last executing test programs: 18.025608747s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="18000000000000000000000000f4ff0018110000", @ANYRESHEX=0x0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, r4}, 0x18) (async) socket(0xe, 0x800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x6) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private0, 0x6bb5}, 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f000024d000/0xa000)=nil, 0xa000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) (async) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r12, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.89931654s ago: executing program 3 (id=13): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r2 = socket$inet6(0xa, 0x4, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local, 0x4}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) recvmmsg(r6, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 17.810944052s ago: executing program 3 (id=16): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TDeJTasbtXqhhUaKGPzIR1PSBgsqeOmV9QVikpbotrFNBFtyYUHsA2gfQLxsH8EL8U4QvClee6cUiiS5lshsZpNJsps2H+tU5/eDgXPmg3P+M7N7zp5z2AAqazAivoyI3oj4JCLq+f4k3+Ld9S07b3V5aTrbklhbu/hX0jy+srw0HYVrMsfyzFAakX6VxMttyl24cfPTqUZj9nqeH1m88tnIwo2bb81dmbo8e3n26vjo5OTo+PmJyYlDi/WPuP37hfvv17/55fRvP3384URW3+P5sWIch2UwBjfuyXbDh11YyZ4qpJNaiRVhT9KIOBIRtebnvx5HYvPh1eOHeqmVAwC6Ym3tnW15AOD/L9HmA0DFtH73rywvTbe2MsYhyvLwvfXJq5V8bnN1I/7axkxIz7b5rcM0GBH37pw7lW2x6zxk2qUaAABV82PW/znfrv+XxsnCeUcjoj9f23U8Ip6OiGcK68X2a3Bbfmf/J31wwCJ2lfX/LhTWtq0W4s8NHMlzWcwD0ZNcmmvMjubxD0VPX5Yf26WMkxdf/LvTsWL/717t3Kms/FZfMK/Hg1rf1mtmphanDhJz0cNbES/V2sWfbPR/k2bcHdx6dBlvX7v7QqdjW+K/0y7+7lr7LuK1ts9/c+Vesvv6xJHm+zDSeit2uv36q9c6lV92/Nnz7989/oGkuF5zYe9l/Hx27tdOxx4df/v3vzf5qJnuzfd9MbW4eH0sojf5YOf+M5vXtvKt87P4h063//yfiM078WxEPBcRz0c093d8odt4s/H9K/uPv7uy+Gf29Pz3nuj/+u79TuW3jX/LT93s+Z9tpobyPY/z/fe4Fdz/nQMAAID/jrQ5npukwxvpNB0eXh/nPRH9aWN+YfGNS/OfX51ZH/cdiJ60NdJVL4yHjuVjhK38mW358XwM5du+o8388PR8Y6bs4AGgoo51aP8zf/aVXTsAoGu6tbgdAHhyaf8BoHq0/wBQPdp/AKge7T8AVI/2HwAq5SD/61eFRBpPRDUkJP7lRNnfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fonAAD//2Wz014=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) inotify_init1(0x180800) r10 = syz_io_uring_setup(0x411, &(0x7f0000000400)={0x0, 0x3, 0x40}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r11, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x2003, 0x0, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sys_enter\x00', r12, 0x0, 0x10}, 0x18) pwrite64(0xffffffffffffffff, 0x0, 0xfffffffffffffd6d, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$binfmt_register(r7, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 17.650234645s ago: executing program 3 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000049, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 16.334802041s ago: executing program 3 (id=41): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8001) pipe(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04feffffffffffffff0200000024000480200001800a00010071756f7461000000100002800c00014000000000400000030900010073797a30000000000900020073797a3200000000140000001100010000000009000000000000000a"], 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0) 16.300206732s ago: executing program 32 (id=41): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8001) pipe(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04feffffffffffffff0200000024000480200001800a00010071756f7461000000100002800c00014000000000400000030900010073797a30000000000900020073797a3200000000140000001100010000000009000000000000000a"], 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0) 1.99660218s ago: executing program 5 (id=228): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.97893087s ago: executing program 5 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)={0x34, r3, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') lseek(r4, 0x8, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0xb701, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x18) r11 = syz_open_dev$usbfs(&(0x7f0000000280), 0x74, 0x103b81) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000340)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) (async) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r12, @ANYBLOB="bf4400000000000000000c00"], 0x2ac}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, r12, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6a4c}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5b8a672e}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b8f06c8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x56dc8120}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x4841) 1.841879943s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (fail_nth: 7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) 1.792519004s ago: executing program 5 (id=233): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x9, &(0x7f0000000200)=[{0xffff, 0x0, 0x9, 0x6}, {0x1, 0x76, 0x3, 0x2}, {0x6, 0x39, 0x4, 0xff}, {0x3ac7, 0x70, 0x40, 0x2}, {0x7, 0x0, 0x66, 0x822}, {0x8, 0x6, 0x3, 0x200}, {0x9, 0x0, 0x2, 0x8}, {0x0, 0x8, 0x7, 0x3}, {0xfff9, 0x9, 0xc4, 0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) r4 = gettid() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20040600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="0700000001000000", @ANYRES32=r2, @ANYBLOB="2d6c4905db4c4b4fef823c2a14e9b53f57ab2d5473db5677855a583acffa1306a2bdb2a66698583e41833e962435f6f83a9af4bfff43ed86c58428faa45bba283f4a802a2ef0b9d713fbf80dcaaf06e0d9a61e85798c4db565ff5bd43f13c9eb8817c6eb1b55fadb0d13ca514d524495cd07000000000000007370daa61d1b70", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r7, 0x0, 0xeffd) 1.108036708s ago: executing program 2 (id=240): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) fsync(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendto$inet6(r1, &(0x7f0000000700)="2222c07ceaac9efc3cc11cb3958a543f718737786c18086537f88b21afd40ff4024f0241a7f1334d8696c8df48b42e2502bb91b87b3650b68a5aca8bbe8712566295c6645f5dd6fae3df238350d5fc6b33a0287c23a5e8949aac0e6e486a11", 0x5f, 0x0, &(0x7f0000000780)={0xa, 0x4e22, 0x80000000, @mcast2, 0x2cb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f00000006c0)={'c', ' *:* ', 'w\x00'}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 994.2359ms ago: executing program 2 (id=241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) 967.117531ms ago: executing program 5 (id=242): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$evdev(0x0, 0x2, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0, 0x0, 0x8000000000000003}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="796100000000000000000000000080000080", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x8804) r5 = gettid() r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) syz_open_dev$char_usb(0xc, 0xb4, 0x3ff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) 904.652042ms ago: executing program 4 (id=243): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x4}, 0x50) 903.840992ms ago: executing program 1 (id=244): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x655c0774}}, './file0\x00'}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) fsetxattr$system_posix_acl(r3, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}, {0x8}}, 0x24, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x134, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x108, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xb4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x0, 0x2, 0x1}]}}]}}]}, 0x134}}, 0x24040084) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000003e0000003e00000006000000050000007cebced7378585ca4eb782ff18119b050000000104000001000000020000003a0000000300000002000000faffff0f03000000050000000600000010000000b87c0000005f302e2000"], &(0x7f0000000600)=""/244, 0x5e, 0xf4, 0x0, 0x7fffffff, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r8, 0x1) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace_dev_match', 0x141000, 0x20) finit_module(r9, 0x0, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) r12 = open_tree(r1, &(0x7f0000000780)='./file0\x00', 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r15 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x32, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x76aa}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @map_fd={0x18, 0xa}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x60}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0x6a, &(0x7f0000000140)=""/106, 0x41100, 0x46, '\x00', r6, @fallback=0xd, r7, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x80, 0x48}, 0x10, r8, r9, 0x6, &(0x7f00000008c0)=[r10, r11, r12, r13, r14, r15], &(0x7f0000000900)=[{0x3, 0x5, 0x5, 0xc}, {0x4, 0x2, 0xd, 0x9}, {0x5, 0x2, 0x5, 0x8}, {0x3, 0x5, 0x7, 0x9}, {0x5, 0x5, 0xd, 0x5}, {0x0, 0x2, 0x3, 0x2}], 0x10, 0x101}, 0x94) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x3c, r16, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x3c}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r17, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r18, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r17, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 884.856202ms ago: executing program 2 (id=245): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) fsync(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendto$inet6(r1, &(0x7f0000000700)="2222c07ceaac9efc3cc11cb3958a543f718737786c18086537f88b21afd40ff4024f0241a7f1334d8696c8df48b42e2502bb91b87b3650b68a5aca8bbe8712566295c6645f5dd6fae3df238350d5fc6b33a0287c23a5e8949aac0e6e486a11", 0x5f, 0x0, &(0x7f0000000780)={0xa, 0x4e22, 0x80000000, @mcast2, 0x2cb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f00000006c0)={'c', ' *:* ', 'w\x00'}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) mount(&(0x7f0000000080)=@sr0, 0x0, &(0x7f0000000680)='zonefs\x00', 0x4004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 881.533262ms ago: executing program 4 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000040b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffbfffb70300000800001cb704000000000000850000000100000095b6fb872563178d174f76f025b60a12480c9a34ada4e4184cfecfb84f375900e23bbdaa10036d8e515628df0f5aa13119af470ff49d4bd7dcbc1df9b50a08d62a0541cff2faa283a038ce575534da1bc77368402009f500c0d42b9c2a747294a25384235805000000000000005b699934e3eb055e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 838.762853ms ago: executing program 4 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10014, &(0x7f00000000c0), 0x3, 0x519, &(0x7f0000000640)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = io_uring_setup(0x55e9, &(0x7f0000000180)={0x0, 0x17c8, 0x200, 0x1, 0x3d8}) io_uring_setup(0x4ea3, &(0x7f0000000200)={0x0, 0xdbbd, 0x20, 0x2, 0x3c1, 0x0, r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 656.797727ms ago: executing program 1 (id=249): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000800) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) (fail_nth: 8) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 655.593377ms ago: executing program 2 (id=250): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9cf2, 0x1}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={r8, @loopback, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$cgroup_int(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r12}, 0x10) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r13, 0x4c80, 0x7000000) 615.918948ms ago: executing program 0 (id=251): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x2ee0ab4fa4569393) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f00000101000000020000007f"], 0x18) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}}, 0x44) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000f1dd0fccd5de", 0x11}, {&(0x7f0000000240)='7', 0x1}], 0x3) r10 = syz_open_pts(r0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0x57) 615.344338ms ago: executing program 4 (id=252): r0 = socket$inet6(0xa, 0x8, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r1 = socket(0x2, 0x80805, 0x0) rt_sigaction(0xd, 0x0, 0xfffffffffffffffd, 0x8, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000001080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES8=r2, @ANYRES32=r2], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000073d000/0x3000)=nil) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10) r8 = creat(&(0x7f0000000240)='./file1\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 614.896888ms ago: executing program 2 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xc4, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x87cd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x727b}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x22044000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x6c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2404c841}, 0x4010) lsm_get_self_attr(0x2, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8840) 344.201023ms ago: executing program 2 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0xffffffa4, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x20) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = creat(&(0x7f0000000400)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x40000000000002}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r5, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91", 0x45c) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x0, 0x0}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) r9 = syz_open_pts(r8, 0x0) io_setup(0x5, &(0x7f0000000280)=0x0) r11 = eventfd(0x10) io_submit(r10, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r9, &(0x7f00000003c0)='z', 0x1, 0xcead, 0x0, 0x5, r11}]) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r12) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 332.754784ms ago: executing program 1 (id=255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) 306.920074ms ago: executing program 0 (id=256): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) syz_emit_ethernet(0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002a000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000000000000000119de1d3a56f54f0edf24548b2c682ee6a4e8298ee926ea853f20713acae558aa0836a2aecf9d917ee9ca05c0dafa9f636724bf121c50aa3543130c9f653d954fa1b24bf370b96343e75ee00000000000000000000009efac865bfeba9985f"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd"], 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r10) socket$phonet_pipe(0x23, 0x5, 0x2) write$sndseq(r10, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r9, &(0x7f00000018c0), 