audit: type=1400 audit(1738827224.655:2823): avc: denied { unlink } for pid=3297 comm="syz-executor" name="file7" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.404818][ T29] audit: type=1326 audit(1738827224.705:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.438458][ T29] audit: type=1326 audit(1738827224.705:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.462071][ T29] audit: type=1326 audit(1738827224.705:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.485504][ T29] audit: type=1326 audit(1738827224.705:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.508972][ T29] audit: type=1326 audit(1738827224.705:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.532452][ T29] audit: type=1326 audit(1738827224.705:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.555943][ T29] audit: type=1326 audit(1738827224.705:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 103.598100][ T8414] netlink: 'syz.6.1723': attribute type 1 has an invalid length. [ 103.658229][ T8428] 9pnet_fd: Insufficient options for proto=fd [ 104.013031][ T8465] netlink: 'syz.0.1748': attribute type 3 has an invalid length. [ 104.447410][ T8516] 9pnet_fd: Insufficient options for proto=fd [ 104.470312][ T8518] netlink: 'syz.5.1774': attribute type 3 has an invalid length. [ 105.470406][ T8602] netlink: 'syz.6.1812': attribute type 3 has an invalid length. [ 105.559250][ T8617] 9pnet_fd: Insufficient options for proto=fd [ 106.316162][ T8701] __nla_validate_parse: 12 callbacks suppressed [ 106.316179][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1857'. [ 106.357616][ T8701] bridge0: port 1(batadv1) entered blocking state [ 106.364143][ T8701] bridge0: port 1(batadv1) entered disabled state [ 106.383115][ T8701] batadv1: entered allmulticast mode [ 106.389210][ T8701] batadv1: entered promiscuous mode [ 106.408752][ T8708] netlink: 'syz.0.1859': attribute type 3 has an invalid length. [ 106.643489][ T8725] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1867'. [ 106.671819][ T8729] 9pnet_fd: Insufficient options for proto=fd [ 106.726835][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1871'. [ 106.806526][ T8738] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 106.863504][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 106.872722][ T3394] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 106.876194][ T8746] bridge0: port 3(batadv1) entered blocking state [ 106.882156][ T3394] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 106.888455][ T8746] bridge0: port 3(batadv1) entered disabled state [ 106.897818][ T8746] batadv1: entered allmulticast mode [ 106.953852][ T8746] batadv1: entered promiscuous mode [ 107.060943][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1883'. [ 107.384837][ T3394] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 107.394197][ T3394] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 107.609545][ T8857] vlan1: entered promiscuous mode [ 107.616094][ T8857] : entered promiscuous mode [ 107.621355][ T8857] : left promiscuous mode [ 107.631553][ T8853] lo speed is unknown, defaulting to 1000 [ 107.849646][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1936'. [ 107.991178][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1939'. [ 108.009230][ T8888] vlan3: entered promiscuous mode [ 108.018375][ T8888] : entered promiscuous mode [ 108.023111][ T8888] bond_slave_0: entered promiscuous mode [ 108.028887][ T8888] bond_slave_1: entered promiscuous mode [ 108.067053][ T8888] : left promiscuous mode [ 108.071524][ T8888] bond_slave_0: left promiscuous mode [ 108.077041][ T8888] bond_slave_1: left promiscuous mode [ 108.094429][ T8875] Set syz1 is full, maxelem 65536 reached [ 108.151892][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1944'. [ 108.208040][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1947'. [ 108.242053][ T8910] lo speed is unknown, defaulting to 1000 [ 108.291730][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1950'. [ 108.343295][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 108.343309][ T29] audit: type=1326 audit(1738827229.635:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.381454][ T29] audit: type=1326 audit(1738827229.675:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.405063][ T29] audit: type=1326 audit(1738827229.675:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.428477][ T29] audit: type=1326 audit(1738827229.675:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.452107][ T29] audit: type=1326 audit(1738827229.675:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.475515][ T29] audit: type=1326 audit(1738827229.675:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.499080][ T29] audit: type=1326 audit(1738827229.675:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.522506][ T29] audit: type=1326 audit(1738827229.675:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.546055][ T29] audit: type=1326 audit(1738827229.675:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 108.569769][ T29] audit: type=1326 audit(1738827229.675:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 109.014269][ T8973] lo speed is unknown, defaulting to 1000 [ 109.753324][ T9016] lo speed is unknown, defaulting to 1000 [ 109.945091][ T8954] syz.2.1965 (8954) used