0x0, 0x0, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) 252.076325ms ago: executing program 4 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000007ed000000000000000000001801000020648a2500000000002020207b1af80000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095371557c9d261d99c39570000000000000027ed3d64126fcbd951c1e1f065a8901b8906d537b805540d0b00ffff166e6696a12df1c279b17100"/145], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r4) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 251.599105ms ago: executing program 33 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000007ed000000000000000000001801000020648a2500000000002020207b1af80000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095371557c9d261d99c39570000000000000027ed3d64126fcbd951c1e1f065a8901b8906d537b805540d0b00ffff166e6696a12df1c279b17100"/145], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r4) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 251.228475ms ago: executing program 0 (id=259): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) read$watch_queue(r2, &(0x7f0000000580)=""/51, 0x33) r3 = openat$incfs(r2, &(0x7f0000000040)='.log\x00', 0x2240, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9b35) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x28) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc400}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x5c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) ioprio_set$pid(0x0, 0x0, 0x4004) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 250.664895ms ago: executing program 1 (id=260): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x52, 0x67, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000001c0)) 215.628236ms ago: executing program 0 (id=261): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xd, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)={0xa8, r4, 0x1, 0x0, 0x25dfdbf7, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) 112.555668ms ago: executing program 1 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffe3a, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x9}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) 105.515118ms ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f00000019c0)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x8001, @local, 0xe9f0}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@flowinfo={{0x14, 0x29, 0xb, 0xa8f}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3007}}], 0x48}}], 0x1, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081003000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x3, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 104.908568ms ago: executing program 5 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x2000000000000008, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000100000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") 89.357888ms ago: executing program 1 (id=265): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797", 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0xc00, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 488.85µs ago: executing program 0 (id=266): r0 = socket$inet6(0xa, 0x8, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r1 = socket(0x2, 0x80805, 0x0) rt_sigaction(0xd, 0x0, 0xfffffffffffffffd, 0x8, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000001080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES8=r2, @ANYRES32=r2], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000073d000/0x3000)=nil) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r9}, 0x10) r10 = creat(&(0x7f0000000240)='./file1\x00', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 0s ago: executing program 5 (id=267): r0 = socket$inet6(0xa, 0x8, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r1 = socket(0x2, 0x80805, 0x0) rt_sigaction(0xd, 0x0, 0xfffffffffffffffd, 0x8, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000001080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES8=r2, @ANYRES32=r2], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000073d000/0x3000)=nil) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10) r8 = creat(&(0x7f0000000240)='./file1\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 26.472276][ T29] audit: type=1400 audit(1758436639.659:62): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.473465][ T3273] cgroup: Unknown subsys name 'net' [ 26.495019][ T29] audit: type=1400 audit(1758436639.659:63): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.522416][ T29] audit: type=1400 audit(1758436639.689:64): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.657730][ T3273] cgroup: Unknown subsys name 'cpuset' [ 26.664106][ T3273] cgroup: Unknown subsys name 'rlimit' [ 26.835911][ T29] audit: type=1400 audit(1758436640.019:65): avc: denied { setattr } for pid=3273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.863914][ T29] audit: type=1400 audit(1758436640.019:66): avc: denied { create } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.884368][ T29] audit: type=1400 audit(1758436640.019:67): avc: denied { write } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.904792][ T29] audit: type=1400 audit(1758436640.019:68): avc: denied { read } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.914074][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.925066][ T29] audit: type=1400 audit(1758436640.019:69): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.958523][ T29] audit: type=1400 audit(1758436640.019:70): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.981795][ T29] audit: type=1400 audit(1758436640.119:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.015328][ T3273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.938128][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.021480][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.035174][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.042431][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.049698][ T3300] bridge_slave_0: entered allmulticast mode [ 29.056080][ T3300] bridge_slave_0: entered promiscuous mode [ 29.075280][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.090274][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.097490][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.104659][ T3300] bridge_slave_1: entered allmulticast mode [ 29.111050][ T3300] bridge_slave_1: entered promiscuous mode [ 29.164067][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.189388][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.207213][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.240704][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.247827][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.254976][ T3301] bridge_slave_0: entered allmulticast mode [ 29.261500][ T3301] bridge_slave_0: entered promiscuous mode [ 29.268359][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.275465][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.282759][ T3301] bridge_slave_1: entered allmulticast mode [ 29.289432][ T3301] bridge_slave_1: entered promiscuous mode [ 29.320243][ T3300] team0: Port device team_slave_0 added [ 29.325978][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.333076][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.340199][ T3305] bridge_slave_0: entered allmulticast mode [ 29.346601][ T3305] bridge_slave_0: entered promiscuous mode [ 29.353188][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.372718][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.382709][ T3300] team0: Port device team_slave_1 added [ 29.388579][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.395792][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.402964][ T3305] bridge_slave_1: entered allmulticast mode [ 29.409447][ T3305] bridge_slave_1: entered promiscuous mode [ 29.421548][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.479728][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.486715][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.512740][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.524590][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.537089][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.544307][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.551666][ T3304] bridge_slave_0: entered allmulticast mode [ 29.558265][ T3304] bridge_slave_0: entered promiscuous mode [ 29.565355][ T3301] team0: Port device team_slave_0 added [ 29.571867][ T3301] team0: Port device team_slave_1 added [ 29.577909][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.584849][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.610925][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.623025][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.642279][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.649420][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.656670][ T3304] bridge_slave_1: entered allmulticast mode [ 29.662986][ T3304] bridge_slave_1: entered promiscuous mode [ 29.681935][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.688931][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.714876][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.730201][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.737383][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.744628][ T3308] bridge_slave_0: entered allmulticast mode [ 29.751363][ T3308] bridge_slave_0: entered promiscuous mode [ 29.763713][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.770722][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.796713][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.814957][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.822116][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.829367][ T3308] bridge_slave_1: entered allmulticast mode [ 29.835906][ T3308] bridge_slave_1: entered promiscuous mode [ 29.848856][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.863875][ T3305] team0: Port device team_slave_0 added [ 29.870838][ T3305] team0: Port device team_slave_1 added [ 29.882267][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.913273][ T3300] hsr_slave_0: entered promiscuous mode [ 29.919430][ T3300] hsr_slave_1: entered promiscuous mode [ 29.936180][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.946631][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.962893][ T3304] team0: Port device team_slave_0 added [ 29.973851][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.980912][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.006897][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.018244][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.025270][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.051242][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.079613][ T3304] team0: Port device team_slave_1 added [ 30.087864][ T3301] hsr_slave_0: entered promiscuous mode [ 30.093978][ T3301] hsr_slave_1: entered promiscuous mode [ 30.100258][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.106020][ T3301] Cannot create hsr debugfs directory [ 30.130770][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.137811][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.163756][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.175146][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.182175][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.208211][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.224608][ T3308] team0: Port device team_slave_0 added [ 30.232755][ T3308] team0: Port device team_slave_1 added [ 30.270899][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.278005][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.304362][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.328866][ T3305] hsr_slave_0: entered promiscuous mode [ 30.334983][ T3305] hsr_slave_1: entered promiscuous mode [ 30.341857][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.347623][ T3305] Cannot create hsr debugfs directory [ 30.356173][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.363193][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.389127][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.431096][ T3304] hsr_slave_0: entered promiscuous mode [ 30.437245][ T3304] hsr_slave_1: entered promiscuous mode [ 30.443198][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.448986][ T3304] Cannot create hsr debugfs directory [ 30.486104][ T3308] hsr_slave_0: entered promiscuous mode [ 30.492174][ T3308] hsr_slave_1: entered promiscuous mode [ 30.498064][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.503901][ T3308] Cannot create hsr debugfs directory [ 30.617433][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.646151][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.662171][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.670866][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.712807][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.721606][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.730705][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.739937][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.783450][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.795148][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.810271][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.819806][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.851339][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.860497][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.869980][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.879173][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.912877][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.922594][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.939192][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.951325][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.959946][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.971150][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.982170][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.998496][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005678][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.035524][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.042726][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.058864][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.090948][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.101382][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.118980][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.126036][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.149889][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.163435][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.170609][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.184867][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.212417][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.223301][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.230404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.248683][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.259816][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.266959][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.278841][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.292416][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.303671][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.317726][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.324850][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.333687][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.340753][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.361932][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.369098][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.397386][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.404690][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.483309][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.550441][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.582028][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.593079][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.609725][ T3300] veth0_vlan: entered promiscuous mode [ 31.624411][ T3300] veth1_vlan: entered promiscuous mode [ 31.663594][ T3300] veth0_macvtap: entered promiscuous mode [ 31.688274][ T3300] veth1_macvtap: entered promiscuous mode [ 31.720115][ T3304] veth0_vlan: entered promiscuous mode [ 31.741665][ T3304] veth1_vlan: entered promiscuous mode [ 31.752023][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.780654][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.801582][ T3304] veth0_macvtap: entered promiscuous mode [ 31.808837][ T3304] veth1_macvtap: entered promiscuous mode [ 31.822307][ T410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.833611][ T3305] veth0_vlan: entered promiscuous mode [ 31.849147][ T384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860058][ T3305] veth1_vlan: entered promiscuous mode [ 31.869647][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.876961][ T384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890511][ T3308] veth0_vlan: entered promiscuous mode [ 31.905192][ T384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.915623][ T3301] veth0_vlan: entered promiscuous mode [ 31.928534][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.937381][ T3308] veth1_vlan: entered promiscuous mode [ 31.953498][ T3301] veth1_vlan: entered promiscuous mode [ 31.960929][ T3305] veth0_macvtap: entered promiscuous mode [ 31.968197][ T3305] veth1_macvtap: entered promiscuous mode [ 31.980647][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.980661][ T29] audit: type=1400 audit(1758436645.169:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.87rbPP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.990937][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.015593][ T29] audit: type=1400 audit(1758436645.199:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.025451][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.040130][ T29] audit: type=1400 audit(1758436645.199:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.87rbPP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.054202][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.074133][ T29] audit: type=1400 audit(1758436645.199:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.074161][ T29] audit: type=1400 audit(1758436645.199:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.87rbPP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.082566][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.103294][ T29] audit: type=1400 audit(1758436645.199:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.87rbPP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.166125][ T29] audit: type=1400 audit(1758436645.199:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.186475][ T29] audit: type=1400 audit(1758436645.329:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.209275][ T29] audit: type=1400 audit(1758436645.329:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.235062][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.245625][ T3308] veth0_macvtap: entered promiscuous mode [ 32.257087][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.265955][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.275196][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287974][ T3308] veth1_macvtap: entered promiscuous mode [ 32.296050][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.314941][ T29] audit: type=1400 audit(1758436645.479:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.319433][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.368633][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388446][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.396622][ T3301] veth0_macvtap: entered promiscuous mode [ 32.398251][ T3301] veth1_macvtap: entered promiscuous mode [ 32.405507][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.423300][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.443576][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.446996][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.447046][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.447133][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.447246][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.449003][ T3478] loop1: detected capacity change from 0 to 512 [ 32.451732][ T3424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.520159][ T3424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.521388][ T3478] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 32.529177][ T3424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.559322][ T3480] syz.2.7 (3480) used greatest stack depth: 10736 bytes left [ 32.589810][ T3424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.637174][ T3478] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.637655][ T3478] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.2: Block bitmap for bg 0 marked uninitialized [ 32.639269][ T3478] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 32.674093][ T3478] EXT4-fs (loop1): 1 orphan inode deleted [ 32.674599][ T3478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 32.759110][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.808124][ T3506] netlink: 'syz.1.10': attribute type 3 has an invalid length. [ 32.852499][ T3511] udevd[3511]: failed to send result of seq 7348 to main daemon: Connection refused [ 32.904098][ T3518] loop2: detected capacity change from 0 to 1024 [ 32.915222][ T3521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 32.929400][ T3523] loop3: detected capacity change from 0 to 512 [ 32.936630][ T3518] ======================================================= [ 32.936630][ T3518] WARNING: The mand mount option has been deprecated and [ 32.936630][ T3518] and is ignored by this kernel. Remove the mand [ 32.936630][ T3518] option from the mount to silence this warning. [ 32.936630][ T3518] ======================================================= [ 32.972520][ T3518] EXT4-fs: inline encryption not supported [ 32.972549][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.994958][ T3518] ext4: Unknown parameter 'nouser_xattr' [ 33.011489][ T3527] loop1: detected capacity change from 0 to 512 [ 33.013832][ T3518] lo speed is unknown, defaulting to 1000 [ 33.023850][ T3518] lo speed is unknown, defaulting to 1000 [ 33.030244][ T3518] lo speed is unknown, defaulting to 1000 [ 33.037029][ T3518] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.044666][ T3518] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.055073][ T3518] lo speed is unknown, defaulting to 1000 [ 33.059537][ T3527] ext3: Unknown parameter 'obj_role' [ 33.061450][ T3518] lo speed is unknown, defaulting to 1000 [ 33.073065][ T3518] lo speed is unknown, defaulting to 1000 [ 33.079387][ T3518] lo speed is unknown, defaulting to 1000 [ 33.085507][ T3518] lo speed is unknown, defaulting to 1000 [ 33.090265][ T3308] EXT4-fs error (device loop3): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 33.097896][ T3518] syz.2.14 (3518) used greatest stack depth: 10712 bytes left [ 33.112139][ T3308] EXT4-fs error (device loop3): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 33.156449][ T3534] loop9: detected capacity change from 0 to 7 [ 33.172483][ T3534] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.183338][ T3534] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.191262][ T3534] loop9: unable to read partition table [ 33.194626][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.197597][ T3534] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 33.197597][ T3534] ) failed (rc=-5) [ 33.208901][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.232497][ T3533] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.254769][ T3540] loop2: detected capacity change from 0 to 512 [ 33.262440][ T3540] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.275551][ T3540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.287645][ T3540] EXT4-fs (loop2): 1 truncate cleaned up [ 33.293871][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.370418][ T3550] FAULT_INJECTION: forcing a failure. [ 33.370418][ T3550] name failslab, interval 1, probability 0, space 0, times 1 [ 33.383163][ T3550] CPU: 0 UID: 0 PID: 3550 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.383196][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 33.383212][ T3550] Call Trace: [ 33.383219][ T3550] [ 33.383229][ T3550] __dump_stack+0x1d/0x30 [ 33.383250][ T3550] dump_stack_lvl+0xe8/0x140 [ 33.383269][ T3550] dump_stack+0x15/0x1b [ 33.383284][ T3550] should_fail_ex+0x265/0x280 [ 33.383374][ T3550] ? rtnl_newlink+0x5c/0x12d0 [ 33.383405][ T3550] should_failslab+0x8c/0xb0 [ 33.383499][ T3550] __kmalloc_cache_noprof+0x4c/0x320 [ 33.383539][ T3550] rtnl_newlink+0x5c/0x12d0 [ 33.383591][ T3550] ? __rcu_read_unlock+0x4f/0x70 [ 33.383645][ T3550] ? avc_has_perm_noaudit+0x1b1/0x200 [ 33.383680][ T3550] ? cred_has_capability+0x210/0x280 [ 33.383711][ T3550] ? selinux_capable+0x31/0x40 [ 33.383738][ T3550] ? security_capable+0x83/0x90 [ 33.383827][ T3550] ? ns_capable+0x7d/0xb0 [ 33.383852][ T3550] ? __pfx_rtnl_newlink+0x10/0x10 [ 33.383899][ T3550] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 33.383940][ T3550] netlink_rcv_skb+0x123/0x220 [ 33.384004][ T3550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 33.384046][ T3550] rtnetlink_rcv+0x1c/0x30 [ 33.384083][ T3550] netlink_unicast+0x5bd/0x690 [ 33.384115][ T3550] netlink_sendmsg+0x58b/0x6b0 [ 33.384157][ T3550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.384211][ T3550] __sock_sendmsg+0x142/0x180 [ 33.384253][ T3550] ____sys_sendmsg+0x345/0x4e0 [ 33.384341][ T3550] ___sys_sendmsg+0x17b/0x1d0 [ 33.384389][ T3550] __sys_sendmmsg+0x178/0x300 [ 33.384466][ T3550] __x64_sys_sendmmsg+0x57/0x70 [ 33.384493][ T3550] x64_sys_call+0x1c4a/0x2ff0 [ 33.384514][ T3550] do_syscall_64+0xd2/0x200 [ 33.384581][ T3550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.384611][ T3550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.384653][ T3550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.384678][ T3550] RIP: 0033:0x7fa7d4b4ec29 [ 33.384741][ T3550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.384758][ T3550] RSP: 002b:00007fa7d35b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 33.384781][ T3550] RAX: ffffffffffffffda RBX: 00007fa7d4d95fa0 RCX: 00007fa7d4b4ec29 [ 33.384793][ T3550] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 33.384805][ T3550] RBP: 00007fa7d35b7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.384878][ T3550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.384892][ T3550] R13: 00007fa7d4d96038 R14: 00007fa7d4d95fa0 R15: 00007ffd1fe07328 [ 33.384914][ T3550] [ 33.386036][ T3550] Zero length message leads to an empty skb [ 33.469268][ T3553] netlink: 5 bytes leftover after parsing attributes in process `syz.0.28'. [ 33.501513][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.504729][ T3553] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 33.536335][ T3558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 33.538956][ T3557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 33.543960][ T3553] 0ªî{X¹¦: entered allmulticast mode [ 33.572375][ T3560] FAULT_INJECTION: forcing a failure. [ 33.572375][ T3560] name failslab, interval 1, probability 0, space 0, times 0 [ 33.579645][ T3561] loop1: detected capacity change from 0 to 512 [ 33.593553][ T3560] CPU: 1 UID: 0 PID: 3560 Comm: syz.2.31 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.593585][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 33.593603][ T3560] Call Trace: [ 33.593612][ T3560] [ 33.593640][ T3560] __dump_stack+0x1d/0x30 [ 33.593718][ T3560] dump_stack_lvl+0xe8/0x140 [ 33.593747][ T3560] dump_stack+0x15/0x1b [ 33.593770][ T3560] should_fail_ex+0x265/0x280 [ 33.593804][ T3560] should_failslab+0x8c/0xb0 [ 33.593840][ T3560] kmem_cache_alloc_noprof+0x50/0x310 [ 33.593941][ T3560] ? alloc_empty_file+0x76/0x200 [ 33.593982][ T3560] ? __fput_deferred+0x1df/0x270 [ 33.594110][ T3560] alloc_empty_file+0x76/0x200 [ 33.594152][ T3560] path_openat+0x68/0x2170 [ 33.594191][ T3560] do_filp_open+0x109/0x230 [ 33.594230][ T3560] do_sys_openat2+0xa6/0x110 [ 33.594274][ T3560] __x64_sys_openat+0xf2/0x120 [ 33.594342][ T3560] x64_sys_call+0x2e9c/0x2ff0 [ 33.594371][ T3560] do_syscall_64+0xd2/0x200 [ 33.594416][ T3560] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.594485][ T3560] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.594528][ T3560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.594608][ T3560] RIP: 0033:0x7fa69908d590 [ 33.594662][ T3560] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 33.594685][ T3560] RSP: 002b:00007fa697aeef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 33.594711][ T3560] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa69908d590 [ 33.594729][ T3560] RDX: 0000000000000000 RSI: 00007fa697aeefa0 