greatest stack depth: 6384 bytes left [ 110.324864][ T9071] lo speed is unknown, defaulting to 1000 [ 110.353214][ T9078] 9pnet_fd: Insufficient options for proto=fd [ 111.148246][ T9121] 9pnet_fd: Insufficient options for proto=fd [ 111.432331][ T9156] lo speed is unknown, defaulting to 1000 [ 111.513446][ T9161] __nla_validate_parse: 14 callbacks suppressed [ 111.513462][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'. [ 111.515497][ T9159] 9pnet_fd: Insufficient options for proto=fd [ 111.747833][ T9167] netlink: 'syz.2.2048': attribute type 3 has an invalid length. [ 111.813899][ T9145] Set syz1 is full, maxelem 65536 reached [ 112.003129][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2056'. [ 112.012778][ T9188] netlink: 'syz.2.2052': attribute type 10 has an invalid length. [ 112.046674][ T9188] : (slave netdevsim1): Enslaving as an active interface with an up link [ 112.209181][ T9198] 9pnet_fd: Insufficient options for proto=fd [ 112.550994][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2069'. [ 112.604577][ T9228] netlink: 'syz.0.2072': attribute type 3 has an invalid length. [ 112.641380][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2071'. [ 112.674538][ T9231] 9pnet_fd: Insufficient options for proto=fd [ 112.859014][ T9253] netlink: 'syz.0.2083': attribute type 3 has an invalid length. [ 112.883102][ T9255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2084'. [ 112.907115][ T9259] 9pnet_fd: Insufficient options for proto=fd [ 113.030399][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'. [ 113.102463][ T9287] 9pnet_fd: Insufficient options for proto=fd [ 113.138026][ T9286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2099'. [ 113.147818][ T9286] netlink: zone id is out of range [ 113.152938][ T9286] netlink: zone id is out of range [ 113.159858][ T9286] netlink: zone id is out of range [ 113.165040][ T9286] netlink: zone id is out of range [ 113.170211][ T9286] netlink: zone id is out of range [ 113.175359][ T9286] netlink: zone id is out of range [ 113.180618][ T9286] netlink: zone id is out of range [ 113.185933][ T9286] netlink: zone id is out of range [ 113.191150][ T9286] netlink: zone id is out of range [ 113.196732][ T9286] netlink: zone id is out of range [ 113.290695][ T9299] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 113.303630][ T9299] : (slave netdevsim1): Enslaving as an active interface with an up link [ 113.348923][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 113.348937][ T29] audit: type=1326 audit(1738827234.645:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.351786][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2110'. [ 113.378707][ T29] audit: type=1326 audit(1738827234.645:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.411183][ T29] audit: type=1326 audit(1738827234.655:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.434701][ T29] audit: type=1326 audit(1738827234.655:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.458133][ T29] audit: type=1326 audit(1738827234.655:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.481553][ T29] audit: type=1326 audit(1738827234.655:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.504953][ T29] audit: type=1326 audit(1738827234.655:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.528525][ T29] audit: type=1326 audit(1738827234.655:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.532160][ T9322] 9pnet_fd: Insufficient options for proto=fd [ 113.552206][ T29] audit: type=1326 audit(1738827234.655:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.581827][ T29] audit: type=1326 audit(1738827234.655:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 113.745444][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2122'. [ 113.775931][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 114.077820][ T9404] netlink: 'syz.5.2149': attribute type 3 has an invalid length. [ 114.386956][ T9450] lo speed is unknown, defaulting to 1000 [ 114.647576][ T9487] netlink: 'syz.0.2185': attribute type 3 has an invalid length. [ 114.684878][ T9496] 9pnet_fd: Insufficient options for proto=fd [ 114.787526][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2198'. [ 115.426616][ T9611] lo speed is unknown, defaulting to 1000 [ 115.875141][ T9667] lo speed is unknown, defaulting to 1000 [ 115.904977][ T9670] netlink: 'syz.2.2271': attribute type 3 has an invalid length. [ 116.409180][ T9561] syz.6.2221 (9561) used greatest stack depth: 6320 bytes left [ 116.590635][ T9767] __nla_validate_parse: 5 callbacks suppressed [ 116.590651][ T9767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2313'. [ 117.162360][ T9814] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2333'. [ 117.374811][ T9834] netlink: 'syz.6.2343': attribute type 3 has an invalid length. [ 117.601778][ T9866] lo speed is unknown, defaulting to 1000 [ 117.844527][ T9875] netlink: 'syz.5.2360': attribute type 3 has an invalid length. [ 118.018180][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2371'. [ 118.062612][ T9904] netlink: 'syz.6.2373': attribute type 3 has an invalid length. [ 118.154225][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 118.160416][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2381'. [ 118.389018][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2396'. [ 