RDI: 00000000ffffff9c [ 33.594746][ T3560] RBP: 00007fa697aeefa0 R08: 0000000000000000 R09: 0000000000000000 [ 33.594777][ T3560] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 33.594792][ T3560] R13: 00007fa6992d6038 R14: 00007fa6992d5fa0 R15: 00007fff111ed468 [ 33.594818][ T3560] [ 33.617777][ T3563] loop2: detected capacity change from 0 to 512 [ 33.626820][ T3553] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 33.681788][ T3563] EXT4-fs: Ignoring removed bh option [ 33.684802][ T3561] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 33.714410][ T3563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.723727][ T3561] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.731685][ T3563] EXT4-fs (loop2): 1 truncate cleaned up [ 33.740804][ T3561] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.30: Block bitmap for bg 0 marked uninitialized [ 33.760601][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.775033][ T3561] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 33.895170][ T3573] loop4: detected capacity change from 0 to 128 [ 33.898202][ T3561] EXT4-fs (loop1): 1 orphan inode deleted [ 33.972843][ T3571] FAULT_INJECTION: forcing a failure. [ 33.972843][ T3571] name failslab, interval 1, probability 0, space 0, times 0 [ 33.980565][ T3561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.991957][ T3571] CPU: 1 UID: 0 PID: 3571 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.991984][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 33.992005][ T3571] Call Trace: [ 33.992011][ T3571] [ 33.992019][ T3571] __dump_stack+0x1d/0x30 [ 33.992043][ T3571] dump_stack_lvl+0xe8/0x140 [ 33.992111][ T3571] dump_stack+0x15/0x1b [ 33.992159][ T3571] should_fail_ex+0x265/0x280 [ 33.992195][ T3571] should_failslab+0x8c/0xb0 [ 33.992297][ T3571] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 33.992420][ T3571] ? kasprintf+0x83/0xb0 [ 33.992448][ T3571] kvasprintf+0x8a/0x110 [ 33.992474][ T3571] ? obj_cgroup_charge_account+0x122/0x1a0 [ 33.992536][ T3571] kasprintf+0x83/0xb0 [ 33.992637][ T3571] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 33.992687][ T3571] nf_tables_set_alloc_name+0xaa/0x4b0 [ 33.992714][ T3571] ? nla_strdup+0x78/0xc0 [ 33.992753][ T3571] nf_tables_newset+0xe24/0x14e0 [ 33.992863][ T3571] nfnetlink_rcv+0xb96/0x1690 [ 33.992950][ T3571] netlink_unicast+0x5bd/0x690 [ 33.992985][ T3571] netlink_sendmsg+0x58b/0x6b0 [ 33.993025][ T3571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.993061][ T3571] __sock_sendmsg+0x142/0x180 [ 33.993147][ T3571] ____sys_sendmsg+0x31e/0x4e0 [ 33.993197][ T3571] ___sys_sendmsg+0x17b/0x1d0 [ 33.993252][ T3571] __x64_sys_sendmsg+0xd4/0x160 [ 33.993294][ T3571] x64_sys_call+0x191e/0x2ff0 [ 33.993393][ T3571] do_syscall_64+0xd2/0x200 [ 33.993438][ T3571] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.993473][ T3571] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.993520][ T3571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.993583][ T3571] RIP: 0033:0x7fb6e201ec29 [ 33.993604][ T3571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.993629][ T3571] RSP: 002b:00007fb6e0a87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.993655][ T3571] RAX: ffffffffffffffda RBX: 00007fb6e2265fa0 RCX: 00007fb6e201ec29 [ 33.993671][ T3571] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 33.993688][ T3571] RBP: 00007fb6e0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 33.993733][ T3571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.993750][ T3571] R13: 00007fb6e2266038 R14: 00007fb6e2265fa0 R15: 00007fffc5c7b718 [ 33.993776][ T3571] [ 34.136922][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 34.312211][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.359127][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.418963][ T3424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.439486][ T3585] tipc: Started in network mode [ 34.444440][ T3585] tipc: Node identity 8e0a7a0b67b3, cluster identity 4711 [ 34.451800][ T3585] tipc: Enabled bearer , priority 0 [ 34.475406][ T3593] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.525069][ T3588] tipc: Started in network mode [ 34.530021][ T3588] tipc: Node identity 66e46365bc5c, cluster identity 4711 [ 34.537296][ T3588] tipc: Enabled bearer , priority 0 [ 34.545478][ T3587] tipc: Resetting bearer [ 34.563612][ T3587] tipc: Disabling bearer [ 34.571690][ T3583] tipc: Resetting bearer [ 34.583889][ T3583] tipc: Disabling bearer [ 34.643529][ T3596] lo speed is unknown, defaulting to 1000 [ 34.651782][ T3610] IPv6: Can't replace route, no match found [ 34.678967][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 34.692770][ T3613] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 34.748770][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.756207][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.799305][ T3613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.809552][ T3613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.870006][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.879060][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.892288][ T3596] chnl_net:caif_netlink_parms(): no params data found [ 34.905451][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.936563][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.950812][ T3632] FAULT_INJECTION: forcing a failure. [ 34.950812][ T3632] name failslab, interval 1, probability 0, space 0, times 0 [ 34.963681][ T3632] CPU: 0 UID: 0 PID: 3632 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.963712][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 34.963729][ T3632] Call Trace: [ 34.963737][ T3632] [ 34.963746][ T3632] __dump_stack+0x1d/0x30 [ 34.963772][ T3632] dump_stack_lvl+0xe8/0x140 [ 34.963843][ T3632] dump_stack+0x15/0x1b [ 34.963864][ T3632] should_fail_ex+0x265/0x280 [ 34.963894][ T3632] should_failslab+0x8c/0xb0 [ 34.963927][ T3632] kmem_cache_alloc_noprof+0x50/0x310 [ 34.963987][ T3632] ? getname_flags+0x80/0x3b0 [ 34.964013][ T3632] ? __fget_files+0x184/0x1c0 [ 34.964043][ T3632] getname_flags+0x80/0x3b0 [ 34.964190][ T3632] path_listxattrat+0x7e/0x2a0 [ 34.964228][ T3632] __x64_sys_listxattr+0x4a/0x60 [ 34.964260][ T3632] x64_sys_call+0x2df7/0x2ff0 [ 34.964282][ T3632] do_syscall_64+0xd2/0x200 [ 34.964388][ T3632] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.964417][ T3632] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.964449][ T3632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.964476][ T3632] RIP: 0033:0x7fa7d4b4ec29 [ 34.964495][ T3632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.964519][ T3632] RSP: 002b:00007fa7d35b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 34.964537][ T3632] RAX: ffffffffffffffda RBX: 00007fa7d4d95fa0 RCX: 00007fa7d4b4ec29 [ 34.964550][ T3632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000001a240 [ 34.964564][ T3632] RBP: 00007fa7d35b7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.964579][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.964594][ T3632] R13: 00007fa7d4d96038 R14: 00007fa7d4d95fa0 R15: 00007ffd1fe07328 [ 34.964618][ T3632] [ 34.991063][ T3637] loop4: detected capacity change from 0 to 512 [ 35.034041][ T3639] netlink: 160 bytes leftover after parsing attributes in process `syz.1.55'. [ 35.041215][ T3637] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.186860][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.193982][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.201280][ T3596] bridge_slave_0: entered allmulticast mode [ 35.207937][ T3596] bridge_slave_0: entered promiscuous mode [ 35.214775][ T3637] EXT4-fs (loop4): failed to initialize system zone (-117) [ 35.215353][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.229233][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.229468][ T3637] EXT4-fs (loop4): mount failed [ 35.236662][ T3596] bridge_slave_1: entered allmulticast mode [ 35.245368][ T3646] loop1: detected capacity change from 0 to 512 [ 35.248188][ T3596] bridge_slave_1: entered promiscuous mode [ 35.293675][ T3650] loop2: detected capacity change from 0 to 4096 [ 35.304253][ T3646] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 35.312924][ T3650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.317214][ T3596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.334150][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.347287][ T3646] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.58: invalid indirect mapped block 8 (level 2) [ 35.362361][ T3596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.371866][ T3646] EXT4-fs (loop1): Remounting filesystem read-only [ 35.378877][ T3646] EXT4-fs (loop1): 1 truncate cleaned up [ 35.386447][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.450142][ T3424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.485861][ T3661] loop0: detected capacity change from 0 to 4096 [ 35.493201][ T3596] team0: Port device team_slave_0 added [ 35.508610][ T3596] team0: Port device team_slave_1 added [ 35.525454][ T3661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.532434][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.555042][ T3596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.556315][ T3661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.562124][ T3596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.600521][ T3596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.629521][ T3661] program syz.0.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.649524][ T3661] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 35.661651][ T3424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.694016][ T3596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.701250][ T3596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.727583][ T3596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.746829][ T3664] lo speed is unknown, defaulting to 1000 [ 35.769411][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.788656][ T3424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.804603][ T3596] hsr_slave_0: entered promiscuous mode [ 35.814487][ T3596] hsr_slave_1: entered promiscuous mode [ 35.821934][ T3596] debugfs: 'hsr0' already exists in 'hsr' [ 35.827727][ T3596] Cannot create hsr debugfs directory [ 35.909467][ T3424] bridge_slave_1: left allmulticast mode [ 35.915316][ T3424] bridge_slave_1: left promiscuous mode [ 35.921062][ T3424] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.931090][ T3424] bridge_slave_0: left allmulticast mode [ 35.936883][ T3424] bridge_slave_0: left promiscuous mode [ 35.942557][ T3424] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.970235][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.002077][ T3687] netlink: 256 bytes leftover after parsing attributes in process `syz.0.67'. [ 36.030708][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.040645][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.050303][ T3424] bond0 (unregistering): Released all slaves [ 36.060553][ T3693] loop0: detected capacity change from 0 to 512 [ 36.079108][ T3693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.082985][ T3684] FAULT_INJECTION: forcing a failure. [ 36.082985][ T3684] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.091789][ T3693] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.104699][ T3684] CPU: 1 UID: 0 PID: 3684 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.104737][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 36.104754][ T3684] Call Trace: [ 36.104827][ T3684] [ 36.104837][ T3684] __dump_stack+0x1d/0x30 [ 36.104890][ T3684] dump_stack_lvl+0xe8/0x140 [ 36.104918][ T3684] dump_stack+0x15/0x1b [ 36.104942][ T3684] should_fail_ex+0x265/0x280 [ 36.104974][ T3684] should_fail+0xb/0x20 [ 36.105004][ T3684] should_fail_usercopy+0x1a/0x20 [ 36.105068][ T3684] _copy_from_user+0x1c/0xb0 [ 36.105112][ T3684] ___sys_sendmsg+0xc1/0x1d0 [ 36.105166][ T3684] __x64_sys_sendmsg+0xd4/0x160 [ 36.105227][ T3684] x64_sys_call+0x191e/0x2ff0 [ 36.105343][ T3684] do_syscall_64+0xd2/0x200 [ 36.105388][ T3684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.105423][ T3684] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.105479][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.105510][ T3684] RIP: 0033:0x7fa7d4b4ec29 [ 36.105531][ T3684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.105556][ T3684] RSP: 002b:00007fa7d35b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.105581][ T3684] RAX: ffffffffffffffda RBX: 00007fa7d4d95fa0 RCX: 00007fa7d4b4ec29 [ 36.105599][ T3684] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 36.105621][ T3684] RBP: 00007fa7d35b7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.105637][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.105654][ T3684] R13: 00007fa7d4d96038 R14: 00007fa7d4d95fa0 R15: 00007ffd1fe07328 [ 36.105680][ T3684] [ 36.298560][ T3687] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.67: corrupted inode contents [ 36.311203][ T3424] hsr_slave_0: left promiscuous mode [ 36.312484][ T3687] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #18: comm syz.0.67: mark_inode_dirty error [ 36.329116][ T3687] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.67: corrupted inode contents [ 36.329727][ T3424] hsr_slave_1: left promiscuous mode [ 36.340910][ T3687] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.67: mark_inode_dirty error [ 36.360471][ T3687] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.67: mark inode dirty (error -117) [ 36.367392][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.374405][ T3687] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 36.380258][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.399019][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.406426][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.421622][ T3424] veth1_macvtap: left promiscuous mode [ 36.428041][ T3687] syz.0.67 (3687) used greatest stack depth: 10016 bytes left [ 36.435695][ T3424] veth0_macvtap: left promiscuous mode [ 36.445239][ T3424] veth1_vlan: left promiscuous mode [ 36.450793][ T3424] veth0_vlan: left promiscuous mode [ 36.459747][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.524958][ T3705] FAULT_INJECTION: forcing a failure. [ 36.524958][ T3705] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 36.525107][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: syz.4.72 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.525144][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 36.525161][ T3705] Call Trace: [ 36.525212][ T3705] [ 36.525223][ T3705] __dump_stack+0x1d/0x30 [ 36.525253][ T3705] dump_stack_lvl+0xe8/0x140 [ 36.525300][ T3705] dump_stack+0x15/0x1b [ 36.525329][ T3705] should_fail_ex+0x265/0x280 [ 36.525373][ T3705] should_fail_alloc_page+0xf2/0x100 [ 36.525411][ T3705] __alloc_frozen_pages_noprof+0xff/0x360 [ 36.525464][ T3705] alloc_pages_mpol+0xb3/0x250 [ 36.525562][ T3705] vma_alloc_folio_noprof+0x1aa/0x300 [ 36.525611][ T3705] do_wp_page+0x5db/0x24e0 [ 36.525651][ T3705] ? css_rstat_updated+0xb7/0x240 [ 36.525740][ T3705] ? __rcu_read_lock+0x37/0x50 [ 36.525795][ T3705] handle_mm_fault+0x77d/0x2c20 [ 36.525828][ T3705] ? __rcu_read_unlock+0x4f/0x70 [ 36.525911][ T3705] do_user_addr_fault+0x3fe/0x1090 [ 36.525964][ T3705] exc_page_fault+0x62/0xa0 [ 36.526004][ T3705] asm_exc_page_fault+0x26/0x30 [ 36.526033][ T3705] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 36.526068][ T3705] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 36.526093][ T3705] RSP: 0018:ffffc90003667d78 EFLAGS: 00050206 [ 36.526115][ T3705] RAX: ffff88811a69aba0 RBX: 000000000000b161 RCX: 00000000000098e1 [ 36.526131][ T3705] RDX: 0000000000000000 RSI: ffff88811b571880 RDI: 0000200000003000 [ 36.526148][ T3705] RBP: ffffc9001133a000 R08: 000000000000016c R09: 0000000000000000 [ 36.526172][ T3705] R10: 000188811b570000 R11: 000188811b57b160 R12: 000020000000c8e1 [ 36.526190][ T3705] R13: 00007ffffffff000 R14: 0000200000001780 R15: ffff88811b570000 [ 36.526217][ T3705] _copy_to_user+0x7c/0xa0 [ 36.526339][ T3705] map_lookup_and_delete_elem+0x528/0x5c0 [ 36.526388][ T3705] __sys_bpf+0x585/0x7b0 [ 36.526437][ T3705] __x64_sys_bpf+0x41/0x50 [ 36.526470][ T3705] x64_sys_call+0x2aea/0x2ff0 [ 36.526502][ T3705] do_syscall_64+0xd2/0x200 [ 36.526618][ T3705] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.526651][ T3705] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.526763][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.526793][ T3705] RIP: 0033:0x7f89b337ec29 [ 36.526813][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.526836][ T3705] RSP: 002b:00007f89b1ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.526897][ T3705] RAX: ffffffffffffffda RBX: 00007f89b35c5fa0 RCX: 00007f89b337ec29 [ 36.526914][ T3705] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 36.526931][ T3705] RBP: 00007f89b1ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 36.526946][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.527040][ T3705] R13: 00007f89b35c6038 R14: 00007f89b35c5fa0 R15: 00007ffd0d701ed8 [ 36.527065][ T3705] [ 36.543379][ T3706] loop0: detected capacity change from 0 to 512 [ 36.544069][ T3706] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 36.544953][ T3706] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.545144][ T3706] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.70: Block bitmap for bg 0 marked uninitialized [ 36.545330][ T3706] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 36.545548][ T3706] EXT4-fs (loop0): 1 orphan inode deleted [ 36.546044][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.623504][ T3712] loop4: detected capacity change from 0 to 1024 [ 36.930368][ T3424] team0 (unregistering): Port device team_slave_1 removed [ 36.933096][ T3712] EXT4-fs: inline encryption not supported [ 36.943782][ T3712] ext4: Unknown parameter 'nouser_xattr' [ 36.944099][ T3424] team0 (unregistering): Port device team_slave_0 removed [ 36.971339][ T3712] siw: device registration error -23 [ 36.989604][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.023303][ T3596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.036177][ T3596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.051163][ T3596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.061029][ T3596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.074780][ T3718] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 37.081908][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 37.082009][ T29] audit: type=1400 audit(1758436650.269:378): avc: denied { create } for pid=3717 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.108962][ T29] audit: type=1400 audit(1758436650.299:379): avc: denied { ioctl } for pid=3717 comm="syz.4.76" path="socket:[5640]" dev="sockfs" ino=5640 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.150017][ T29] audit: type=1400 audit(1758436650.329:380): avc: denied { create } for pid=3722 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.155524][ T3596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.169243][ T29] audit: type=1400 audit(1758436650.329:381): avc: denied { ioctl } for pid=3722 comm="syz.0.77" path="socket:[5643]" dev="sockfs" ino=5643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.185647][ T3596] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.200016][ T29] audit: type=1400 audit(1758436650.329:382): avc: denied { bind } for pid=3722 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.225862][ T29] audit: type=1400 audit(1758436650.329:383): avc: denied { write } for pid=3722 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.250673][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.257859][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.271437][ T3718] netlink: 'syz.4.76': attribute type 4 has an invalid length. [ 37.281363][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.282488][ T3729] netlink: 'syz.0.78': attribute type 3 has an invalid length. [ 37.288534][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.309288][ T3729] loop0: detected capacity change from 0 to 256 [ 37.343534][ T29] audit: type=1400 audit(1758436650.529:384): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.376397][ T3735] FAULT_INJECTION: forcing a failure. [ 37.376397][ T3735] name failslab, interval 1, probability 0, space 0, times 0 [ 37.386822][ T3596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.389330][ T3735] CPU: 0 UID: 0 PID: 3735 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.389390][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 37.389406][ T3735] Call Trace: [ 37.389413][ T3735] [ 37.389423][ T3735] __dump_stack+0x1d/0x30 [ 37.389452][ T3735] dump_stack_lvl+0xe8/0x140 [ 37.389480][ T3735] dump_stack+0x15/0x1b [ 37.389502][ T3735] should_fail_ex+0x265/0x280 [ 37.389546][ T3735] should_failslab+0x8c/0xb0 [ 37.389582][ T3735] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 37.389689][ T3735] ? __d_alloc+0x3d/0x340 [ 37.389731][ T3735] __d_alloc+0x3d/0x340 [ 37.389767][ T3735] ? mpol_shared_policy_init+0xbd/0x4c0 [ 37.389860][ T3735] d_alloc_pseudo+0x1e/0x80 [ 37.389909][ T3735] alloc_file_pseudo+0x71/0x160 [ 37.389955][ T3735] __shmem_file_setup+0x1de/0x210 [ 37.390033][ T3735] shmem_file_setup+0x3b/0x50 [ 37.390058][ T3735] __se_sys_memfd_create+0x2c3/0x590 [ 37.390090][ T3735] __x64_sys_memfd_create+0x31/0x40 [ 37.390140][ T3735] x64_sys_call+0x2abe/0x2ff0 [ 37.390180][ T3735] do_syscall_64+0xd2/0x200 [ 37.390224][ T3735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.390321][ T3735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.390363][ T3735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.390393][ T3735] RIP: 0033:0x7fb6e201ec29 [ 37.390413][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.390438][ T3735] RSP: 002b:00007fb6e0a86d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 37.390469][ T3735] RAX: ffffffffffffffda RBX: 00000000000005c9 RCX: 00007fb6e201ec29 [ 37.390513][ T3735] RDX: 00007fb6e0a86dec RSI: 0000000000000000 RDI: 00007fb6e20a2810 [ 37.390531][ T3735] RBP: 0000200000000880 R08: 00007fb6e0a86b07 R09: 0000000000000000 [ 37.390548][ T3735] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 37.390564][ T3735] R13: 00007fb6e0a86dec R14: 00007fb6e0a86df0 R15: 00007fffc5c7b718 [ 37.390712][ T3735] [ 37.632119][ T29] audit: type=1400 audit(1758436650.819:385): avc: denied { execute } for pid=3742 comm="syz.0.81" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 37.633544][ T3744] FAULT_INJECTION: forcing a failure. [ 37.633544][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 37.671274][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.671308][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 37.671323][ T3744] Call Trace: [ 37.671331][ T3744] [ 37.671340][ T3744] __dump_stack+0x1d/0x30 [ 37.671393][ T3744] dump_stack_lvl+0xe8/0x140 [ 37.671418][ T3744] dump_stack+0x15/0x1b [ 37.671438][ T3744] should_fail_ex+0x265/0x280 [ 37.671462][ T3744] should_failslab+0x8c/0xb0 [ 37.671493][ T3744] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 37.671612][ T3744] ? __d_alloc+0x3d/0x340 [ 37.671656][ T3744] __d_alloc+0x3d/0x340 [ 37.671684][ T3744] ? from_vfsgid+0x70/0xa0 [ 37.671714][ T3744] d_alloc_pseudo+0x1e/0x80 [ 37.671752][ T3744] alloc_file_pseudo+0x71/0x160 [ 37.671825][ T3744] hugetlb_file_setup+0x2a6/0x3d0 [ 37.671860][ T3744] ksys_mmap_pgoff+0x157/0x310 [ 37.671885][ T3744] x64_sys_call+0x14a3/0x2ff0 [ 37.671913][ T3744] do_syscall_64+0xd2/0x200 [ 37.671989][ T3744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.672020][ T3744] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.672134][ T3744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.672162][ T3744] RIP: 0033:0x7fb6e201ec29 [ 37.672181][ T3744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.672282][ T3744] RSP: 002b:00007fb6e0a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 37.672307][ T3744] RAX: ffffffffffffffda RBX: 00007fb6e2265fa0 RCX: 00007fb6e201ec29 [ 37.672322][ T3744] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 37.672337][ T3744] RBP: 00007fb6e0a87090 R08: ffffffffffffffff R09: 00000000fffff000 [ 37.672352][ T3744] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 37.672367][ T3744] R13: 00007fb6e2266038 R14: 00007fb6e2265fa0 R15: 00007fffc5c7b718 [ 37.672389][ T3744] [ 37.768606][ T3596] veth0_vlan: entered promiscuous mode [ 37.866612][ T29] audit: type=1400 audit(1758436651.029:386): avc: denied { create } for pid=3753 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.890157][ T29] audit: type=1400 audit(1758436651.029:387): avc: denied { ioctl } for pid=3753 comm="syz.0.82" path="socket:[6592]" dev="sockfs" ino=6592 ioctlcmd=0x891e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.896215][ T3596] veth1_vlan: entered promiscuous mode [ 37.935980][ T3596] veth0_macvtap: entered promiscuous mode [ 37.944018][ T3596] veth1_macvtap: entered promiscuous mode [ 37.955284][ T3596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.966286][ T3596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.976944][ T384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.985906][ T384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.994672][ T384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.004600][ T384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.050406][ T3762] netlink: 'syz.5.43': attribute type 4 has an invalid length. [ 38.159951][ T3764] loop5: detected capacity change from 0 to 512 [ 38.167445][ T3764] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 38.178009][ T3764] EXT4-fs (loop5): orphan cleanup on readonly fs [ 38.184602][ T3764] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.84: Block bitmap for bg 0 marked uninitialized [ 38.198977][ T3764] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 38.207959][ T3764] EXT4-fs (loop5): 1 orphan inode deleted [ 38.214115][ T3764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.230697][ T3767] __nla_validate_parse: 4 callbacks suppressed [ 38.230713][ T3767] netlink: 264 bytes leftover after parsing attributes in process `syz.4.85'. [ 38.259054][ T3596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.275255][ T3771] FAULT_INJECTION: forcing a failure. [ 38.275255][ T3771] name failslab, interval 1, probability 0, space 0, times 0 [ 38.288135][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.5.87 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.288169][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 38.288233][ T3771] Call Trace: [ 38.288238][ T3771] [ 38.288245][ T3771] __dump_stack+0x1d/0x30 [ 38.288271][ T3771] dump_stack_lvl+0xe8/0x140 [ 38.288357][ T3771] dump_stack+0x15/0x1b [ 38.288375][ T3771] should_fail_ex+0x265/0x280 [ 38.288400][ T3771] should_failslab+0x8c/0xb0 [ 38.288421][ T3771] kmem_cache_alloc_noprof+0x50/0x310 [ 38.288476][ T3771] ? skb_clone+0x151/0x1f0 [ 38.288500][ T3771] skb_clone+0x151/0x1f0 [ 38.288521][ T3771] __netlink_deliver_tap+0x2c9/0x500 [ 38.288598][ T3771] netlink_unicast+0x66b/0x690 [ 38.288619][ T3771] netlink_sendmsg+0x58b/0x6b0 [ 38.288643][ T3771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.288707][ T3771] __sock_sendmsg+0x142/0x180 [ 38.288738][ T3771] ____sys_sendmsg+0x31e/0x4e0 [ 38.288774][ T3771] ___sys_sendmsg+0x17b/0x1d0 [ 38.288891][ T3771] __x64_sys_sendmsg+0xd4/0x160 [ 38.288928][ T3771] x64_sys_call+0x191e/0x2ff0 [ 38.288948][ T3771] do_syscall_64+0xd2/0x200 [ 38.288998][ T3771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.289053][ T3771] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.289096][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.289115][ T3771] RIP: 0033:0x7f9da0deec29 [ 38.289128][ T3771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.289157][ T3771] RSP: 002b:00007f9d9f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.289174][ T3771] RAX: ffffffffffffffda RBX: 00007f9da1035fa0 RCX: 00007f9da0deec29 [ 38.289185][ T3771] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 38.289260][ T3771] RBP: 00007f9d9f857090 R08: 0000000000000000 R09: 0000000000000000 [ 38.289274][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.289331][ T3771] R13: 00007f9da1036038 R14: 00007f9da1035fa0 R15: 00007ffeb73191e8 [ 38.289350][ T3771] [ 38.289989][ T3771] netlink: 'syz.5.87': attribute type 1 has an invalid length. [ 38.301803][ T3772] loop4: detected capacity change from 0 to 512 [ 38.509976][ T3772] EXT4-fs: Ignoring removed oldalloc option [ 38.519370][ T3772] EXT4-fs (loop4): 1 truncate cleaned up [ 38.525942][ T3772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.552847][ T3772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 38.564359][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.572567][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.724819][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.752536][ T3780] loop4: detected capacity change from 0 to 512 [ 38.760283][ T3780] EXT4-fs: Invalid want_extra_isize 7 [ 38.928716][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 39.461463][ T3800] netlink: 264 bytes