118.438297][ T9960] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2395'. [ 118.727180][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2412'. [ 118.766687][ T9991] netlink: 'syz.2.2413': attribute type 3 has an invalid length. [ 118.879321][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2421'. [ 119.195532][T10040] netlink: 'syz.5.2434': attribute type 13 has an invalid length. [ 119.323561][T10040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.333360][T10040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.388244][T10040] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.397214][T10040] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.406310][T10040] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.415541][T10040] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.526444][T10078] 9pnet_fd: Insufficient options for proto=fd [ 119.539926][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 119.539937][ T29] audit: type=1326 audit(1738827240.835:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.572160][ T29] audit: type=1326 audit(1738827240.875:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.595716][ T29] audit: type=1326 audit(1738827240.875:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.619330][ T29] audit: type=1326 audit(1738827240.875:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.642885][ T29] audit: type=1326 audit(1738827240.875:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.666463][ T29] audit: type=1326 audit(1738827240.875:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.690129][ T29] audit: type=1326 audit(1738827240.875:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.713989][ T29] audit: type=1326 audit(1738827240.875:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.739013][ T29] audit: type=1326 audit(1738827240.875:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.762683][ T29] audit: type=1326 audit(1738827240.875:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.5.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1488facde9 code=0x7ffc0000 [ 119.983323][T10113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2466'. [ 120.035441][T10117] netlink: 'syz.5.2467': attribute type 3 has an invalid length. [ 120.514709][T10149] netlink: 'syz.0.2481': attribute type 3 has an invalid length. [ 121.422761][T10225] netlink: 'syz.2.2514': attribute type 3 has an invalid length. [ 122.126524][T10255] netlink: 'syz.6.2525': attribute type 3 has an invalid length. [ 122.251873][T10269] lo speed is unknown, defaulting to 1000 [ 122.742393][T10297] lo speed is unknown, defaulting to 1000 [ 122.990929][T10303] lo speed is unknown, defaulting to 1000 [ 123.179938][T10316] __nla_validate_parse: 3 callbacks suppressed [ 123.180029][T10316] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2544'. [ 124.516784][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2570'. [ 124.612865][T10396] lo speed is unknown, defaulting to 1000 [ 124.634648][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2579'. [ 124.672588][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2580'. [ 124.687201][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 124.687213][ T29] audit: type=1326 audit(1738827245.985:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.726788][ T29] audit: type=1326 audit(1738827245.985:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.750357][ T29] audit: type=1326 audit(1738827246.015:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.773917][ T29] audit: type=1326 audit(1738827246.015:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.797433][ T29] audit: type=1326 audit(1738827246.015:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.820920][ T29] audit: type=1326 audit(1738827246.015:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.844578][ T29] audit: type=1326 audit(1738827246.015:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.868204][ T29] audit: type=1326 audit(1738827246.015:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.891757][ T29] audit: type=1326 audit(1738827246.015:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.915415][ T29] audit: type=1326 audit(1738827246.015:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4b95cde9 code=0x7ffc0000 [ 124.922944][T10413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2583'. [ 125.165282][T10434] 9pnet_fd: Insufficient options for proto=fd [ 125.211653][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2595'. [ 125.268800][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2598'. [ 125.295250][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2599'. [ 125.333021][T10455] netlink: 'syz.6.2601': attribute type 3 has an invalid length. [ 125.365217][T10461] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2604'. [ 125.535108][T10481] netlink: 'syz.6.2614': attribute type 3 has an invalid length. [ 125.536834][T10475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2611'. [ 126.576064][T10569] lo speed is unknown, defaulting to 1000 [ 128.262794][T10704] lo speed is unknown, defaulting to 1000 [ 128.504766][T10722] __nla_validate_parse: 7 callbacks suppressed [ 128.504804][T10722] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2718'. [ 