leftover after parsing attributes in process `syz.1.96'. [ 39.610273][ T3810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 39.616833][ T3810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.624436][ T3810] vhci_hcd vhci_hcd.0: Device attached [ 39.638648][ T3811] vhci_hcd: connection closed [ 39.638822][ T51] vhci_hcd: stop threads [ 39.647810][ T51] vhci_hcd: release socket [ 39.652246][ T51] vhci_hcd: disconnect device [ 39.717052][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.217276][ T3838] loop1: detected capacity change from 0 to 8192 [ 40.277843][ T3838] loop1: p1 p2 < > p3 p4 < p5 > [ 40.282820][ T3838] loop1: partition table partially beyond EOD, truncated [ 40.290265][ T3838] loop1: p1 size 100663296 extends beyond EOD, truncated [ 40.306826][ T3838] loop1: p2 start 591104 is beyond EOD, truncated [ 40.313360][ T3838] loop1: p3 start 33572980 is beyond EOD, truncated [ 40.318477][ T3842] netlink: 244 bytes leftover after parsing attributes in process `syz.5.108'. [ 40.320503][ T3838] loop1: p5 size 100663296 extends beyond EOD, truncated [ 40.339874][ T3838] netlink: '+}[@': attribute type 7 has an invalid length. [ 40.374587][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 40.386272][ T3846] loop1: detected capacity change from 0 to 128 [ 40.393498][ T3846] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.407020][ T3846] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.419732][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.109'. [ 40.549803][ T3857] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 40.581616][ T3859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.114'. [ 40.590624][ T3859] netlink: 212 bytes leftover after parsing attributes in process `syz.4.114'. [ 40.616815][ T3859] geneve2: entered promiscuous mode [ 40.625142][ T3861] loop0: detected capacity change from 0 to 1024 [ 40.633147][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 39845 - 0 [ 40.646951][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 39845 - 0 [ 40.656197][ T3861] EXT4-fs: inline encryption not supported [ 40.662780][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 39845 - 0 [ 40.672891][ T3861] ext4: Unknown parameter 'nouser_xattr' [ 40.676813][ T3865] loop2: detected capacity change from 0 to 512 [ 40.689016][ T3861] siw: device registration error -23 [ 40.689275][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.069840][ T3887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.117772][ T3887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.227235][ T3891] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 41.252785][ T3895] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 41.320966][ T3902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.357748][ T3902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.420019][ T3902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.500600][ T3902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.564649][ T3902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.612088][ T3865] syz.2.117 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 41.626399][ T3865] CPU: 0 UID: 0 PID: 3865 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.626499][ T3865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 41.626513][ T3865] Call Trace: [ 41.626520][ T3865] [ 41.626528][ T3865] __dump_stack+0x1d/0x30 [ 41.626549][ T3865] dump_stack_lvl+0xe8/0x140 [ 41.626568][ T3865] dump_stack+0x15/0x1b [ 41.626625][ T3865] dump_header+0x81/0x220 [ 41.626664][ T3865] oom_kill_process+0x342/0x400 [ 41.626704][ T3865] out_of_memory+0x979/0xb80 [ 41.626797][ T3865] try_charge_memcg+0x5e6/0x9e0 [ 41.626895][ T3865] obj_cgroup_charge_pages+0xa6/0x150 [ 41.626981][ T3865] __memcg_kmem_charge_page+0x9f/0x170 [ 41.627079][ T3865] __alloc_frozen_pages_noprof+0x188/0x360 [ 41.627202][ T3865] alloc_pages_mpol+0xb3/0x250 [ 41.627246][ T3865] alloc_pages_noprof+0x90/0x130 [ 41.627290][ T3865] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 41.627355][ T3865] __kvmalloc_node_noprof+0x30f/0x4e0 [ 41.627399][ T3865] ? ip_set_alloc+0x1f/0x30 [ 41.627423][ T3865] ? ip_set_alloc+0x1f/0x30 [ 41.627449][ T3865] ? __kmalloc_cache_noprof+0x189/0x320 [ 41.627557][ T3865] ip_set_alloc+0x1f/0x30 [ 41.627583][ T3865] hash_netiface_create+0x282/0x740 [ 41.627616][ T3865] ? __pfx_hash_netiface_create+0x10/0x10 [ 41.627641][ T3865] ip_set_create+0x3c9/0x960 [ 41.627725][ T3865] ? __nla_parse+0x40/0x60 [ 41.627762][ T3865] nfnetlink_rcv_msg+0x4c3/0x590 [ 41.627814][ T3865] netlink_rcv_skb+0x123/0x220 [ 41.627923][ T3865] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 41.627950][ T3865] nfnetlink_rcv+0x16b/0x1690 [ 41.627970][ T3865] ? nlmon_xmit+0x4f/0x60 [ 41.628063][ T3865] ? consume_skb+0x49/0x150 [ 41.628087][ T3865] ? nlmon_xmit+0x4f/0x60 [ 41.628125][ T3865] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 41.628203][ T3865] ? __dev_queue_xmit+0x1200/0x2000 [ 41.628236][ T3865] ? __dev_queue_xmit+0x182/0x2000 [ 41.628273][ T3865] ? ref_tracker_free+0x37d/0x3e0 [ 41.628359][ T3865] ? __netlink_deliver_tap+0x4dc/0x500 [ 41.628397][ T3865] netlink_unicast+0x5bd/0x690 [ 41.628429][ T3865] netlink_sendmsg+0x58b/0x6b0 [ 41.628599][ T3865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.628634][ T3865] __sock_sendmsg+0x142/0x180 [ 41.628673][ T3865] ____sys_sendmsg+0x31e/0x4e0 [ 41.628702][ T3865] ___sys_sendmsg+0x17b/0x1d0 [ 41.628783][ T3865] __x64_sys_sendmsg+0xd4/0x160 [ 41.628817][ T3865] x64_sys_call+0x191e/0x2ff0 [ 41.628839][ T3865] do_syscall_64+0xd2/0x200 [ 41.628926][ T3865] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.629017][ T3865] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.629057][ T3865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.629084][ T3865] RIP: 0033:0x7fa69908ec29 [ 41.629100][ T3865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.629126][ T3865] RSP: 002b:00007fa697aef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.629147][ T3865] RAX: ffffffffffffffda RBX: 00007fa6992d5fa0 RCX: 00007fa69908ec29 [ 41.629163][ T3865] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 41.629180][ T3865] RBP: 00007fa699111e41 R08: 0000000000000000 R09: 0000000000000000 [ 41.629267][ T3865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.629283][ T3865] R13: 00007fa6992d6038 R14: 00007fa6992d5fa0 R15: 00007fff111ed468 [ 41.629302][ T3865] [ 41.958431][ T3865] memory: usage 307200kB, limit 307200kB, failcnt 466 [ 41.965456][ T3865] memory+swap: usage 307692kB, limit 9007199254740988kB, failcnt 0 [ 41.973573][ T3865] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 41.981103][ T3865] Memory cgroup stats for /syz2: [ 41.993003][ T410] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.993385][ T3865] cache 32768 [ 42.002948][ T410] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.006273][ T3865] rss 0 [ 42.006285][ T3865] shmem 0 [ 42.006295][ T3865] mapped_file 0 [ 42.006304][ T3865] dirty 0 [ 42.006313][ T3865] writeback 4096 [ 42.006323][ T3865] workingset_refault_anon 79 [ 42.006339][ T3865] workingset_refault_file 100 [ 42.006352][ T3865] swap 503808 [ 42.006361][ T3865] swapcached 0 [ 42.006371][ T3865] pgpgin 7541 [ 42.006380][ T3865] pgpgout 7532 [ 42.006390][ T3865] pgfault 7820 [ 42.006399][ T3865] pgmajfault 36 [ 42.006409][ T3865] inactive_anon 0 [ 42.006420][ T3865] active_anon 0 [ 42.006438][ T3865] inactive_file 36864 [ 42.006455][ T3865] active_file 0 [ 42.016466][ T410] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.017901][ T3865] unevictable 0 [ 42.017915][ T3865] hierarchical_memory_limit 314572800 [ 42.017927][ T3865] hierarchical_memsw_limit 9223372036854771712 [ 42.017939][ T3865] total_cache 32768 [ 42.017959][ T3865] total_rss 0 [ 42.017969][ T3865] total_shmem 0 [ 42.017978][ T3865] total_mapped_file 0 [ 42.017989][ T3865] total_dirty 0 [ 42.018000][ T3865] total_writeback 4096 [ 42.018010][ T3865] total_workingset_refault_anon 79 [ 42.018021][ T3865] total_workingset_refault_file 100 [ 42.018032][ T3865] total_swap 503808 [ 42.018042][ T3865] total_swapcached 0 [ 42.018051][ T3865] total_pgpgin 7541 [ 42.018062][ T3865] total_pgpgout 7532 [ 42.025864][ T410] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.027539][ T3865] total_pgfault 7820 [ 42.027550][ T3865] total_pgmajfault 36 [ 42.027559][ T3865] total_inactive_anon 0 [ 42.027568][ T3865] total_active_anon 0 [ 42.027577][ T3865] total_inactive_file 36864 [ 42.027586][ T3865] total_active_file 0 [ 42.027626][ T3865] total_unevictable 0 [ 42.027636][ T3865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.117,pid=3864,uid=0 [ 42.098021][ T3914] loop1: detected capacity change from 0 to 1024 [ 42.101651][ T3865] Memory cgroup out of memory: Killed process 3864 (syz.2.117) total-vm:96072kB, anon-rss:1072kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 42.237103][ T3914] EXT4-fs: inline encryption not supported [ 42.243058][ T3914] ext4: Unknown parameter 'nouser_xattr' [ 42.265919][ T3864] syz.2.117 (3864) used greatest stack depth: 9848 bytes left [ 42.274373][ T3872] syz.2.117 (3872) used greatest stack depth: 8776 bytes left [ 42.298521][ T3916] loop0: detected capacity change from 0 to 1024 [ 42.306345][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 42.306359][ T29] audit: type=1400 audit(42.295:532): avc: denied { connect } for pid=3917 comm="syz.5.132" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.336875][ T3916] EXT4-fs: Ignoring removed orlov option [ 42.352798][ T3914] siw: device registration error -23 [ 42.372229][ T3916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.408753][ T29] audit: type=1326 audit(42.405:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.431575][ T29] audit: type=1326 audit(42.405:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.454278][ T29] audit: type=1326 audit(42.405:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.476936][ T29] audit: type=1326 audit(42.405:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.499556][ T29] audit: type=1326 audit(42.405:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.534499][ T3859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 42.546034][ T3865] syz.2.117 (3865) used greatest stack depth: 6168 bytes left [ 42.572969][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.604167][ T29] audit: type=1400 audit(42.405:538): avc: denied { read } for pid=3915 comm="syz.0.131" path="/31/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.625672][ T29] audit: type=1400 audit(42.405:539): avc: denied { ioctl } for pid=3915 comm="syz.0.131" path="/31/bus/bus" dev="loop0" ino=18 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.648738][ T29] audit: type=1326 audit(42.505:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.651948][ T3938] netlink: 'syz.5.137': attribute type 4 has an invalid length. [ 42.671295][ T29] audit: type=1326 audit(42.505:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0deec29 code=0x7ffc0000 [ 42.705585][ T3859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 42.748098][ T3859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 42.835735][ T3424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 39845 - 0 [ 42.845175][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.856605][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 39845 - 0 [ 42.865467][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 39845 - 0 [ 42.882635][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 39845 - 0 [ 42.917031][ T3956] loop4: detected capacity change from 0 to 512 [ 42.923813][ T3956] vfat: Bad value for 'gid' [ 42.928385][ T3956] vfat: Bad value for 'gid' [ 42.958060][ T3956] mmap: syz.4.143 (3956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.984627][ T3956] loop4: detected capacity change from 0 to 512 [ 43.001361][ T3956] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.009350][ T3956] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.143: bg 0: block 248: padding at end of block bitmap is not set [ 43.044729][ T3956] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.143: Failed to acquire dquot type 1 [ 43.078902][ T3956] EXT4-fs (loop4): 1 truncate cleaned up [ 43.090769][ T3956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.140244][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.346778][ T3968] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 43.357914][ T3970] random: crng reseeded on system resumption [ 43.508560][ T3975] loop1: detected capacity change from 0 to 512 [ 43.515121][ T3975] EXT4-fs: Ignoring removed bh option [ 43.520996][ T3975] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.530092][ T3975] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.548090][ T3975] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 43.567742][ T3975] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 43.576289][ T3975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.629467][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.661503][ T3982] loop1: detected capacity change from 0 to 128 [ 43.805733][ T3990] __nla_validate_parse: 6 callbacks suppressed [ 43.805747][ T3990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 43.831427][ T3992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.154'. [ 43.866099][ T3996] FAULT_INJECTION: forcing a failure. [ 43.866099][ T3996] name failslab, interval 1, probability 0, space 0, times 0 [ 43.878806][ T3996] CPU: 0 UID: 0 PID: 3996 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.878841][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.878857][ T3996] Call Trace: [ 43.878865][ T3996] [ 43.878872][ T3996] __dump_stack+0x1d/0x30 [ 43.878930][ T3996] dump_stack_lvl+0xe8/0x140 [ 43.878951][ T3996] dump_stack+0x15/0x1b [ 43.878972][ T3996] should_fail_ex+0x265/0x280 [ 43.879004][ T3996] ? sctp_datamsg_from_user+0x57/0x950 [ 43.879062][ T3996] should_failslab+0x8c/0xb0 [ 43.879168][ T3996] __kmalloc_cache_noprof+0x4c/0x320 [ 43.879203][ T3996] sctp_datamsg_from_user+0x57/0x950 [ 43.879231][ T3996] ? __sk_mem_raise_allocated+0x6f8/0x9c0 [ 43.879288][ T3996] ? sctp_prsctp_prune+0xdf/0x430 [ 43.879379][ T3996] ? __sk_mem_schedule+0x80/0xc0 [ 43.879418][ T3996] sctp_sendmsg_to_asoc+0xa56/0xf20 [ 43.879454][ T3996] ? avc_has_perm_noaudit+0x1b1/0x200 [ 43.879481][ T3996] ? _raw_spin_unlock_bh+0x36/0x40 [ 43.879512][ T3996] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 43.879548][ T3996] sctp_sendmsg+0x1263/0x18d0 [ 43.879575][ T3996] ? selinux_socket_sendmsg+0x91/0x1b0 [ 43.879617][ T3996] ? __pfx_sctp_sendmsg+0x10/0x10 [ 43.879637][ T3996] inet_sendmsg+0xc5/0xd0 [ 43.879707][ T3996] __sock_sendmsg+0x102/0x180 [ 43.879817][ T3996] sock_write_iter+0x165/0x1b0 [ 43.879862][ T3996] do_iter_readv_writev+0x499/0x540 [ 43.879932][ T3996] vfs_writev+0x2df/0x8b0 [ 43.879978][ T3996] do_writev+0xe7/0x210 [ 43.880007][ T3996] __x64_sys_writev+0x45/0x50 [ 43.880101][ T3996] x64_sys_call+0x1e9a/0x2ff0 [ 43.880127][ T3996] do_syscall_64+0xd2/0x200 [ 43.880168][ T3996] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.880282][ T3996] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.880322][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.880403][ T3996] RIP: 0033:0x7f89b337ec29 [ 43.880418][ T3996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.880476][ T3996] RSP: 002b:00007f89b1ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 43.880495][ T3996] RAX: ffffffffffffffda RBX: 00007f89b35c5fa0 RCX: 00007f89b337ec29 [ 43.880507][ T3996] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 43.880518][ T3996] RBP: 00007f89b1ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 43.880584][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.880600][ T3996] R13: 00007f89b35c6038 R14: 00007f89b35c5fa0 R15: 00007ffd0d701ed8 [ 43.880623][ T3996] [ 44.151627][ T3998] loop1: detected capacity change from 0 to 1024 [ 44.158367][ T3998] EXT4-fs: inline encryption not supported [ 44.164686][ T3998] ext4: Unknown parameter 'nouser_xattr' [ 44.204809][ T3998] siw: device registration error -23 [ 44.251062][ T4004] loop1: detected capacity change from 0 to 512 [ 44.260724][ T4004] ext4: Unknown parameter 'smackfsfloor' [ 44.317441][ T4014] loop5: detected capacity change from 0 to 128 [ 44.352678][ T4014] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.393936][ T3596] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.418370][ T4035] loop5: detected capacity change from 0 to 1024 [ 44.425401][ T4035] EXT4-fs: inline encryption not supported [ 44.432445][ T4035] ext4: Unknown parameter 'nouser_xattr' [ 44.447694][ T4035] siw: device registration error -23 [ 44.475159][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.172'. [ 44.507992][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.172'. [ 44.524456][ T4039] hsr_slave_1 (unregistering): left promiscuous mode [ 44.778777][ T4060] lo speed is unknown, defaulting to 1000 [ 44.805897][ T4064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.181'. [ 44.815601][ T4064] netlink: 'syz.1.181': attribute type 6 has an invalid length. [ 44.838736][ T4069] $Hÿ: renamed from bond0 (while UP) [ 44.845883][ T4069] $Hÿ: entered promiscuous mode [ 44.851027][ T4069] bond_slave_0: entered promiscuous mode [ 44.856847][ T4069] bond_slave_1: entered promiscuous mode [ 45.705466][ T4090] loop5: detected capacity change from 0 to 512 [ 45.933966][ T4090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.963701][ T4093] lo speed is unknown, defaulting to 1000 [ 46.049832][ T4113] loop0: detected capacity change from 0 to 512 [ 46.064925][ T4113] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 46.073962][ T4113] System zones: 0-2, 18-18, 34-35 [ 46.080078][ T4113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.093579][ T3596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.122374][ T4119] netlink: 'syz.5.195': attribute type 1 has an invalid length. [ 46.122377][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.243412][ T4131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 46.267468][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 46.302019][ T4134] netlink: 'syz.0.201': attribute type 13 has an invalid length. [ 46.315540][ T4134] 0ªî{X¹¦: left allmulticast mode [ 46.321821][ T4134] 0ªî{X¹¦: refused to change device tx_queue_len [ 46.329105][ T4134] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 46.412811][ T4138] loop0: detected capacity change from 0 to 2048 [ 46.427577][ T4138] EXT4-fs (loop0): failed to initialize system zone (-117) [ 46.435156][ T4138] EXT4-fs (loop0): mount failed [ 46.875670][ T4149] loop1: detected capacity change from 0 to 164 [ 46.942863][ T4153] FAULT_INJECTION: forcing a failure. [ 46.942863][ T4153] name failslab, interval 1, probability 0, space 0, times 0 [ 46.955552][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.955611][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 46.955623][ T4153] Call Trace: [ 46.955629][ T4153] [ 46.955636][ T4153] __dump_stack+0x1d/0x30 [ 46.955665][ T4153] dump_stack_lvl+0xe8/0x140 [ 46.955686][ T4153] dump_stack+0x15/0x1b [ 46.955701][ T4153] should_fail_ex+0x265/0x280 [ 46.955724][ T4153] ? sctp_add_bind_addr+0x71/0x1e0 [ 46.955819][ T4153] should_failslab+0x8c/0xb0 [ 46.955851][ T4153] __kmalloc_cache_noprof+0x4c/0x320 [ 46.955968][ T4153] sctp_add_bind_addr+0x71/0x1e0 [ 46.956006][ T4153] sctp_copy_local_addr_list+0x199/0x220 [ 46.956118][ T4153] sctp_copy_one_addr+0x7f/0x280 [ 46.956213][ T4153] sctp_bind_addr_copy+0x79/0x290 [ 46.956243][ T4153] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 46.956321][ T4153] sctp_connect_new_asoc+0x1c3/0x3a0 [ 46.956424][ T4153] sctp_sendmsg+0xf10/0x18d0 [ 46.956448][ T4153] ? selinux_socket_sendmsg+0x91/0x1b0 [ 46.956485][ T4153] ? __pfx_sctp_sendmsg+0x10/0x10 [ 46.956520][ T4153] inet_sendmsg+0xc5/0xd0 [ 46.956553][ T4153] __sock_sendmsg+0x102/0x180 [ 46.956587][ T4153] ____sys_sendmsg+0x345/0x4e0 [ 46.956655][ T4153] ___sys_sendmsg+0x17b/0x1d0 [ 46.956713][ T4153] __sys_sendmmsg+0x178/0x300 [ 46.956840][ T4153] __x64_sys_sendmmsg+0x57/0x70 [ 46.956875][ T4153] x64_sys_call+0x1c4a/0x2ff0 [ 46.956896][ T4153] do_syscall_64+0xd2/0x200 [ 46.956934][ T4153] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.956965][ T4153] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.957077][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.957097][ T4153] RIP: 0033:0x7fa7d4b4ec29 [ 46.957112][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.957178][ T4153] RSP: 002b:00007fa7d35b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.957198][ T4153] RAX: ffffffffffffffda RBX: 00007fa7d4d95fa0 RCX: 00007fa7d4b4ec29 [ 46.957214][ T4153] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 46.957226][ T4153] RBP: 00007fa7d35b7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.957238][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.957249][ T4153] R13: 00007fa7d4d96038 R14: 00007fa7d4d95fa0 R15: 00007ffd1fe07328 [ 46.957268][ T4153] [ 47.246664][ T4156] FAULT_INJECTION: forcing a failure. [ 47.246664][ T4156] name failslab, interval 1, probability 0, space 0, times 0 [ 47.259467][ T4156] CPU: 1 UID: 0 PID: 4156 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.259493][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.259505][ T4156] Call Trace: [ 47.259511][ T4156] [ 47.259519][ T4156] __dump_stack+0x1d/0x30 [ 47.259621][ T4156] dump_stack_lvl+0xe8/0x140 [ 47.259646][ T4156] dump_stack+0x15/0x1b [ 47.259666][ T4156] should_fail_ex+0x265/0x280 [ 47.259697][ T4156] should_failslab+0x8c/0xb0 [ 47.259724][ T4156] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 47.259818][ T4156] ? __d_alloc+0x3d/0x340 [ 47.259852][ T4156] __d_alloc+0x3d/0x340 [ 47.259903][ T4156] ? from_vfsgid+0x70/0xa0 [ 47.259930][ T4156] d_alloc_pseudo+0x1e/0x80 [ 47.259966][ T4156] alloc_file_pseudo+0x71/0x160 [ 47.260080][ T4156] hugetlb_file_setup+0x2a6/0x3d0 [ 47.260106][ T4156] ksys_mmap_pgoff+0x157/0x310 [ 47.260150][ T4156] x64_sys_call+0x14a3/0x2ff0 [ 47.260177][ T4156] do_syscall_64+0xd2/0x200 [ 47.260218][ T4156] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.260249][ T4156] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.260318][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.260339][ T4156] RIP: 0033:0x7f89b337ec29 [ 47.260354][ T4156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.260375][ T4156] RSP: 002b:00007f89b1ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 47.260459][ T4156] RAX: ffffffffffffffda RBX: 00007f89b35c5fa0 RCX: 00007f89b337ec29 [ 47.260471][ T4156] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 47.260482][ T4156] RBP: 00007f89b1ddf090 R08: ffffffffffffffff R09: 00000000fffff000 [ 47.260494][ T4156] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 47.260508][ T4156] R13: 00007f89b35c6038 R14: 00007f89b35c5fa0 R15: 00007ffd0d701ed8 [ 47.260531][ T4156] [ 47.321607][ T4159] program syz.2.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.439090][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 47.478042][ T29] kauditd_printk_skb: 9941 callbacks suppressed [ 47.478058][ T29] audit: type=1326 audit(47.475:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d4b4ec29 code=0x7ffc0000 [ 47.509710][ T29] audit: type=1326 audit(47.475:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fa7d4b4ec29 code=0x7ffc0000 [ 47.532726][ T29] audit: type=1326 audit(47.485:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d4b4ec29 code=0x7ffc0000 [ 47.559167][ T29] audit: type=1400 audit(47.525:10481): avc: denied { listen } for pid=4157 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.589842][ T29] audit: type=1400 audit(47.555:10482): avc: denied { watch watch_reads } for pid=4163 comm="syz.4.211" path="/47" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.614280][ T4167] Illegal XDP return value 4294967274 on prog (id 139) dev N/A, expect packet loss! [ 47.628679][ T29] audit: type=1400 audit(47.625:10483): avc: denied { create } for pid=4168 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.647747][ T29] audit: type=1400 audit(47.625:10484): avc: denied { read } for pid=4168 comm="syz.2.213" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.670456][ T29] audit: type=1400 audit(47.625:10485): avc: denied { open } for pid=4168 comm="syz.2.213" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.710332][ T4172] loop4: detected capacity change from 0 to 512 [ 47.733755][ T4175] 9pnet_fd: Insufficient options for proto=fd [ 47.746904][ T4172] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 47.747495][ T29] audit: type=1400 audit(47.625:10486): avc: denied { ioctl } for pid=4168 comm="syz.2.213" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.787845][ T29] audit: type=1400 audit(47.785:10487): avc: denied { create } for pid=4171 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.945300][ T4189] : Can't lookup blockdev [ 47.990275][ T4191] lo speed is unknown, defaulting to 1000 [ 48.162792][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 48.384522][ T4211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.396040][ T4211] FAT-fs (loop1): unable to read boot sector [ 48.424164][ T4214] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 48.912983][ T4233] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 48.912983][ T4233] program syz.5.233 not setting count and/or reply_len properly [ 49.104876][ T4238] FAULT_INJECTION: forcing a failure. [ 49.104876][ T4238] name failslab, interval 1, probability 0, space 0, times 0 [ 49.117762][ T4238] CPU: 0 UID: 0 PID: 4238 Comm: syz.4.232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.117796][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.117812][ T4238] Call Trace: [ 49.117820][ T4238] [ 49.117902][ T4238] __dump_stack+0x1d/0x30 [ 49.117927][ T4238] dump_stack_lvl+0xe8/0x140 [ 49.117948][ T4238] dump_stack+0x15/0x1b [ 49.117964][ T4238] should_fail_ex+0x265/0x280 [ 49.118027][ T4238] should_failslab+0x8c/0xb0 [ 49.118051][ T4238] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 49.118086][ T4238] ? proc_alloc_inode+0x34/0x90 [ 49.118182][ T4238] ? __d_lookup_rcu+0x251/0x2a0 [ 49.118286][ T4238] ? __pfx_proc_alloc_inode+0x10/0x10 [ 49.118424][ T4238] proc_alloc_inode+0x34/0x90 [ 49.118460][ T4238] alloc_inode+0x40/0x170 [ 49.118489][ T4238] new_inode+0x1d/0xe0 [ 49.118519][ T4238] proc_pid_make_inode+0x1f/0xd0 [ 49.118542][ T4238] proc_pident_instantiate+0x44/0x180 [ 49.118604][ T4238] proc_pident_lookup+0x115/0x1a0 [ 49.118698][ T4238] proc_tid_base_lookup+0x2b/0x40 [ 49.118735][ T4238] __lookup_slow+0x193/0x250 [ 49.118778][ T4238] lookup_slow+0x3c/0x60 [ 49.118810][ T4238] link_path_walk+0x753/0x900 [ 49.118908][ T4238] path_openat+0x1de/0x2170 [ 49.118932][ T4238] ? _parse_integer_limit+0x170/0x190 [ 49.118965][ T4238] do_filp_open+0x109/0x230 [ 49.119059][ T4238] ? __pfx_kfree_link+0x10/0x10 [ 49.119091][ T4238] do_sys_openat2+0xa6/0x110 [ 49.119130][ T4238] __x64_sys_openat+0xf2/0x120 [ 49.119232][ T4238] x64_sys_call+0x2e9c/0x2ff0 [ 49.119256][ T4238] do_syscall_64+0xd2/0x200 [ 49.119287][ T4238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.119336][ T4238] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.119375][ T4238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.119402][ T4238] RIP: 0033:0x7f89b337d590 [ 49.119417][ T4238] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 49.119461][ T4238] RSP: 002b:00007f89b1d9cf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 49.119546][ T4238] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f89b337d590 [ 49.119628][ T4238] RDX: 0000000000000002 RSI: 00007f89b1d9cfa0 RDI: 00000000ffffff9c [ 49.119640][ T4238] RBP: 00007f89b1d9cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 49.119651][ T4238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 49.119663][ T4238] R13: 00007f89b35c6218 R14: 00007f89b35c6180 R15: 00007ffd0d701ed8 [ 49.119687][ T4238] [ 49.564423][ T4246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 49.589609][ T4248] capability: warning: `syz.2.239' uses deprecated v2 capabilities in a way that may be insecure [ 49.643462][ T4254] loop2: detected capacity change from 0 to 512 [ 49.650501][ T4254] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 49.661143][ T4254] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.668531][ T4254] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.240: Block bitmap for bg 0 marked uninitialized [ 49.681890][ T4254] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.690877][ T4254] EXT4-fs (loop2): 1 orphan inode deleted [ 49.697432][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.729361][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.905883][ T4269] loop2: detected capacity change from 0 to 512 [ 49.914214][ T4269] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 49.929598][ T4271] loop4: detected capacity change from 0 to 512 [ 49.941681][ T4271] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.247: iget: bad i_size value: 38620345925642 [ 49.955449][ T4269] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.969126][ T4269] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.245: Block bitmap for bg 0 marked uninitialized [ 49.982855][ T4271] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.247: couldn't read orphan inode 15 (err -117) [ 49.995726][ T4269] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.998199][ T4271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.004832][ T4269] EXT4-fs (loop2): 1 orphan inode deleted [ 50.023165][ T4269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.078577][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.125011][ T4287] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 50.137370][ T4289] netem: change failed [ 50.143999][ T4282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.155498][ T4283] FAULT_INJECTION: forcing a failure. [ 50.155498][ T4283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.170033][ T4283] CPU: 0 UID: 0 PID: 4283 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.170068][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.170094][ T4283] Call Trace: [ 50.170173][ T4283] [ 50.170182][ T4283] __dump_stack+0x1d/0x30 [ 50.170209][ T4283] dump_stack_lvl+0xe8/0x140 [ 50.170234][ T4283] dump_stack+0x15/0x1b [ 50.170255][ T4283] should_fail_ex+0x265/0x280 [ 50.170344][ T4283] should_fail+0xb/0x20 [ 50.170435][ T4283] should_fail_usercopy+0x1a/0x20 [ 50.170484][ T4283] _copy_from_user+0x1c/0xb0 [ 50.170607][ T4283] restore_altstack+0x4b/0x2d0 [ 50.170673][ T4283] ? __set_task_blocked+0x23a/0x2a0 [ 50.170702][ T4283] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 50.170729][ T4283] ? _raw_spin_unlock_irq+0x26/0x50 [ 50.170766][ T4283] ? signal_setup_done+0x266/0x290 [ 50.170785][ T4283] ? xfd_validate_state+0x45/0xf0 [ 50.170864][ T4283] ? fpu__clear_user_states+0x63/0x1e0 [ 50.170894][ T4283] ? fpregs_mark_activate+0x66/0x140 [ 50.170923][ T4283] ? fpu__clear_user_states+0x63/0x1e0 [ 50.170998][ T4283] ? arch_do_signal_or_restart+0x2f3/0x480 [ 50.171021][ T4283] ? __rcu_read_unlock+0x4f/0x70 [ 50.171054][ T4283] x64_sys_call+0x2d3c/0x2ff0 [ 50.171131][ T4283] do_syscall_64+0xd2/0x200 [ 50.171168][ T4283] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.171194][ T4283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.171266][ T4283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.171294][ T4283] RIP: 0033:0x7fa7d4aeae09 [ 50.171311][ T4283] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 50.171328][ T4283] RSP: 002b:00007fa7d35b6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 50.171347][ T4283] RAX: ffffffffffffffda RBX: 00007fa7d4d95fa0 RCX: 00007fa7d4aeae09 [ 50.171424][ T4283] RDX: 00007fa7d35b6a80 RSI: 00007fa7d35b6bb0 RDI: 0000000000000021 [ 50.171438][ T4283] RBP: 00007fa7d35b7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.171452][ T4283] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 50.171467][ T4283] R13: 00007fa7d4d96038 R14: 00007fa7d4d95fa0 R15: 00007ffd1fe07328 [ 50.171504][ T4283] [ 50.434779][ T4296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'. [ 50.451665][ T410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 50.488577][ T410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 50.527804][ T410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 50.536331][ C0] hrtimer: interrupt took 44928 ns [ 50.588190][ T410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 39845 - 0 [ 50.602412][ T4313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.609706][ T4313] IPv6: NLM_F_CREATE should be set when creating new route [ 50.637979][ T4317] loop5: detected capacity change from 0 to 512 [ 50.658060][ T4317] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.670787][ T4324] loop1: detected capacity change from 0 to 512 [ 50.676766][ T4317] EXT4-fs (loop5): mount failed [ 50.703529][ T4324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.722643][ T410] bridge_slave_1: left allmulticast mode [ 50.728461][ T410] bridge_slave_1: left promiscuous mode [ 50.734312][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.745014][ T410] bridge_slave_0: left allmulticast mode [ 50.750726][ T410] bridge_slave_0: left promiscuous mode [ 50.756450][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.803923][ T4324] ================================================================== [ 50.812034][ T4324] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 50.819175][ T4324] [ 50.821511][ T4324] write to 0xffff88810d234f94 of 4 bytes by task 4337 on cpu 0: [ 50.829147][ T4324] xas_set_mark+0x12b/0x140 [ 50.833680][ T4324] __folio_start_writeback+0x1dd/0x440 [ 50.839172][ T4324] ext4_bio_write_folio+0x5ad/0x9f0 [ 50.844571][ T4324] mpage_process_page_bufs+0x4a1/0x620 [ 50.850053][ T4324] mpage_prepare_extent_to_map+0x786/0xc00 [ 50.855877][ T4324] ext4_do_writepages+0xa05/0x2750 [ 50.861009][ T4324] ext4_writepages+0x176/0x300 [ 50.865783][ T4324] do_writepages+0x1c3/0x310 [ 50.870395][ T4324] file_write_and_wait_range+0x156/0x2c0 [ 50.876052][ T4324] generic_buffers_fsync_noflush+0x45/0x120 [ 50.881956][ T4324] ext4_sync_file+0x1ab/0x690 [ 50.886640][ T4324] vfs_fsync_range+0x10a/0x130 [ 50.891446][ T4324] ext4_buffered_write_iter+0x34f/0x3c0 [ 50.897018][ T4324] ext4_file_write_iter+0xdbf/0xf00 [ 50.902238][ T4324] iter_file_splice_write+0x666/0xa60 [ 50.907619][ T4324] direct_splice_actor+0x156/0x2a0 [ 50.912746][ T4324] splice_direct_to_actor+0x312/0x680 [ 50.918125][ T4324] do_splice_direct+0xda/0x150 [ 50.922898][ T4324] do_sendfile+0x380/0x650 [ 50.927333][ T4324] __x64_sys_sendfile64+0x105/0x150 [ 50.932550][ T4324] x64_sys_call+0x2bb0/0x2ff0 [ 50.937239][ T4324] do_syscall_64+0xd2/0x200 [ 50.941764][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.947678][ T4324] [ 50.950005][ T4324] read to 0xffff88810d234f94 of 4 bytes by task 4324 on cpu 1: [ 50.957548][ T4324] xas_find_marked+0x5dc/0x620 [ 50.962333][ T4324] find_get_entry+0x5d/0x380 [ 50.966931][ T4324] filemap_get_folios_tag+0x92/0x210 [ 50.972229][ T4324] mpage_prepare_extent_to_map+0x320/0xc00 [ 50.978047][ T4324] ext4_do_writepages+0x708/0x2750 [ 50.983189][ T4324] ext4_writepages+0x176/0x300 [ 50.987960][ T4324] do_writepages+0x1c3/0x310 [ 50.992567][ T4324] filemap_write_and_wait_range+0x144/0x340 [ 50.998487][ T4324] filemap_invalidate_pages+0xa4/0x1a0 [ 51.003956][ T4324] kiocb_invalidate_pages+0x6e/0x80 [ 51.009170][ T4324] __iomap_dio_rw+0x5d4/0x1250 [ 51.013960][ T4324] iomap_dio_rw+0x40/0x90 [ 51.018301][ T4324] ext4_file_write_iter+0xad9/0xf00 [ 51.023532][ T4324] iter_file_splice_write+0x666/0xa60 [ 51.028920][ T4324] direct_splice_actor+0x156/0x2a0 [ 51.034045][ T4324] splice_direct_to_actor+0x312/0x680 [ 51.039432][ T4324] do_splice_direct+0xda/0x150 [ 51.044210][ T4324] do_sendfile+0x380/0x650 [ 51.048642][ T4324] __x64_sys_sendfile64+0x105/0x150 [ 51.053862][ T4324] x64_sys_call+0x2bb0/0x2ff0 [ 51.058552][ T4324] do_syscall_64+0xd2/0x200 [ 51.063082][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.068983][ T4324] [ 51.071312][ T4324] value changed: 0x0a000021 -> 0x04000021 [ 51.077033][ T4324] [ 51.079359][ T4324] Reported by Kernel Concurrency Sanitizer on: [ 51.085513][ T4324] CPU: 1 UID: 0 PID: 4324 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.095151][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.105315][ T4324] ================================================================== [ 51.198457][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.208311][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.219004][ T410] bond0 (unregistering): Released all slaves [ 51.230321][ T4305] lo speed is unknown, defaulting to 1000 [ 51.289570][ T410] hsr_slave_0: left promiscuous mode [ 51.295750][ T410] hsr_slave_1: left promiscuous mode [ 51.324794][ T410] team0 (unregistering): Port device team_slave_1 removed [ 51.334568][ T410] team0 (unregistering): Port device team_slave_0 removed [ 51.433692][ T4339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.801572][ T410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.849564][ T410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.899250][ T410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.980152][ T410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.052796][ T410] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.109623][ T410] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.149401][ T410] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.199338][ T410] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.261885][ T410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.309700][ T410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.368718][ T410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.429092][ T410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.490343][ T410] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.538091][ T410] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.588099][ T410] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.668217][ T410] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.731281][ T410] bridge_slave_1: left allmulticast mode [ 52.736971][ T410] bridge_slave_1: left promiscuous mode [ 52.742706][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.750363][ T410] bridge_slave_0: left allmulticast mode [ 52.756003][ T410] bridge_slave_0: left promiscuous mode [ 52.761699][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.770740][ T410] bridge_slave_1: left allmulticast mode [ 52.776395][ T410] bridge_slave_1: left promiscuous mode [ 52.782133][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.789772][ T410] bridge_slave_0: left allmulticast mode [ 52.795409][ T410] bridge_slave_0: left promiscuous mode [ 52.801092][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.809510][ T410] bridge_slave_1: left allmulticast mode [ 52.815306][ T410] bridge_slave_1: left promiscuous mode [ 52.820994][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.828757][ T410] bridge_slave_0: left allmulticast mode [ 52.834395][ T410] bridge_slave_0: left promiscuous mode [ 52.840145][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.848552][ T410] bridge_slave_1: left allmulticast mode [ 52.854266][ T410] bridge_slave_1: left promiscuous mode [ 52.860054][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.868094][ T410] bridge_slave_0: left allmulticast mode [ 52.873738][ T410] bridge_slave_0: left promiscuous mode [ 52.879642][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.098862][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.109050][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.118448][ T410] bond0 (unregistering): Released all slaves [ 53.127015][ T410] bond1 (unregistering): Released all slaves [ 53.135042][ T410] bond2 (unregistering): Released all slaves [ 53.248466][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.258435][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.268187][ T410] bond0 (unregistering): Released all slaves [ 53.276670][ T410] bond1 (unregistering): Released all slaves [ 53.349017][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.358800][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.368558][ T410] bond0 (unregistering): Released all slaves [ 53.439290][ T410] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.448095][ T410] bond_slave_0: left promiscuous mode [ 53.454610][ T410] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.463458][ T410] bond_slave_1: left promiscuous mode [ 53.469544][ T410] $Hÿ (unregistering): Released all slaves [ 53.531517][ T410] tipc: Left network mode [ 53.536016][ T410] tipc: Left network mode [ 53.545475][ T410] hsr_slave_0: left promiscuous mode [ 53.552049][ T410] hsr_slave_1: left promiscuous mode [ 53.557808][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.565274][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.572831][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.580476][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.589862][ T410] hsr_slave_0: left promiscuous mode [ 53.595552][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.602987][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.610538][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.617968][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.627060][ T410] hsr_slave_0: left promiscuous mode [ 53.632639][ T410] hsr_slave_1: left promiscuous mode [ 53.638247][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.645615][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.653149][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.660552][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.669997][ T410] hsr_slave_0: left promiscuous mode [ 53.675827][ T410] hsr_slave_1: left promiscuous mode [ 53.681493][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.688981][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.696631][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.704084][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.721347][ T410] veth1_macvtap: left promiscuous mode [ 53.726863][ T410] veth0_macvtap: left promiscuous mode [ 53.732415][ T410] veth1_vlan: left promiscuous mode [ 53.737680][ T410] veth0_vlan: left promiscuous mode [ 53.743456][ T410] veth1_macvtap: left promiscuous mode [ 53.749031][ T410] veth0_macvtap: left promiscuous mode [ 53.754537][ T410] veth1_vlan: left promiscuous mode [ 53.760110][ T410] veth0_vlan: left promiscuous mode [ 53.765937][ T410] veth1_macvtap: left promiscuous mode [ 53.771444][ T410] veth0_macvtap: left promiscuous mode [ 53.777014][ T410] veth1_vlan: left promiscuous mode [ 53.782248][ T410] veth0_vlan: left promiscuous mode [ 53.788089][ T410] veth1_macvtap: left promiscuous mode [ 53.793553][ T410] veth0_macvtap: left promiscuous mode [ 53.799146][ T410] veth1_vlan: left promiscuous mode [ 53.804393][ T410] veth0_vlan: left promiscuous mode [ 53.962088][ T410] team0 (unregistering): Port device team_slave_1 removed [ 53.971461][ T410] team0 (unregistering): Port device team_slave_0 removed [ 54.023410][ T410] team0 (unregistering): Port device team_slave_1 removed [ 54.032805][ T410] team0 (unregistering): Port device team_slave_0 removed [ 54.084227][ T410] team0 (unregistering): Port device team_slave_1 removed [ 54.093923][ T410] team0 (unregistering): Port device team_slave_0 removed [ 54.146049][ T410] team0 (unregistering): Port device team_slave_1 removed [ 54.155480][ T410] team0 (unregistering): Port device team_slave_0 removed [ 54.186168][ T9] lo speed is unknown, defaulting to 1000 [ 54.191967][ T9] infiniband syz0: ib_query_port failed (-19)