128.601834][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2721'. [ 128.728402][T10743] dummy0: entered promiscuous mode [ 128.744770][T10743] dummy0: left promiscuous mode [ 128.883659][T10764] netlink: 'syz.4.2734': attribute type 3 has an invalid length. [ 128.983083][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 129.014998][T10772] vlan3: entered allmulticast mode [ 129.020134][T10772] vlan1: entered allmulticast mode [ 129.025327][T10772] veth0_vlan: entered allmulticast mode [ 129.034044][T10772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2738'. [ 129.088196][T10778] lo speed is unknown, defaulting to 1000 [ 129.105072][T10788] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.262186][T10804] netlink: 'syz.0.2746': attribute type 3 has an invalid length. [ 129.395186][T10814] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.453358][T10823] 9pnet_fd: Insufficient options for proto=fd [ 129.466339][T10825] dvmrp0: entered allmulticast mode [ 129.627765][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2763'. [ 129.697307][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 129.697322][ T29] audit: type=1326 audit(1738827250.995:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd4a530ce77 code=0x7ffc0000 [ 129.738933][ T29] audit: type=1326 audit(1738827251.025:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4a530b750 code=0x7ffc0000 [ 129.762519][ T29] audit: type=1326 audit(1738827251.025:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4a530ba4a code=0x7ffc0000 [ 129.788322][T10841] 9pnet_fd: Insufficient options for proto=fd [ 129.804347][ T29] audit: type=1326 audit(1738827251.065:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.827939][ T29] audit: type=1326 audit(1738827251.065:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.851481][ T29] audit: type=1326 audit(1738827251.075:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.874905][ T29] audit: type=1326 audit(1738827251.075:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.898427][ T29] audit: type=1326 audit(1738827251.085:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.921968][ T29] audit: type=1326 audit(1738827251.085:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.945544][ T29] audit: type=1326 audit(1738827251.085:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd4a530cde9 code=0x7ffc0000 [ 129.994105][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2766'. [ 130.141595][T10859] netlink: 'syz.4.2770': attribute type 3 has an invalid length. [ 130.237202][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'. [ 130.250905][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2775'. [ 130.316083][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2781'. [ 130.456377][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2788'. [ 130.756095][T10932] lo speed is unknown, defaulting to 1000 [ 130.847473][T10941] netlink: 'syz.6.2806': attribute type 3 has an invalid length. [ 130.965616][T10951] lo speed is unknown, defaulting to 1000 [ 131.257528][T10967] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.853403][T11018] lo speed is unknown, defaulting to 1000 [ 133.098660][T11085] netlink: 'syz.2.2859': attribute type 3 has an invalid length. [ 133.188770][T11099] Cannot find add_set index 0 as target [ 133.675715][T11145] __nla_validate_parse: 8 callbacks suppressed [ 133.675731][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2886'. [ 133.753874][T11143] Cannot find add_set index 0 as target [ 134.072795][T11160] netlink: 'syz.0.2891': attribute type 3 has an invalid length. [ 134.756760][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 134.756774][ T29] audit: type=1326 audit(1738827256.055:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.817037][ T29] audit: type=1326 audit(1738827256.085:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.840850][ T29] audit: type=1326 audit(1738827256.085:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.864569][ T29] audit: type=1326 audit(1738827256.085:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.888071][ T29] audit: type=1326 audit(1738827256.085:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.911611][ T29] audit: type=1326 audit(1738827256.085:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.935330][ T29] audit: type=1326 audit(1738827256.085:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.958913][ T29] audit: type=1326 audit(1738827256.085:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 134.982227][ T29] audit: type=1326 audit(1738827256.085:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 135.005765][ T29] audit: type=1326 audit(1738827256.095:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112dacde9 code=0x7ffc0000 [ 135.086840][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2902'. [ 136.250576][T11231] lo speed is unknown, defaulting to 1000 [ 136.334587][T11231] chnl_net:caif_netlink_parms(): no params data found [ 136.398549][ T48] dvmrp0 (unregistering): left allmulticast mode [ 136.427448][ T48]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.436225][ T48]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.446449][ T48]  (unregistering): Released all slaves [ 136.487131][ T48] hsr_slave_0: left promiscuous mode [ 136.497206][ T48] hsr_slave_1: left promiscuous mode [ 136.509438][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.533207][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.589028][ T48] team0 (unregistering): Port device team_slave_1 removed [ 136.603951][ T48] team0 (unregistering): Port device team_slave_0 removed [ 136.650289][T11262] lo speed is unknown, defaulting to 1000 [ 136.709392][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.716556][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.723838][T11231] bridge_slave_0: entered allmulticast mode [ 136.732386][T11231] bridge_slave_0: entered promiscuous mode [ 136.742483][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.749645][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.757332][T11231] bridge_slave_1: entered allmulticast mode [ 136.765992][T11231] bridge_slave_1: entered promiscuous mode [ 136.786848][T11231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.797493][T11231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.817812][T11231] team0: Port device team_slave_0 added [ 136.825684][T11231] team0: Port device team_slave_1 added [ 136.844287][T11231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.851375][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.877368][T11231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.889773][T11231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.896795][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.922765][T11231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.018604][T11231] hsr_slave_0: entered promiscuous mode [ 137.025123][T11231] hsr_slave_1: entered promiscuous mode [ 137.462754][T11231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.485674][T11231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.504622][T11231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.525862][T11231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.603100][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.624833][T11231] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.644433][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.651660][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.686042][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.693113][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.807152][T11231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.968268][T11231] veth0_vlan: entered promiscuous mode [ 137.986089][T11231] veth1_vlan: entered promiscuous mode [ 138.017354][T11231] veth0_macvtap: entered promiscuous mode [ 138.039944][T11231] veth1_macvtap: entered promiscuous mode [ 138.060515][T11354] lo speed is unknown, defaulting to 1000 [ 138.060869][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.076767][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.086641][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.097104][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.107014][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.117542][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.131819][T11231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.161024][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.171508][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.181349][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.191873][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.201689][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.212148][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.223208][T11231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.244958][T11231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.253888][T11231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.262568][T11231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.271268][T11231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.332925][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2956'. [ 138.371255][T11365] ================================================================== [ 138.379442][T11365] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 138.386229][T11365] [ 138.388550][T11365] write to 0xffff888116cfc878 of 8 bytes by task 11364 on cpu 1: [ 138.396270][T11365] vms_clear_ptes+0x1a2/0x300 [ 138.400952][T11365] mmap_region+0x659/0x1620 [ 138.405461][T11365] do_mmap+0x98a/0xc30 [ 138.409528][T11365] vm_mmap_pgoff+0x16d/0x2d0 [ 138.414115][T11365] ksys_mmap_pgoff+0x2de/0x330 [ 138.418876][T11365] x64_sys_call+0x1940/0x2dc0 [ 138.423549][T11365] do_syscall_64+0xc9/0x1c0 [ 138.428054][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.433954][T11365] [ 138.436272][T11365] read to 0xffff888116cfc878 of 8 bytes by task 11365 on cpu 0: [ 138.443980][T11365] getrusage+0xa15/0xb70 [ 138.448232][T11365] io_sq_thread+0x5f9/0x1100 [ 138.452840][T11365] ret_from_fork+0x4b/0x60 [ 138.457254][T11365] ret_from_fork_asm+0x1a/0x30 [ 138.462018][T11365] [ 138.464342][T11365] value changed: 0x00000000000014e5 -> 0x00000000000016b0 [ 138.471440][T11365] [ 138.473756][T11365] Reported by Kernel Concurrency Sanitizer on: [ 138.479891][T11365] CPU: 0 UID: 0 PID: 11365 Comm: iou-sqp-11364 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 138.490901][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.500945][T11365] ==================================================================